Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft
File:                     41820333252DF92B1DBA238F558CC8D822C768EF.mft (raw, json)
Hash identifier:          LTEKdCYHb128TE7ICMJ/1qhxxaHkFILI4grl61txNNs=
Subject key identifier:   18:9C:F4:AC:A7:B0:A7:3D:67:DE:03:6F:66:C0:A1:6E:18:CC:B7:59
Authority key identifier: 41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF
Certificate issuer:       /CN=41820333252DF92B1DBA238F558CC8D822C768EF
Certificate serial:       1F0E13C28ED7E01E9BD812848740FD20AADC17E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft
Manifest number:          D1
Signing time:             Thu 30 May 2024 00:51:04 +0000
Manifest this update:     Thu 30 May 2024 00:46:04 +0000
Manifest next update:     Sun 02 Jun 2024 08:38:04 +0000
Files and hashes:         1: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: hxfBRBAVhM2xZlcKk0WyDOCqux5nYUYy5is3DJ5HmbM=)
                          2: 41820333252DF92B1DBA238F558CC8D822C768EF.crl (hash: 9OhKSoxBnR8QsaXY1pvWqOpQb/eibwL0J0yhTYeeW4A=)
                          3: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: ueEktd1sAwmpdQ74SOzvsBDLzHoQEwnVisNVfqRC7tw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl
                          rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 01:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0e:13:c2:8e:d7:e0:1e:9b:d8:12:84:87:40:fd:20:aa:dc:17:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41820333252DF92B1DBA238F558CC8D822C768EF
        Validity
            Not Before: May 30 00:46:04 2024 GMT
            Not After : Jun  2 08:38:04 2024 GMT
        Subject: CN=189CF4ACA7B0A73D67DE036F66C0A16E18CCB759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:f1:35:60:79:bf:15:7b:e4:c2:dc:91:c4:
                    50:35:20:15:ef:0a:d4:a1:31:64:f2:b7:c5:96:9c:
                    98:7b:d9:14:78:c3:d8:61:0a:85:a4:fe:52:06:e0:
                    32:6e:2d:ce:1e:5d:2a:de:30:79:8a:84:12:2c:d1:
                    52:37:15:34:e8:aa:c7:46:bf:b1:84:5a:48:30:78:
                    0f:2c:33:6f:9d:e2:3f:2a:47:50:08:b0:3e:ff:86:
                    a3:66:c3:99:ac:25:b6:0b:cf:62:85:8f:d9:9c:66:
                    21:47:39:0f:79:7f:fd:ab:a8:fa:e8:7f:c4:49:9d:
                    53:65:cd:af:be:dc:93:37:1d:60:35:cb:0d:4a:ed:
                    0c:7a:e9:49:f9:84:66:0f:e9:d1:19:d9:3d:e9:08:
                    d5:15:8d:cd:27:80:2e:96:24:1a:2a:a2:04:13:43:
                    7b:bd:79:15:8d:59:62:3b:99:6c:3b:13:d6:f0:f3:
                    d2:ec:b8:25:27:83:86:64:36:a0:ca:5e:ee:f3:d6:
                    48:cd:70:d3:b2:a7:68:28:3f:5a:35:1b:0e:dd:64:
                    79:fc:13:a1:c9:a7:58:f6:1f:12:d0:b4:a5:e6:46:
                    af:76:14:c5:71:12:4e:21:b9:b0:a6:28:fd:a2:33:
                    7c:7b:17:06:eb:bf:84:33:86:4b:35:2e:ab:ce:fb:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9C:F4:AC:A7:B0:A7:3D:67:DE:03:6F:66:C0:A1:6E:18:CC:B7:59
            X509v3 Authority Key Identifier:
                keyid:41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e1:15:35:a8:11:00:ce:b1:49:2f:7e:44:7c:40:34:47:3f:
         3f:3c:80:76:a5:04:e0:ce:66:24:72:f9:c9:a2:b0:97:56:1a:
         34:4c:9c:e5:f2:de:6a:64:11:96:56:ad:34:10:7b:14:c1:7b:
         4a:34:d6:85:5e:72:ed:70:70:4b:aa:80:e2:ea:ca:fe:cb:65:
         f8:2a:b5:28:d4:46:fe:47:b2:7e:a5:b2:14:36:20:4e:90:56:
         29:55:64:cd:90:31:69:23:21:a9:98:ce:06:fd:ff:36:85:af:
         32:72:bd:c1:2a:6b:31:a7:f0:3d:91:2e:b7:8e:16:1d:ff:7e:
         df:a6:29:3a:29:55:8e:a0:35:23:b7:01:63:94:f5:98:f6:e6:
         8b:05:3e:a6:f5:2b:b4:08:05:95:04:3c:c5:92:90:09:83:70:
         4f:07:f3:c1:32:e7:62:04:5f:97:f4:16:5f:6b:51:8a:84:ce:
         a7:87:1e:a6:9e:2d:3d:f3:a2:ba:99:5e:98:7b:1e:0c:d1:63:
         7e:02:8e:8e:6d:5c:31:11:41:d3:81:75:c8:b7:1d:20:c7:5b:
         31:b8:14:19:8d:72:ef:a9:7e:3c:7d:44:b1:ba:23:21:09:12:
         d8:a3:ad:5a:01:99:de:49:ec:f4:61:2a:c6:56:22:85:3e:8c:
         b4:63:bf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 01:36:07 2024 by rpki-client on console-ams.rpki-client.org