Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
File:                     0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft (raw, json)
Hash identifier:          hzVl/WaWpieWh/OPatOK2IlJziHCaOt3e6iMkl0HmNY=
Subject key identifier:   DD:50:23:2F:E1:CB:CA:AE:08:51:C2:20:8D:E3:4B:52:FF:B6:B5:81
Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1
Certificate issuer:       /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1
Certificate serial:       5F7BA9E3A7C3185F61F2D83BF4EBFB6EBD76BD69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
Manifest number:          01C9
Signing time:             Sat 18 May 2024 13:00:33 +0000
Manifest this update:     Sat 18 May 2024 12:55:33 +0000
Manifest next update:     Tue 21 May 2024 21:08:33 +0000
Files and hashes:         1: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (hash: NZfGU8yt/4FgZolHeyqRZ4fGy523dk2yAV0gQzO6ODk=)
                          2: 0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl (hash: cHX8dSCv35uWy9t0LY88yiiRE+Vl/GTipMFm68iPQ2A=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl
                          rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 20:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7b:a9:e3:a7:c3:18:5f:61:f2:d8:3b:f4:eb:fb:6e:bd:76:bd:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1
        Validity
            Not Before: May 18 12:55:33 2024 GMT
            Not After : May 21 21:08:33 2024 GMT
        Subject: CN=DD50232FE1CBCAAE0851C2208DE34B52FFB6B581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:5e:3a:09:ce:34:59:bc:12:5b:70:42:2d:
                    3a:b5:df:52:9b:7d:54:41:c1:42:e5:2b:17:75:48:
                    61:6a:9f:c6:a6:77:55:f9:8c:2d:ae:b6:01:d4:a4:
                    58:74:cd:c2:ad:a9:3e:ee:15:69:21:db:40:ca:0e:
                    3c:b6:5a:b5:49:71:bf:08:0a:94:8f:68:0b:b3:4f:
                    d5:77:d0:ec:f5:62:28:da:26:71:67:0b:2f:c7:4c:
                    16:e0:03:ee:4d:aa:48:9f:b3:4a:e2:58:cb:bb:7c:
                    32:c4:13:9f:c1:76:fe:9d:c5:5f:bb:a2:a2:6b:b3:
                    4c:d5:43:11:6e:4e:2d:54:6b:5d:3b:c5:1f:25:ff:
                    4a:7e:94:bc:e7:a6:4c:20:cd:a2:9d:dd:60:aa:7e:
                    dc:78:72:9d:fc:d5:f4:86:68:53:67:72:e3:71:36:
                    6b:d8:7e:9d:b1:dd:d9:4c:0d:9f:bf:ae:d9:a5:37:
                    9e:89:50:3c:fd:3f:07:16:45:44:e9:51:cb:84:b6:
                    f2:47:46:f0:17:bc:e2:b6:b1:dd:d9:ab:d2:62:58:
                    f2:ff:51:d5:4f:76:c0:40:db:85:6e:d1:b9:2a:3b:
                    1c:9b:b5:ea:a2:c8:a6:3c:b0:9c:b2:ad:c7:2d:fd:
                    63:ea:e8:a7:a9:96:7d:64:38:83:a7:a0:80:b8:c1:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:50:23:2F:E1:CB:CA:AE:08:51:C2:20:8D:E3:4B:52:FF:B6:B5:81
            X509v3 Authority Key Identifier:
                keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9f:55:7d:4b:1e:ef:8f:b1:55:eb:59:af:88:58:8c:28:2c:
         ad:67:5d:91:ca:23:38:e7:3a:e3:14:6a:98:c7:6b:54:ce:f4:
         96:be:7c:35:0b:84:94:3c:08:c2:c5:3d:f1:7e:63:21:6b:6a:
         6a:79:4c:b3:6b:84:20:17:a1:05:0f:0f:f6:90:43:e9:da:28:
         c6:c2:dc:0b:04:e9:97:59:c8:bd:24:ac:3d:fb:ab:d7:97:76:
         30:a0:25:06:6c:bd:49:41:e8:52:b7:28:2a:aa:35:3d:1f:44:
         52:79:68:be:fe:3e:df:7d:32:54:09:08:46:c7:46:80:90:70:
         08:62:88:d4:28:b2:59:68:62:a9:8a:3e:1c:39:ab:10:d0:bc:
         27:32:a1:88:e1:44:47:35:9b:9e:a2:3c:a5:db:be:fd:f9:9b:
         5d:81:40:4c:dd:a4:1a:2e:ec:b8:97:1c:f2:7b:23:fe:63:da:
         77:e2:c0:52:45:24:28:79:0c:d1:1f:ea:69:af:7a:94:43:ce:
         22:94:84:bb:6b:bf:9f:11:03:31:ce:2a:46:da:04:16:d0:ab:
         b4:ba:97:ee:5e:86:62:49:d2:c0:3b:6a:55:02:d7:47:60:c5:
         97:d0:9e:5c:1c:10:ca:5d:48:1f:b6:b3:45:ac:e7:fd:8e:cd:
         84:b9:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:39:20 2024 by rpki-client on console-ams.rpki-client.org