Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft
File:                     3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft (raw, json)
Hash identifier:          BHMCkF3mLyihEtn3qCDHQ0RVxUqaqo46snY2jt7aJTI=
Subject key identifier:   FA:F7:B0:9F:D2:5C:79:46:D8:05:57:12:94:8F:31:03:96:DF:5A:30
Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30
Certificate issuer:       /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530
Certificate serial:       7B932ED377447AE7396D0CFDCB0E17AA3C3AC7FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft
Manifest number:          BB
Signing time:             Sun 19 May 2024 13:12:00 +0000
Manifest this update:     Sun 19 May 2024 13:07:00 +0000
Manifest next update:     Wed 22 May 2024 17:39:00 +0000
Files and hashes:         1: 3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl (hash: sdbPTvkgTTjnBO99rZ1BpQjY9rnws35YeTlmuCmEBnk=)
                          2: 3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (hash: g/ChgrLQc9aKmKTkPLKvFQ82SdQEkpSXUef1u80fyvo=)
                          3: 3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (hash: TvX5alwAkygDG9mtc84ZvWFXvtuvRWJmPKN/WDkOyYo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl
                          rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:93:2e:d3:77:44:7a:e7:39:6d:0c:fd:cb:0e:17:aa:3c:3a:c7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530
        Validity
            Not Before: May 19 13:07:00 2024 GMT
            Not After : May 22 17:39:00 2024 GMT
        Subject: CN=FAF7B09FD25C7946D8055712948F310396DF5A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:2c:b2:e9:80:0c:0b:03:e0:b3:43:96:25:
                    1c:90:8c:82:7f:2f:4c:dc:e7:4d:75:f5:02:96:d0:
                    64:64:1a:f2:bb:68:87:46:1b:2e:02:d1:61:2c:58:
                    d9:93:76:ef:d5:f6:c4:a3:10:f2:f4:1b:dc:de:d3:
                    7a:47:87:69:5f:9b:e3:16:98:33:89:64:b9:f7:34:
                    cc:cb:bb:d0:16:ea:63:f4:94:cb:f1:69:21:08:26:
                    b9:c9:5a:f1:81:92:64:5b:00:f2:b1:d8:a1:70:59:
                    81:4b:e6:b4:a9:71:97:08:75:53:84:25:a8:6d:36:
                    b2:49:00:f4:08:75:df:f1:0f:0b:03:35:4f:ed:77:
                    0d:09:38:ac:51:06:d5:3a:fc:37:08:d9:30:48:26:
                    20:93:d5:ff:23:4b:c0:88:47:8a:2d:25:60:59:bc:
                    60:3f:b9:dd:b4:c6:46:3b:89:52:e4:45:dc:c9:ad:
                    27:55:1d:0d:4f:26:51:f8:1c:3c:9c:43:02:ea:ec:
                    30:e0:d3:28:f0:d4:4e:24:2a:ec:1e:dc:31:d1:38:
                    50:06:a7:f1:02:fb:39:ef:c4:d6:27:0c:30:db:98:
                    3b:ce:0c:ce:4f:dc:9f:54:f6:0c:a3:f5:e2:e0:30:
                    ed:d4:7d:4e:35:ed:fc:40:e1:65:a5:80:c9:2f:9f:
                    9c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F7:B0:9F:D2:5C:79:46:D8:05:57:12:94:8F:31:03:96:DF:5A:30
            X509v3 Authority Key Identifier:
                keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:94:33:85:e8:d0:be:fd:d9:ce:9f:32:e5:7e:ff:45:b4:11:
         c2:b2:4a:df:44:a6:c9:49:d7:72:37:b4:2d:58:70:79:62:51:
         cd:e4:fc:db:eb:b5:5a:61:19:ca:8b:92:89:48:e7:4e:94:da:
         89:b7:41:3d:4e:2f:d8:33:f8:8b:89:05:0b:20:e9:14:4d:01:
         28:d4:7c:c8:d8:e2:e0:9e:c0:5f:6d:8a:e7:36:07:ab:0f:64:
         c7:18:c1:8c:a6:ba:bf:21:1e:d9:69:c7:05:04:af:c9:76:2f:
         01:78:18:00:6d:d6:58:c8:c4:2d:c7:92:3d:e0:eb:9a:ba:87:
         11:fd:e6:27:3a:49:09:25:f0:18:7a:3b:6e:72:77:3b:3c:31:
         99:7d:4c:96:94:f6:bb:73:04:c8:5e:64:97:69:90:ec:0c:c0:
         ee:9b:fa:4e:27:88:f7:ce:b5:68:a5:50:b3:d7:8e:3a:87:ab:
         86:99:10:c3:b8:e8:29:08:0a:83:21:65:45:97:cc:f3:11:f9:
         7d:d0:28:8c:ee:ce:4f:9b:3a:08:96:66:e2:0d:c4:a0:d5:64:
         85:1f:e1:de:b6:f1:e7:37:78:91:78:a2:0c:d3:a3:33:00:48:
         8c:f3:b8:b0:f2:57:7d:08:e4:e9:11:31:c6:86:90:ca:42:25:
         a9:04:5c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 13:52:39 2024 by rpki-client on console-fra.rpki-client.org