Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft
File:                     8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json)
Hash identifier:          Jnqk6BnyR8d2q4UXEEksd3ZpomQSeKMT8RakaqaeRQ4=
Subject key identifier:   FB:6E:63:D7:F5:9D:CB:30:60:13:92:36:75:FE:C7:00:F5:8F:07:91
Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17
Certificate issuer:       /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317
Certificate serial:       780FC53E321589A55EBD6A2B471E8F6ABA2F3CCB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft
Manifest number:          0438
Signing time:             Wed 29 May 2024 16:12:31 +0000
Manifest this update:     Wed 29 May 2024 16:07:31 +0000
Manifest next update:     Sat 01 Jun 2024 22:29:31 +0000
Files and hashes:         1: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: JDQvWFBpAMQKd2CDxCmPFg3PPXgtXNFXyDDPx2BmEA8=)
                          2: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: OVZ/W+OEtrLNllcFjtmcQ4BWFdXLIDuMKPBR3f7UEDA=)
                          3: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: 60ZiKadFp5ji2AUHwNx19VqGGr0UTxEtMG/95NEu4aE=)
                          4: 3130332e36362e36382e302f32342d3234203d3e203535363835.roa (hash: F6fgbhJ9aRUda7qo5W61dg3tOh56iPPIqDbDWuxDzQ0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl
                          rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 20:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0f:c5:3e:32:15:89:a5:5e:bd:6a:2b:47:1e:8f:6a:ba:2f:3c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317
        Validity
            Not Before: May 29 16:07:31 2024 GMT
            Not After : Jun  1 22:29:31 2024 GMT
        Subject: CN=FB6E63D7F59DCB306013923675FEC700F58F0791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f8:03:da:2f:8b:ef:d1:0e:d7:38:d9:5f:a0:
                    c5:4f:97:59:a3:05:25:d9:b8:f7:79:a3:bd:86:74:
                    0f:6b:6e:80:86:5f:02:65:db:0a:2f:37:e9:9d:07:
                    14:c0:9a:f9:02:1a:88:74:e6:df:80:0c:5f:d5:95:
                    07:ec:4f:45:c5:ab:12:48:dd:04:a8:6d:b9:ef:93:
                    53:33:2e:14:e8:17:78:3f:f8:20:d0:b2:d3:2b:df:
                    e2:21:a1:a6:5c:2e:89:18:9c:51:08:49:3e:ce:78:
                    78:37:69:20:bf:36:46:09:a8:64:df:1a:41:82:28:
                    df:5e:95:17:9c:46:21:41:91:ab:6e:bd:f2:52:2b:
                    5b:e7:c9:a9:10:09:6d:08:56:e9:83:96:a9:9a:25:
                    a7:76:6f:89:56:ac:a5:ef:93:e4:8e:60:bb:d5:b5:
                    71:a1:7e:c5:40:46:7a:7f:48:f1:42:30:0e:ab:bf:
                    1b:93:73:1e:31:cf:08:4a:5e:ca:be:cc:ae:95:e7:
                    2f:e4:30:ef:7e:87:0c:6f:25:6b:b0:4c:24:84:2e:
                    70:30:3b:da:92:96:3b:ab:02:59:db:c2:70:32:98:
                    ac:f2:a0:9e:25:c6:2f:76:a2:7f:10:76:95:b0:01:
                    90:5e:e9:f2:be:e0:89:b2:1e:72:9a:62:db:12:74:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6E:63:D7:F5:9D:CB:30:60:13:92:36:75:FE:C7:00:F5:8F:07:91
            X509v3 Authority Key Identifier:
                keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:c4:c7:fc:99:7b:bb:38:7b:c6:fa:88:4a:dc:70:42:4c:
         6f:2f:df:35:36:8f:4e:a2:59:c6:be:f0:82:52:3f:99:d8:7f:
         bd:7e:9d:d1:3d:c8:da:4a:9a:2f:62:c5:6e:b2:a0:5e:3e:87:
         7d:57:fe:a7:29:f2:6e:0d:1d:92:1d:d4:1d:0d:09:30:cb:b9:
         32:ea:c8:10:16:0d:2a:48:6f:2c:04:50:4d:a3:8a:97:fa:87:
         f9:40:80:91:53:18:d6:08:38:50:2e:57:dd:8f:d3:e3:ac:dc:
         30:4d:b5:e5:52:05:46:59:71:da:c6:4f:50:e7:c7:2a:f6:4f:
         86:53:40:e2:3e:32:68:11:4d:6b:83:27:be:56:b0:c1:eb:50:
         8e:48:2b:39:9e:62:05:3a:e0:d3:1d:8c:9e:ad:a6:1e:39:c1:
         0d:b9:21:70:a4:ee:ed:9c:3c:e0:d2:79:6c:22:d1:50:58:46:
         5a:44:24:53:31:5e:77:b5:83:24:79:58:e1:cb:a4:18:4a:fe:
         31:5f:81:6c:5f:d7:b4:6e:ea:0b:29:83:7e:39:71:74:64:03:
         fe:99:7d:ec:c6:40:42:4f:c5:fe:06:0a:33:c0:bc:25:fa:02:
         e0:f4:ad:54:c3:7f:5b:9f:12:d1:ff:05:c1:0c:f8:f5:98:cf:
         02:88:af:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 18:31:51 2024 by rpki-client on console-fra.rpki-client.org