Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft
File:                     2FD08E6755CF1CCAAF9D5834449797848A706B57.mft (raw, json)
Hash identifier:          zrSVcoG97oOjx4djS6TckHsP8ZFmx3GP7Q6rBYgO9I4=
Subject key identifier:   A2:A2:BF:F0:B4:2C:C9:0E:97:88:E3:F5:8D:6F:E8:19:F1:68:D2:A7
Authority key identifier: 2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57
Certificate issuer:       /CN=2FD08E6755CF1CCAAF9D5834449797848A706B57
Certificate serial:       62920941F5D6396151DC183AEECA1560FFEF6F05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft
Manifest number:          02D7
Signing time:             Sat 18 May 2024 09:41:47 +0000
Manifest this update:     Sat 18 May 2024 09:36:47 +0000
Manifest next update:     Tue 21 May 2024 21:35:47 +0000
Files and hashes:         1: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: 5ACqkYa3lW13MP5k1zya6gKoWLw3DuMXV0GuE/7jBHc=)
                          2: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: cVss+GNCxzlaRPwW8fI7jwCowKrnBFWD/1oK8Q9T/EA=)
                          3: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: e1a1IrN8j9v6kD5qmaaGCGwo//O5BqNQ61zjY+ZLkKU=)
                          4: 2FD08E6755CF1CCAAF9D5834449797848A706B57.crl (hash: XbsnlPVJd+/RfcMR8btirXyBfL83XZBh1s06tdIH5AY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl
                          rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 14:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:92:09:41:f5:d6:39:61:51:dc:18:3a:ee:ca:15:60:ff:ef:6f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FD08E6755CF1CCAAF9D5834449797848A706B57
        Validity
            Not Before: May 18 09:36:47 2024 GMT
            Not After : May 21 21:35:47 2024 GMT
        Subject: CN=A2A2BFF0B42CC90E9788E3F58D6FE819F168D2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:fa:d9:36:ba:ca:b6:a1:0e:71:01:25:57:
                    d7:ee:67:dd:25:07:03:da:3a:dc:1f:36:7e:56:67:
                    6e:fa:f3:36:11:db:8a:af:bb:95:ff:cd:29:80:64:
                    f1:56:84:e4:03:67:50:09:ae:03:66:95:7f:38:c7:
                    35:de:65:6b:96:72:06:0c:71:d3:2a:fe:aa:55:b9:
                    a9:3c:83:57:76:0a:ae:59:4c:b0:22:96:7a:85:0e:
                    28:12:24:95:a5:6e:c1:4c:fd:3b:87:3b:fa:84:a1:
                    33:22:b5:ab:6f:21:58:d5:7e:7b:22:38:a5:d9:af:
                    3e:72:9d:7c:8c:9d:c4:19:5a:cf:01:a5:3d:bd:41:
                    45:84:ca:c9:ac:66:a6:48:1b:1f:a1:df:0d:72:7d:
                    b4:1a:7b:ba:a5:bd:23:69:06:fb:6d:b5:5f:9b:4b:
                    e8:ce:05:47:59:3e:4e:97:35:ef:50:b4:d5:96:4e:
                    23:f0:df:4f:fa:a5:63:d8:2b:3a:a7:9c:1e:93:a4:
                    00:38:01:4e:c7:0a:a4:6e:33:94:ef:ff:3f:95:ce:
                    8e:2a:3b:24:d5:90:75:4a:5d:fa:ef:60:47:1e:14:
                    7f:4b:1b:0d:f1:4b:41:6f:39:2a:76:2c:e7:58:ca:
                    cf:b4:aa:b6:4c:dc:51:c4:44:03:fc:5d:13:23:73:
                    8d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A2:BF:F0:B4:2C:C9:0E:97:88:E3:F5:8D:6F:E8:19:F1:68:D2:A7
            X509v3 Authority Key Identifier:
                keyid:2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b4:ea:08:91:65:25:86:c8:09:80:02:26:2f:86:3b:e7:d2:
         28:5f:17:a7:a0:5a:a2:4d:5e:d8:a6:bc:67:22:c9:b3:fa:57:
         35:2d:76:95:0b:50:87:e7:50:f2:cc:58:cd:26:9a:41:c5:3b:
         e9:1c:10:cf:c8:7d:65:2d:60:cb:3f:9a:84:dd:99:88:35:a2:
         b9:7a:72:21:0b:ab:e1:3b:ce:57:e3:70:14:be:1f:4c:76:0f:
         e5:4a:26:1e:be:44:29:5d:46:4b:c4:50:4b:f2:fd:79:50:97:
         20:bb:a3:e6:cf:f8:c0:05:55:2d:c7:40:18:a0:70:a0:6f:16:
         ac:63:a4:7d:6e:aa:65:4d:80:f6:07:87:39:ad:4f:e9:a1:64:
         8f:39:99:a4:21:3c:49:83:97:4b:fb:c7:47:5a:8f:95:10:59:
         4c:0d:79:27:29:ad:6a:15:8c:46:1f:08:ab:b0:18:d3:84:90:
         41:a1:33:61:0a:9c:e9:d7:43:f0:65:10:77:a7:73:7a:96:a5:
         0f:63:9f:2e:fe:73:de:2f:0a:2f:05:b8:56:af:f3:52:19:ab:
         83:c9:34:4d:aa:d6:70:17:a8:29:a6:09:05:45:5d:b7:cc:a1:
         b0:40:ec:70:8b:2d:f6:8c:4a:e5:22:e3:6f:73:c5:14:79:c4:
         51:3c:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 10:26:12 2024 by rpki-client on console-ams.rpki-client.org