Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft
File:                     0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft (raw, json)
Hash identifier:          5s4M3R8pHIebBWk6LQCxnR27qNW6tanJy4BM3OTOIGo=
Subject key identifier:   7A:A4:29:25:1E:55:4D:24:C3:08:C7:BE:99:68:F5:D3:1C:CD:E5:E9
Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C
Certificate issuer:       /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C
Certificate serial:       71CDF8632DF7685815E0B82DE311790AAB15D2FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft
Manifest number:          0433
Signing time:             Wed 29 May 2024 09:21:19 +0000
Manifest this update:     Wed 29 May 2024 09:16:19 +0000
Manifest next update:     Sat 01 Jun 2024 17:15:19 +0000
Files and hashes:         1: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl (hash: D/NKFGH3Afsvv4+OyW07jLKfRICQBsLMNSk3JGauO0s=)
                          2: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: PIJevugYAL+yM2TU9iZpO3TkxS4ks24P4h7KXhEPzXU=)
                          3: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: Ipdt/h1gjwfSANY0Qj3LWCJO/TizuVongWPU/2ZIKX4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl
                          rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 14:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cd:f8:63:2d:f7:68:58:15:e0:b8:2d:e3:11:79:0a:ab:15:d2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C
        Validity
            Not Before: May 29 09:16:19 2024 GMT
            Not After : Jun  1 17:15:19 2024 GMT
        Subject: CN=7AA429251E554D24C308C7BE9968F5D31CCDE5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:74:47:0e:6f:ee:5f:96:29:40:59:b7:8c:
                    79:d3:be:5f:eb:f8:3b:06:64:0a:5d:e5:a0:ac:cf:
                    3d:31:cc:cf:02:37:6f:3a:b9:c2:d3:f9:5d:76:66:
                    0a:6a:dd:d1:e2:16:ce:58:5c:69:9a:e7:c7:13:f1:
                    1b:4a:33:66:62:38:36:9b:db:0f:10:a2:d8:99:15:
                    32:f0:70:79:69:82:45:7d:b3:00:81:14:cb:91:d3:
                    71:2e:93:51:b5:07:66:26:e4:eb:92:58:d4:dc:fb:
                    59:cd:47:36:33:3e:13:1f:88:3a:ae:67:d7:62:e0:
                    7a:19:45:df:40:46:10:49:55:0a:75:32:c9:4c:15:
                    12:f8:cd:9b:17:ba:7c:25:2d:8e:30:7b:ab:2e:19:
                    1d:65:81:ca:91:e0:8c:1c:d8:e3:b9:4b:d6:a2:7e:
                    e3:7b:eb:1a:2e:ca:02:ce:c1:44:66:f1:74:2c:ec:
                    bd:a4:34:44:df:6b:4e:82:0c:41:93:c9:df:38:c0:
                    cb:09:44:d3:ff:41:b0:1f:c1:88:4b:b7:6b:40:28:
                    79:e2:8f:28:0f:89:7b:92:9b:cf:72:12:2c:0a:ac:
                    6f:11:6f:43:a3:6b:7a:33:5a:9a:c0:fa:6b:f7:0d:
                    b6:98:dc:f4:58:31:f2:dd:a8:fa:31:cb:46:7a:58:
                    f7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A4:29:25:1E:55:4D:24:C3:08:C7:BE:99:68:F5:D3:1C:CD:E5:E9
            X509v3 Authority Key Identifier:
                keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:da:b0:19:3e:34:9b:d7:a7:d4:07:b2:15:49:8d:60:75:70:
         d8:29:12:a9:3d:bf:45:35:96:88:64:fc:bc:4c:0e:34:5a:d7:
         a9:5c:36:58:87:9c:4b:d9:94:aa:73:15:9e:f8:e1:90:bd:fd:
         dd:87:08:a3:af:2d:0d:be:4c:fc:0a:42:76:4b:a2:b7:4a:04:
         d6:ed:a2:56:54:50:e3:6c:52:45:58:7e:82:f8:aa:eb:68:a1:
         95:73:f0:f8:dc:2c:68:22:76:31:d7:c7:97:35:f5:96:31:c0:
         c8:32:aa:d5:9f:d2:aa:32:36:45:07:21:f9:c5:3f:2e:1d:5b:
         be:7c:81:24:da:67:88:1a:a7:44:90:c0:14:d9:0b:4d:36:7f:
         10:5a:3f:91:df:60:c6:af:59:de:15:dc:7c:17:aa:e8:06:42:
         19:bf:ef:57:5e:a8:c9:8e:74:9c:70:70:32:6f:f8:7e:fa:21:
         33:8f:ce:d8:9a:a7:4e:9b:5d:20:de:35:6f:35:bf:20:43:70:
         ed:35:30:bf:5e:e1:48:1c:ff:63:24:bc:a2:1e:2d:18:6b:74:
         c0:74:1d:f3:27:af:b5:8a:10:c1:2f:7f:28:b3:21:99:31:a8:
         0a:8f:70:1f:c5:c1:29:e4:b5:40:f5:96:4b:7c:d8:a1:a0:78:
         92:45:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 11:17:09 2024 by rpki-client on console-fra.rpki-client.org