Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft
File:                     DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json)
Hash identifier:          zFKLuF86Xxq6S2+zCNT+r6L6PFEAM7R9u4q5zoOgCUY=
Subject key identifier:   2D:FD:A7:38:86:15:B5:93:F4:07:2B:A4:60:AE:9A:07:B3:E3:88:0A
Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5
Certificate issuer:       /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5
Certificate serial:       6F7002D84378FF915947A278FDE90F85CAA01F9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft
Manifest number:          030A
Signing time:             Sat 18 May 2024 11:31:09 +0000
Manifest this update:     Sat 18 May 2024 11:26:09 +0000
Manifest next update:     Tue 21 May 2024 12:16:09 +0000
Files and hashes:         1: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: c2R1A0ymcSlLaO/w3U4Sm/ie5cR/u6N2fcnull8GPUM=)
                          2: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: iDMwiYdd0VFc30DjOXyV3YUQcHiMkIvSuDbXmdDxBhQ=)
                          3: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: CLZMp0OC+dar7xj6UnVWQjsWuZmdBGIXqsVElZY6xpk=)
                          4: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: E8pkHpGEkdEAshqfKtFeAdiIMvtPR4QVDcg2CRkJtgo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl
                          rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 12:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:70:02:d8:43:78:ff:91:59:47:a2:78:fd:e9:0f:85:ca:a0:1f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5
        Validity
            Not Before: May 18 11:26:09 2024 GMT
            Not After : May 21 12:16:09 2024 GMT
        Subject: CN=2DFDA7388615B593F4072BA460AE9A07B3E3880A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:cb:5f:5f:f9:f6:17:35:b7:32:70:d2:dd:
                    81:f3:ae:72:a4:63:d1:51:70:99:2c:70:b1:f9:55:
                    0e:07:68:ea:d1:fc:68:48:0a:a1:74:60:51:83:5d:
                    d8:a8:a8:50:d7:b3:dd:fd:fc:8a:fb:44:ba:e8:d1:
                    92:f9:77:39:12:26:30:95:23:3d:ca:d4:f5:73:f9:
                    ef:a3:5d:b6:c9:01:b0:46:67:01:5c:4d:1b:d8:83:
                    6b:ff:7e:58:84:fd:a2:06:3d:b5:d8:2b:63:96:02:
                    de:7a:58:5a:67:fc:a5:aa:3b:32:18:68:aa:4d:3b:
                    16:0f:86:16:c1:6b:75:8d:c7:f6:4f:69:0c:15:9c:
                    56:90:c8:4e:9f:4e:9f:90:eb:f3:9c:57:8d:9d:f8:
                    d9:24:0b:5c:1d:cd:6b:5d:65:6d:4f:3d:2b:90:48:
                    89:e4:6b:2b:08:4c:44:a0:27:23:c9:dc:52:69:12:
                    49:81:e9:69:e8:09:f0:b5:71:b6:87:08:01:f6:5a:
                    80:46:bc:c9:1d:4d:4c:d4:6a:7c:0d:10:4b:88:a6:
                    6a:51:2f:f9:1d:11:64:c9:5b:9f:9f:b7:a1:bf:1b:
                    91:37:44:a5:f8:41:f3:a0:ca:dc:8e:2c:a7:48:4d:
                    f6:87:9a:f0:f1:6f:ff:cd:6a:a3:4e:6b:a9:8e:1d:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FD:A7:38:86:15:B5:93:F4:07:2B:A4:60:AE:9A:07:B3:E3:88:0A
            X509v3 Authority Key Identifier:
                keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:32:a1:87:53:14:a2:95:b7:d2:b3:46:89:b9:4b:c6:37:95:
         5a:00:cf:50:ce:50:24:04:2c:0f:d0:e6:fd:00:0e:fd:e8:d2:
         31:0f:05:1f:e0:50:f2:15:1a:44:0c:82:f0:84:01:23:fa:ea:
         cb:3b:48:c8:0b:e3:16:30:ba:f7:6c:bd:b4:c4:60:f8:24:1b:
         1f:1f:1d:a6:d3:62:0f:c5:50:db:29:24:2f:47:5b:e0:d7:66:
         e0:91:ff:d6:93:d9:d0:88:b8:ff:31:b8:2e:66:cf:4c:90:32:
         8f:b5:72:a9:45:35:55:7c:94:c5:eb:82:3f:99:33:69:51:ad:
         62:4c:85:6f:2f:d1:c7:28:f7:33:06:b4:64:ca:b8:a9:89:53:
         0f:7f:b9:c0:fc:d8:a2:cb:3c:7d:6b:5e:13:d1:0b:0e:ea:9b:
         3e:d5:20:5e:d5:3d:97:94:94:c9:30:44:0f:40:6b:51:13:85:
         b7:6c:cf:82:16:8e:c4:43:73:df:eb:8e:bd:87:c9:46:2f:c0:
         a8:dd:bf:98:db:45:63:64:fd:a7:df:38:15:2e:f7:d4:e5:84:
         37:a0:0c:e1:dc:71:c1:ac:5f:a1:62:a3:47:bf:6a:8c:08:14:
         d4:12:ec:6f:dc:38:ea:96:3f:77:dd:24:12:a6:10:02:0e:fd:
         36:23:5f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:14:47 2024 by rpki-client on console-fra.rpki-client.org