Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft
File:                     B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json)
Hash identifier:          wmrV6HlRVHAVwg+REz0Lf//Zbk97eTyb6CvssMUTUf8=
Subject key identifier:   34:6E:20:0B:0F:81:A1:06:7B:6B:3A:64:CF:1F:40:B4:8E:6F:D5:28
Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4
Certificate issuer:       /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4
Certificate serial:       19292848310517589D5D43FD5B2334A85A0C074D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft
Manifest number:          AA
Signing time:             Sat 18 May 2024 12:11:59 +0000
Manifest this update:     Sat 18 May 2024 12:06:59 +0000
Manifest next update:     Tue 21 May 2024 20:23:59 +0000
Files and hashes:         1: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: H9eeehtNfYq2eQRo0UGNUxy74IGcCXrtR3divR09wd8=)
                          2: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: PPTqH66IQpR+8naopa2exSgr+sSut8tUTJCM2c4vjQI=)
                          3: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: 6vBqzB7HjV8eXq96uXH5kMCXLoXOrJBXaIEvwNp0/Jo=)
                          4: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: zx3EsEj7vdg62SZL8H/xKZfzFI/WtSApdPssUEeDvhY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl
                          rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 20:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:29:28:48:31:05:17:58:9d:5d:43:fd:5b:23:34:a8:5a:0c:07:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4
        Validity
            Not Before: May 18 12:06:59 2024 GMT
            Not After : May 21 20:23:59 2024 GMT
        Subject: CN=346E200B0F81A1067B6B3A64CF1F40B48E6FD528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:3f:09:d0:64:90:eb:50:f0:19:a7:47:5b:
                    5a:e5:87:50:78:8d:1f:83:d4:c3:d2:75:da:6c:ee:
                    8b:c7:ac:dd:a7:fe:d5:16:aa:4b:b8:66:fc:6f:9d:
                    a4:8c:98:e2:b8:57:37:30:5c:ec:ac:42:0b:2c:67:
                    ea:cc:a7:81:ce:9d:cd:22:84:fa:19:19:56:b0:73:
                    1b:04:5b:57:75:7e:58:66:58:95:d7:08:a6:79:62:
                    31:23:b0:03:6f:d2:a6:0c:10:86:1a:5b:b0:10:4d:
                    50:2f:ce:1a:5e:6f:1d:8a:8e:0f:b5:55:e4:93:77:
                    2f:ef:0a:51:25:36:80:b9:43:c2:76:f2:43:32:50:
                    9c:f8:07:ac:5a:e7:99:c2:e0:cf:6c:ad:da:4d:d2:
                    98:19:28:fd:6e:16:3e:8e:00:a7:c3:25:20:1c:2f:
                    26:c8:4f:0e:05:4c:0e:5f:7a:3a:cf:a6:c8:9a:b1:
                    b3:fd:28:84:a1:cb:45:46:48:a2:92:00:a9:f8:ac:
                    24:9c:02:23:75:72:3b:b7:8d:5d:a6:a6:12:99:78:
                    7d:42:c6:b2:4c:da:6e:62:af:aa:6f:be:ac:27:21:
                    31:85:f2:20:0b:92:86:84:ff:ec:f8:a9:fc:19:13:
                    4c:a1:3a:d6:fc:8b:14:c4:21:b5:4a:4e:fd:40:44:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6E:20:0B:0F:81:A1:06:7B:6B:3A:64:CF:1F:40:B4:8E:6F:D5:28
            X509v3 Authority Key Identifier:
                keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:df:8c:49:99:03:4f:ad:13:79:99:99:fb:3d:64:ed:e7:65:
         3c:b0:cc:95:40:ab:61:48:02:ea:b5:a4:7a:47:44:ed:34:ca:
         44:b0:e6:5b:37:64:62:51:cf:2c:9b:64:cf:0d:ad:55:f7:0f:
         45:1a:25:b5:1d:d7:c1:d2:d2:de:93:33:53:78:b7:0d:a0:2b:
         28:89:f6:1f:f0:94:9c:3d:b7:d5:80:2d:31:8e:2b:c5:64:7f:
         ce:45:2c:f9:fd:d4:cf:79:b0:d3:24:64:27:ca:7b:52:0a:e6:
         0a:bd:80:08:75:eb:04:23:73:60:a5:c0:01:0e:1d:c5:fd:d7:
         36:d4:d8:ad:94:5f:03:35:08:44:23:92:71:72:06:82:82:de:
         75:af:29:48:97:4e:28:23:4d:a6:3c:37:20:ef:23:74:f4:2c:
         0c:1b:b4:ab:ff:bc:e1:15:43:4c:2e:64:69:1b:fb:9c:2f:cf:
         20:ff:ce:ef:62:ae:03:ea:e9:99:90:ff:0c:08:af:5f:92:e1:
         d8:7b:39:f1:ad:10:06:14:5b:21:5d:ad:ef:ef:03:30:dc:f7:
         9b:55:ce:52:3e:2d:c0:9a:cb:e2:11:4b:8d:b5:b1:3e:24:f5:
         9d:86:02:14:73:e6:c5:8f:3b:81:f7:94:6d:78:90:20:ca:71:
         a4:70:fb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 12:50:01 2024 by rpki-client on console-fra.rpki-client.org