Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft
File:                     F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft (raw, json)
Hash identifier:          vrrFWVtclxj5mJJuBXjmykjV1Fgs2gcoc4lc8botYvs=
Subject key identifier:   27:27:B5:33:F9:60:A1:25:E6:87:16:56:52:8F:E6:CD:9B:AF:AA:AA
Authority key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA
Certificate issuer:       /CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA
Certificate serial:       4378CE7138FEA475DAC6C9B8EE56761BA7AFD19E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft
Manifest number:          0138
Signing time:             Sat 18 May 2024 02:50:32 +0000
Manifest this update:     Sat 18 May 2024 02:45:32 +0000
Manifest next update:     Tue 21 May 2024 13:50:32 +0000
Files and hashes:         1: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: zlUpZq1wluBG0R5BlA1DsydvucjJo7RtujVUFjwNtr0=)
                          2: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: f2v++USOSIEtpX1vMolGHnssvW1Fe0y44tKGt8gYcBU=)
                          3: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl (hash: n66gRk4vO3CzcJ24zGVeamQ4a9vBWYSf6pSMDYwHLSc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl
                          rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 05:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:78:ce:71:38:fe:a4:75:da:c6:c9:b8:ee:56:76:1b:a7:af:d1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA
        Validity
            Not Before: May 18 02:45:32 2024 GMT
            Not After : May 21 13:50:32 2024 GMT
        Subject: CN=2727B533F960A125E6871656528FE6CD9BAFAAAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:30:99:5f:f3:66:95:b7:89:82:e4:22:96:
                    62:3f:8a:a5:a4:b6:37:8e:63:4c:94:1f:91:1b:82:
                    41:20:cc:6d:81:f0:de:d8:74:24:8f:dc:d5:9c:8f:
                    2c:aa:84:1b:11:b7:dd:e6:ea:5d:28:10:b6:dd:3c:
                    06:4a:f4:2e:73:c3:dd:c1:ca:33:80:65:37:00:56:
                    d5:87:3f:82:9e:ea:c3:06:67:81:f8:ea:92:3f:56:
                    0c:3d:5f:a7:38:c8:d2:84:3d:b0:fc:4f:f3:03:9c:
                    ec:5b:c5:49:3a:83:be:b3:0e:37:28:f8:bf:cc:2a:
                    d7:86:27:1e:67:8c:56:0a:5c:11:17:2c:73:da:3e:
                    34:13:ab:f1:12:a1:45:3d:7c:ac:73:b0:0e:29:0d:
                    b7:cc:d5:a3:0f:52:1d:86:b5:75:f2:77:20:bf:c8:
                    2c:7d:db:ad:61:6b:3b:f2:f9:ad:cc:c2:a9:b5:25:
                    ab:ee:6d:97:3f:42:49:4b:a4:15:0d:ee:39:89:f1:
                    ea:ab:1b:11:4d:32:3d:20:b8:95:eb:8e:f7:7c:50:
                    db:f6:84:1e:1d:64:db:0a:5d:5a:38:70:e1:a6:e5:
                    c0:d0:70:0f:59:a2:5b:54:8f:04:bd:ed:f8:eb:f5:
                    d8:0c:a1:9c:15:16:bd:89:ee:0e:c9:48:6f:29:ef:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:27:B5:33:F9:60:A1:25:E6:87:16:56:52:8F:E6:CD:9B:AF:AA:AA
            X509v3 Authority Key Identifier:
                keyid:F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:42:cd:1e:48:a2:54:00:cd:a3:b0:83:c4:d9:cd:87:16:61:
         f9:23:d1:27:43:3d:ec:d8:f6:0f:8c:05:72:2e:3c:e3:74:10:
         70:21:98:dd:67:54:52:1e:9a:35:ed:c0:f4:e4:d5:70:95:7f:
         8f:74:d1:36:55:37:16:54:14:f7:55:b0:1a:41:5f:a2:93:7a:
         cd:97:6f:e8:b4:a4:58:d1:06:f2:0e:63:ef:3c:43:a7:42:43:
         d3:ec:30:67:db:e0:9b:af:e6:b1:7b:96:51:5b:16:53:6f:1c:
         d0:a8:16:58:32:dd:0e:67:af:96:ff:df:03:f6:91:37:a2:c6:
         c9:07:fa:0f:d4:41:d8:cc:c7:70:16:cf:27:d5:28:45:0a:1d:
         04:e1:40:03:b0:3e:4c:66:c5:56:9f:e0:8c:7f:fd:59:1c:ba:
         9a:ef:94:e2:72:02:96:88:f2:9c:a7:f2:98:ec:82:d8:6c:2e:
         3a:bf:22:99:ce:de:6c:ef:e7:4e:0b:f7:da:eb:b2:d4:27:3b:
         09:f9:53:b4:09:9c:e7:a8:9b:07:37:22:82:0b:9c:27:bf:dc:
         de:10:9b:b3:fd:82:c1:f5:40:45:cb:75:bc:47:b7:47:1c:86:
         b7:25:f1:cf:4b:db:71:94:76:10:ca:90:85:1a:e7:8d:92:48:
         a1:0a:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:47:49 2024 by rpki-client on console-fra.rpki-client.org