Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
File:                     7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json)
Hash identifier:          5GIdURi1lEcu/fHnE/e7w8x7ffF6SSvyjQFjDJAYe5U=
Subject key identifier:   A2:07:DA:86:9D:99:25:2E:43:FB:5D:71:2A:29:48:FB:4F:82:3B:87
Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67
Certificate issuer:       /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
Certificate serial:       3AEC4CCFEA6697E0EC4D803AAE4E97D7AE6E038A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
Manifest number:          01E6
Signing time:             Fri 17 May 2024 10:41:59 +0000
Manifest this update:     Fri 17 May 2024 10:36:59 +0000
Manifest next update:     Mon 20 May 2024 21:43:59 +0000
Files and hashes:         1: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: Ibg2Cfy0WnH4a3Wa7joodFlorARUZPZ2GPMpQCBNXj4=)
                          2: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: 3IfnMsxy+BmcdHkEOMeFxzfcMZeEJZKVyi34vjbFhGk=)
                          3: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: FGjA3YaUzjk+Q4B/swMOf/6FNl/e1JQbVi/5xs5GJxc=)
                          4: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: YzYTXtZ1btRkdvh/XwpJ+AUIwj2v7beEUsuLvSxNdOw=)
                          5: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: srdf89t5hmZffK/sKVWAqSshWNXg7mF7/3oGKFcuBQM=)
                          6: 3130332e39372e37362e302f32322d3232203d3e20313336313331.roa (hash: 1j8f6ZMnuy2L5r1aVDatNtl9AH7h7njcDNkNnqaCKnI=)
                          7: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: DqQ0AMmrDOA2B95VTEpR583ZuIib155r/U+ZWcaTdjM=)
                          8: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: odj5ObQKBXyWG5KNSHmaKnAHcAaCYk1VBnAzqzzeWp4=)
                          9: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: oXxgDnwYMJpA65FicRf2Vx+95SgP9QkX6KUV8l6W3uQ=)
                          10: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: tiopwM3s5MLbWlscz/cdNMpj7OnPZHkYo5i6pq4PM0w=)
                          11: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: iFMguTbm3bu0i+oObMuSKvlX1P8xGasiou7sX5/DwhM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl
                          rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 21:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ec:4c:cf:ea:66:97:e0:ec:4d:80:3a:ae:4e:97:d7:ae:6e:03:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
        Validity
            Not Before: May 17 10:36:59 2024 GMT
            Not After : May 20 21:43:59 2024 GMT
        Subject: CN=A207DA869D99252E43FB5D712A2948FB4F823B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:a0:b9:f4:80:5a:ea:ba:f4:7c:b8:5c:0b:
                    be:5d:c8:e2:67:8b:69:c8:44:71:9d:56:85:8a:4a:
                    85:6a:ed:88:99:9a:ef:08:c5:c3:f6:64:55:9a:66:
                    72:6c:42:04:31:02:2e:d0:2f:17:80:ce:54:cb:24:
                    b9:7e:d8:e5:b8:21:95:ba:e9:f4:2e:d0:90:3d:8d:
                    e5:0e:7d:c2:98:1c:85:1d:64:0a:64:ab:4d:a6:e9:
                    ce:ec:e7:bb:25:d2:e7:7a:57:0d:81:5a:7f:bb:a1:
                    cb:5f:46:29:75:fb:4b:8d:6b:ff:51:61:a6:23:c9:
                    05:90:f7:07:fb:4a:82:29:53:fe:32:d9:d0:17:ee:
                    bb:aa:10:64:76:c5:48:0a:75:90:a9:77:d1:57:24:
                    8f:13:00:ab:f1:cd:77:59:e3:5f:1b:5b:10:27:ef:
                    07:cc:ce:15:84:cb:73:ec:6c:b8:ed:cb:d6:7a:93:
                    e7:a9:3b:85:88:69:4f:77:a3:e7:81:bd:f9:65:22:
                    be:40:61:d8:20:1b:38:70:ff:9e:57:ce:9d:b2:a8:
                    08:89:79:1f:f2:97:0b:19:c1:72:6d:17:a2:0b:fd:
                    dd:26:fd:45:4e:2e:68:ac:20:08:07:1b:81:be:1b:
                    3c:d0:7d:1f:a0:00:ca:92:b2:0f:d2:27:53:80:d8:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:07:DA:86:9D:99:25:2E:43:FB:5D:71:2A:29:48:FB:4F:82:3B:87
            X509v3 Authority Key Identifier:
                keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:f8:f2:a6:c2:22:cb:eb:7c:82:4f:1e:bc:5e:f4:50:90:
         b6:d5:13:fc:4d:db:a6:e9:1d:b3:4e:51:3a:b6:11:56:7a:a0:
         10:07:2b:c0:79:37:95:9b:e7:07:27:43:6d:12:7a:32:47:d0:
         53:a9:cc:bf:98:10:1f:a7:79:a1:c8:51:6c:45:9d:2c:ec:cb:
         48:34:98:d0:f7:c6:0e:ac:95:47:96:3d:ba:f2:94:c9:a0:76:
         4c:83:e7:d7:01:78:34:71:a5:6e:fb:cf:88:fc:28:70:54:04:
         93:8b:3d:0f:a1:a1:46:5a:d7:7d:0e:e0:12:9a:fb:56:3b:db:
         83:99:2e:98:3d:db:c6:29:05:64:05:87:b7:24:4e:38:cf:c4:
         ee:21:c6:b6:c3:3b:af:5c:4e:1b:46:61:61:f6:fb:4a:f1:6a:
         96:8f:a0:cc:6a:74:60:7e:43:98:c6:5c:43:21:2e:9c:eb:23:
         27:24:d0:0f:8f:d2:8b:1e:92:49:18:e1:2b:28:8f:21:1c:2b:
         33:e6:79:60:a8:01:54:11:15:bd:c0:79:88:40:9b:30:fa:f2:
         c5:31:74:4b:9e:1e:b1:20:d1:ca:e9:4e:93:5c:d7:cf:6f:40:
         9e:c3:a4:d9:9f:f5:40:e8:a3:02:86:43:1c:ea:c0:c3:f5:e7:
         bb:bb:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:11:30 2024 by rpki-client on console-ams.rpki-client.org