Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
File:                     4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json)
Hash identifier:          NtEdnRLSC0m2VXOdCM1LYs4NDbSHSc8jOfg/BiBWaxg=
Subject key identifier:   26:5C:8B:A4:DB:7E:28:3D:5D:A2:71:CB:BF:4B:0C:56:B6:87:19:03
Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2
Certificate issuer:       /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
Certificate serial:       47B6862DDC2050125920A268E1401F68DCDB56AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
Manifest number:          0435
Signing time:             Tue 28 May 2024 22:20:59 +0000
Manifest this update:     Tue 28 May 2024 22:15:59 +0000
Manifest next update:     Sat 01 Jun 2024 05:56:59 +0000
Files and hashes:         1: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: S0Ss64BAmvfsk2oaHdUBH4smyBPCC9kv50fNLBGxA54=)
                          2: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: qJDqaZW0vE3bv1Adkjpvd0ZsZoczhdAe78FZKRPFQPA=)
                          3: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: Snpfp2Omnn1E3MHdKJtGFyzgjYDT292w/OwKU0FJjj4=)
                          4: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: ONsBPExlFbykItHijaoPrdUzlUXFNHLKUsxMHqiRNDY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl
                          rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 04:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b6:86:2d:dc:20:50:12:59:20:a2:68:e1:40:1f:68:dc:db:56:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
        Validity
            Not Before: May 28 22:15:59 2024 GMT
            Not After : Jun  1 05:56:59 2024 GMT
        Subject: CN=265C8BA4DB7E283D5DA271CBBF4B0C56B6871903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:7e:b6:99:7c:e7:88:00:bc:39:c0:39:60:
                    bd:bb:82:e4:ad:a1:5b:ad:95:af:4c:7d:9c:88:9c:
                    7f:92:8d:c3:c1:af:59:81:5f:1c:40:1a:c1:73:85:
                    a5:e6:67:cc:be:8e:34:14:5b:d7:a0:a8:db:eb:ce:
                    0b:e8:48:21:cc:d7:9b:41:5d:74:08:e1:b6:d8:01:
                    5a:e5:9b:26:95:0e:40:2c:cb:cd:b1:ac:63:e0:c9:
                    b8:f9:1c:e7:d9:49:44:79:ae:92:cb:eb:a1:1d:64:
                    68:a9:c8:92:00:1f:47:74:1c:b3:91:83:bb:0e:8d:
                    a4:a7:30:96:78:0a:5d:6b:d9:69:e7:e1:a2:cb:21:
                    e8:0a:b1:f9:0f:c0:72:0d:c2:94:b3:2f:bb:34:0f:
                    42:5b:d2:50:d5:c8:40:32:34:02:7d:4d:63:ff:a5:
                    1b:ee:10:03:0d:a9:b1:71:97:90:f6:0e:24:ee:9d:
                    87:5e:8a:aa:8c:bb:91:4b:ab:ad:08:71:04:20:e9:
                    94:34:48:1f:9b:86:00:2c:3b:ab:0a:02:2b:6d:24:
                    43:bd:a9:65:95:ec:e0:f6:81:94:b7:fc:7c:b0:23:
                    43:07:e4:88:a3:92:85:f7:c7:96:d7:23:bc:82:f2:
                    d0:a6:ce:ad:40:9d:e1:e5:bb:ea:d1:16:15:e1:ea:
                    56:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5C:8B:A4:DB:7E:28:3D:5D:A2:71:CB:BF:4B:0C:56:B6:87:19:03
            X509v3 Authority Key Identifier:
                keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:42:10:13:34:b2:b5:12:a8:99:89:1a:03:a8:35:9f:8e:0b:
         7a:57:03:f2:9a:e9:05:14:e7:4d:da:ef:20:c0:9f:d7:ff:ac:
         80:60:00:44:49:fe:2b:3c:df:de:26:d9:d7:31:58:7b:99:fd:
         85:0c:8d:e3:ad:78:fe:1a:35:dc:29:21:b6:e4:7c:85:00:66:
         02:e4:a6:c5:0a:41:89:a3:21:99:1c:57:97:a3:34:42:2b:2c:
         55:50:1f:aa:4a:96:ec:6b:ab:60:a4:36:71:ec:5b:bc:3f:9e:
         d9:67:63:6c:39:17:af:5f:2e:29:18:ff:70:e6:b7:41:0d:1b:
         de:23:23:b2:34:c3:4f:41:f2:d2:16:46:88:48:b1:7e:4d:04:
         a9:51:3d:f9:d9:90:93:d9:a5:fb:ef:4e:dd:1e:2d:23:4a:f1:
         0c:37:27:2a:c8:9d:39:1d:45:78:b6:af:95:72:13:e2:92:8f:
         28:06:c4:43:a1:11:df:e8:d8:ae:56:4a:ae:7e:92:52:f3:1e:
         83:0e:ff:78:82:02:26:cb:8b:8d:90:75:50:58:5f:57:eb:d1:
         bb:20:e2:80:ac:d8:5a:cd:bc:87:9f:99:d0:a3:44:7a:f0:1e:
         e1:54:7a:9c:58:75:cb:5b:35:3f:98:27:40:ea:1d:05:17:3a:
         8f:dd:fb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 02:24:43 2024 by rpki-client on console-ams.rpki-client.org