Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft
File:                     604C441ACDF554F380D7FED8F68B2EC7FB780413.mft (raw, json)
Hash identifier:          +AHDN0U0aqqmBs+S5+q4fG9S61/Suzbgv/22ja/OQZ0=
Subject key identifier:   EC:6C:8F:91:63:FB:09:AE:84:C0:5A:79:CF:89:16:3F:12:CC:A8:99
Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13
Certificate issuer:       /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413
Certificate serial:       1A18F251D6305BF8B5F7FB8E7CC7DCA7B4947C75
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft
Manifest number:          FA
Signing time:             Sun 19 May 2024 03:30:54 +0000
Manifest this update:     Sun 19 May 2024 03:25:54 +0000
Manifest next update:     Wed 22 May 2024 09:09:54 +0000
Files and hashes:         1: 604C441ACDF554F380D7FED8F68B2EC7FB780413.crl (hash: zKzAVZ/j+rT3AayDCErc2M1q7e7Q78PD3SbMBLxrSFs=)
                          2: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: xf6aYFANRi2gXj+4Ef83dW2Y4cnlFa6Ygd8LC1iqxNs=)
                          3: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: 7MNoYnavSZ2Lsl+d/rgaDYvJP0Rx15KwE2XJh4yR6xs=)
                          4: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: ql7Skka0uOPnauoBSwvhCAfyiNfmTp/cA/o8dwTMOZc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl
                          rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:18:f2:51:d6:30:5b:f8:b5:f7:fb:8e:7c:c7:dc:a7:b4:94:7c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413
        Validity
            Not Before: May 19 03:25:54 2024 GMT
            Not After : May 22 09:09:54 2024 GMT
        Subject: CN=EC6C8F9163FB09AE84C05A79CF89163F12CCA899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:ba:73:d4:9a:e5:99:40:c8:b0:65:e1:ad:
                    b4:02:51:b1:62:3b:ba:bb:17:e9:8a:82:ab:d1:34:
                    8b:02:af:81:26:ec:8e:23:c8:db:e7:e1:9d:d1:67:
                    78:66:c2:80:96:e6:44:f5:2c:8e:a2:93:c9:63:31:
                    a7:ea:61:12:f0:9c:d5:29:1e:f9:c3:e5:e6:78:cd:
                    02:65:e2:7d:43:fb:31:80:1d:52:60:56:9c:11:90:
                    64:72:28:4d:26:e5:bf:f5:e8:21:f7:b8:7f:e6:c1:
                    8e:b3:0e:12:98:34:db:82:f2:08:70:31:ae:0e:41:
                    e4:2f:99:0a:dc:d7:a3:fc:59:86:8b:ad:18:25:0d:
                    6a:4f:43:a7:9b:61:4f:53:ee:d2:f4:55:ef:72:a0:
                    74:8f:b1:70:42:7e:cd:eb:b8:e6:5e:f5:64:1a:18:
                    86:e4:b1:c5:24:b8:fd:e5:19:44:1a:b8:af:08:da:
                    d9:0e:c1:28:39:ef:29:c2:44:36:49:9e:b7:40:5b:
                    0a:a9:9f:68:3c:28:3f:87:80:dc:c7:e1:fc:b8:98:
                    7a:b6:49:2b:af:ef:44:72:09:16:c3:95:7c:ec:66:
                    74:1c:a0:ab:c7:23:ab:02:ca:d8:22:ac:e2:fe:e7:
                    d0:e9:16:83:05:f2:6f:e1:ce:8a:0e:a7:e8:a2:34:
                    4c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6C:8F:91:63:FB:09:AE:84:C0:5A:79:CF:89:16:3F:12:CC:A8:99
            X509v3 Authority Key Identifier:
                keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:b3:12:c0:f1:d7:4c:b1:5f:70:8f:20:4c:48:6b:e0:b4:6c:
         83:aa:8a:93:c5:a1:98:20:e6:71:34:46:0e:d0:2a:14:3c:2d:
         ac:53:98:24:56:e9:3c:17:ba:cb:2e:1b:43:14:7f:bf:f4:7a:
         73:6b:d4:a0:36:26:b4:fc:64:ac:bd:d9:b7:12:57:5a:27:6e:
         6c:17:23:28:67:3d:10:7a:53:cf:a6:f6:52:e0:43:c7:bf:5b:
         57:14:56:03:31:76:7d:60:de:dd:32:fe:d1:2a:04:d1:5e:43:
         54:7c:e8:83:ac:ed:22:c3:3b:92:90:1e:78:48:97:eb:1c:fa:
         e9:63:c8:11:1f:45:a9:73:fb:b7:d2:aa:e4:83:5b:c5:08:08:
         14:21:85:3f:d8:00:06:2a:84:7d:e1:1c:28:8a:7a:dc:f2:4b:
         a0:10:76:24:f6:8d:d7:f2:ff:31:b9:2c:5a:e8:f0:69:37:f1:
         8e:a2:59:c6:39:ab:50:54:19:a5:dd:a8:60:28:59:45:94:93:
         c4:47:bb:73:0b:b2:93:2c:a3:a1:c0:02:18:bc:6d:85:3e:47:
         f4:93:aa:ec:c0:5f:3b:53:f4:6b:fd:bf:72:6d:ce:51:7c:af:
         23:6b:68:5a:31:01:c8:f6:c2:78:42:39:b7:70:d5:5f:eb:07:
         15:3c:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:48:18 2024 by rpki-client on console-fra.rpki-client.org