Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
File:                     98906779AB8F30762B65B3E6AD7F48326A08605E.mft (raw, json)
Hash identifier:          ml1NXDKapF4l7HQTd4Zj0MClhE6stp6fGsONpPF6sCU=
Subject key identifier:   05:3C:09:B5:2F:B9:AE:9A:8C:EC:90:41:0B:52:BC:54:45:A0:9C:3C
Authority key identifier: 98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E
Certificate issuer:       /CN=98906779AB8F30762B65B3E6AD7F48326A08605E
Certificate serial:       12355A0CE7D36CA3371B222CB0890C803DAE9201
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
Manifest number:          AC
Signing time:             Wed 29 May 2024 10:12:08 +0000
Manifest this update:     Wed 29 May 2024 10:07:08 +0000
Manifest next update:     Sat 01 Jun 2024 16:56:08 +0000
Files and hashes:         1: 3130332e3132362e3233332e302f32342d3234203d3e20313530393738.roa (hash: O1fqEI2/dxUhPnGgmsb3xk2y+JM4uUZ6GrE/FcQLL2o=)
                          2: 3130332e3132362e3233322e302f32342d3234203d3e20313530393738.roa (hash: jCnP9VTlHQEqJupIffxna2gpsI0aggupjru2xUvxlII=)
                          3: 3130332e3132362e3233322e302f32332d3233203d3e20313530393738.roa (hash: i+70UhGPlwhi4hekXfmpQHW2bnLIqD2RJNIB7BgwdAE=)
                          4: 98906779AB8F30762B65B3E6AD7F48326A08605E.crl (hash: 6h+Ou9FvW4F9a3g0eBCyF/t0J6QFy+RAFYEWixmt7Qs=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl
                          rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 14:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:35:5a:0c:e7:d3:6c:a3:37:1b:22:2c:b0:89:0c:80:3d:ae:92:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98906779AB8F30762B65B3E6AD7F48326A08605E
        Validity
            Not Before: May 29 10:07:08 2024 GMT
            Not After : Jun  1 16:56:08 2024 GMT
        Subject: CN=053C09B52FB9AE9A8CEC90410B52BC5445A09C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:bc:59:12:6d:77:cf:1f:8d:a9:18:90:4a:
                    68:ac:71:41:b2:07:bb:23:5e:97:ba:88:3a:0f:18:
                    18:fb:af:6c:3f:c9:72:4e:f2:b1:4c:2b:26:f9:55:
                    9e:b5:11:77:c3:a7:b8:6d:22:5a:90:36:ac:ec:d9:
                    69:fc:52:a9:7d:5b:e4:a0:c7:24:9a:bb:3d:2c:77:
                    22:e0:43:aa:9b:b7:38:bf:a3:19:20:06:e2:fa:91:
                    67:d7:0c:d6:f6:f3:54:6f:ec:c0:19:db:7b:15:32:
                    20:e7:5c:32:a7:9c:1c:5e:cb:c6:6a:59:12:89:8c:
                    e0:da:4b:e9:65:74:c8:e1:42:bf:22:37:2c:9e:53:
                    16:cf:14:9e:73:f3:bd:0e:e3:d8:6d:dd:80:36:4d:
                    e3:27:95:20:4c:b8:30:3e:41:78:2d:99:31:74:96:
                    53:9f:a3:45:c0:4a:3c:0d:eb:70:50:aa:18:d2:f1:
                    5e:7c:b2:ab:8a:78:0a:dc:c7:40:8e:65:3b:f2:1b:
                    2d:d7:5a:2f:ce:4b:d0:d7:b4:1b:44:d3:65:29:06:
                    ae:46:91:63:7d:1c:bf:6a:8e:81:d6:a2:d7:36:62:
                    88:f5:a6:c7:2f:c0:ea:c9:1c:5d:b5:ef:3b:c9:97:
                    d2:fd:86:79:fb:28:2a:3c:5a:af:b3:57:2b:35:9e:
                    1e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3C:09:B5:2F:B9:AE:9A:8C:EC:90:41:0B:52:BC:54:45:A0:9C:3C
            X509v3 Authority Key Identifier:
                keyid:98:90:67:79:AB:8F:30:76:2B:65:B3:E6:AD:7F:48:32:6A:08:60:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98906779AB8F30762B65B3E6AD7F48326A08605E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a40089-6041-45ed-8e44-a997c8acf480/0/98906779AB8F30762B65B3E6AD7F48326A08605E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f6:9a:15:1c:00:11:c3:0a:ad:20:da:52:b1:ac:90:57:43:
         fa:3f:05:34:c0:8b:d5:c2:3a:45:a8:43:bc:00:4a:3a:19:bd:
         d8:a1:d1:5e:44:84:0c:f9:76:dd:30:5b:60:0c:64:6b:e8:76:
         ff:29:88:a5:30:42:fb:cd:d1:89:85:ad:92:97:7f:a0:48:40:
         00:38:45:10:86:31:a3:d4:6f:18:8e:e1:71:e9:4c:10:09:f7:
         6b:2e:88:e4:d5:73:4f:8a:16:c0:18:89:6e:55:c6:57:c5:da:
         fa:1d:0c:56:fb:31:31:ec:ec:4a:ed:ee:6b:4e:67:75:f4:c5:
         60:0a:ce:51:0a:c4:9b:87:d4:6e:9e:2c:b9:4c:52:9c:d9:40:
         f9:a1:2d:ad:5d:65:ee:fd:fa:55:de:d1:9e:b9:78:72:b6:81:
         47:93:fc:fb:36:62:05:29:7f:39:81:cb:c0:98:79:92:52:ac:
         97:af:a4:6b:b7:b9:45:35:8d:0f:49:77:70:a2:ff:79:71:12:
         77:79:72:ba:86:46:40:e1:88:2d:28:3c:e9:05:10:1a:41:3d:
         a4:23:d3:8a:d0:63:1d:4e:8e:7a:43:bd:4c:89:a8:9a:b1:58:
         94:53:b3:04:46:dc:e0:b6:81:66:fe:af:47:dc:a1:2b:12:5b:
         ef:28:3e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 13:49:13 2024 by rpki-client on console-ams.rpki-client.org