Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft
File:                     70FE5658A7C2993DC505F75545A128384472227E.mft (raw, json)
Hash identifier:          wz2tixpePi3caEb3r60J05mB0eAikP1beZwksY5yrig=
Subject key identifier:   80:16:33:88:A9:D1:70:47:06:6B:A4:DA:7F:BB:42:5F:FF:F3:C7:2B
Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
Certificate issuer:       /CN=70FE5658A7C2993DC505F75545A128384472227E
Certificate serial:       63590336D91EC07EBC04AFB45FC5BD437358EFA0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft
Manifest number:          018E
Signing time:             Sun 19 May 2024 04:01:04 +0000
Manifest this update:     Sun 19 May 2024 03:56:04 +0000
Manifest next update:     Wed 22 May 2024 14:04:04 +0000
Files and hashes:         1: 3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (hash: AGzpxxOSa4ZUdRdxbFMmluw0k71hm4y4+gb34fO4bCU=)
                          2: 70FE5658A7C2993DC505F75545A128384472227E.crl (hash: 8f8FSrt6uabOnQoCR33k03wfoj5+hFceYpEnNyVvLf0=)
                          3: 3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (hash: jlg9DdFt651d9uTLeIWJcRtXO4Q0k6n6AJ9ax19sQPs=)
                          4: 3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (hash: v9OU5sBzQuMrcMxlcrKiNAoICoEv9m1+sOy/u1Iz43Q=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl
                          rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:59:03:36:d9:1e:c0:7e:bc:04:af:b4:5f:c5:bd:43:73:58:ef:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E
        Validity
            Not Before: May 19 03:56:04 2024 GMT
            Not After : May 22 14:04:04 2024 GMT
        Subject: CN=80163388A9D17047066BA4DA7FBB425FFFF3C72B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:5f:01:b8:7e:cc:c2:01:3a:f2:f1:b4:f0:
                    87:59:e4:c1:54:27:2c:0d:bd:b7:40:46:ed:90:17:
                    30:8c:e2:2d:9a:15:2e:a7:68:21:f7:46:af:cb:af:
                    bf:42:57:8f:d5:3b:e1:48:01:e7:5f:23:a2:d7:ac:
                    a8:ca:ba:6d:be:57:c8:25:17:79:e5:c8:c3:b3:fe:
                    5a:53:85:d8:20:34:a6:a4:e7:45:79:76:47:02:da:
                    d7:27:64:3c:d1:d7:50:6b:63:92:cb:45:c2:1e:c1:
                    3f:4d:34:9c:f6:84:6f:67:dd:01:5b:3d:6d:62:d1:
                    c3:7a:bd:3d:06:7d:c2:5e:39:47:37:3b:c5:1e:51:
                    80:0f:29:f1:bc:65:03:c6:50:f0:56:df:6a:9e:9f:
                    1b:26:e2:0d:3e:0d:46:b2:2f:0b:0c:88:a9:d2:0a:
                    3a:0e:a8:4b:61:b2:ef:b8:d6:1b:d4:d3:8e:db:f2:
                    f4:4b:f0:83:29:1b:6e:88:4e:3e:84:59:a6:cc:15:
                    61:2b:fd:81:be:ad:30:ff:61:54:c8:70:3c:97:6f:
                    c2:09:36:c5:ce:1c:b0:04:1d:3b:0b:88:67:eb:4d:
                    b7:84:cd:f0:8b:04:6d:17:9f:63:30:06:ff:01:d2:
                    c1:20:17:fc:eb:0e:c9:15:5d:48:d9:65:b3:74:e9:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:16:33:88:A9:D1:70:47:06:6B:A4:DA:7F:BB:42:5F:FF:F3:C7:2B
            X509v3 Authority Key Identifier:
                keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b0:0c:66:f5:91:78:6d:67:3e:bb:ff:60:3f:80:99:61:94:
         c8:e6:dd:03:da:c9:c1:ac:15:d7:60:f2:4d:fc:f1:b6:a8:86:
         33:70:aa:0a:78:fa:90:8e:c6:83:c3:9d:fe:79:a8:40:b7:17:
         61:63:df:0a:aa:2e:03:d6:64:d8:74:5c:eb:9a:41:e9:ee:1f:
         4e:38:13:fa:c8:53:a7:c6:69:b3:85:44:90:cd:b5:da:ed:2a:
         ad:49:d5:cb:f5:8e:7a:3a:ef:69:09:34:40:07:89:c7:34:38:
         ab:ec:fb:12:6c:d9:71:e4:4b:3a:d0:3e:02:7e:6f:4f:0b:95:
         63:d7:7f:ea:1d:9b:82:22:90:8f:d0:89:a8:3a:20:f1:99:9b:
         9e:48:b0:27:3e:68:92:50:e0:7e:b8:3f:8a:b6:9e:b5:9c:86:
         3c:57:4f:33:d1:87:de:58:cd:d9:54:b0:2f:02:6c:3a:b2:b9:
         10:a6:ac:09:4b:b3:41:08:95:8c:cc:51:ef:f6:8e:38:77:82:
         d9:55:67:42:0d:b8:41:01:aa:2f:32:b2:a2:d0:44:41:73:a5:
         08:3a:5e:22:5f:ad:d2:33:71:70:04:90:f5:b1:74:98:83:70:
         c2:7d:02:f7:e7:61:0b:9b:01:e2:f9:37:77:4d:a3:94:8e:d4:
         71:0f:b7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:21:44 2024 by rpki-client on console-fra.rpki-client.org