Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft
File:                     DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft (raw, json)
Hash identifier:          PNwHRxr/k2O9414XaOOQ6ZWJl1NK6GmFJra+CVhRpdA=
Subject key identifier:   1B:9F:E7:64:96:10:2E:43:BD:EE:70:2D:AE:D6:E3:7E:2C:1E:1F:29
Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15
Certificate issuer:       /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915
Certificate serial:       53B89B98092257FF0EAC67D4B374D55B174BA682
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft
Manifest number:          0430
Signing time:             Sun 19 May 2024 13:11:31 +0000
Manifest this update:     Sun 19 May 2024 13:06:31 +0000
Manifest next update:     Wed 22 May 2024 23:04:31 +0000
Files and hashes:         1: DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl (hash: T3fVaFqp4pQswPfxnm3C1+jxG3GnLIu3AuIL7kNxU5o=)
                          2: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: Tze4U3aeH0WFoVLno4wZX33dUgQE5sVy7Qu7BC7pGjw=)
                          3: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: REDrJ96UhZwlfybjbSWo4+tBQN+Ql7IONMWhQgp2wgk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl
                          rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b8:9b:98:09:22:57:ff:0e:ac:67:d4:b3:74:d5:5b:17:4b:a6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915
        Validity
            Not Before: May 19 13:06:31 2024 GMT
            Not After : May 22 23:04:31 2024 GMT
        Subject: CN=1B9FE76496102E43BDEE702DAED6E37E2C1E1F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:d7:9c:9b:10:53:f8:b3:b6:ae:97:df:f8:
                    bb:46:52:c0:fc:0d:dd:ba:62:d4:24:89:49:e0:29:
                    c0:3b:e5:f1:7c:c7:cc:54:c3:1e:e0:fa:30:40:31:
                    7a:dc:7d:ef:1b:c6:bb:ad:14:5f:ed:05:23:57:e1:
                    72:31:62:0e:cb:81:af:89:7d:e6:2d:8d:8b:ee:4a:
                    fc:43:58:85:8e:fe:18:74:37:2a:0c:10:71:79:2c:
                    70:20:11:4c:30:e7:97:19:c9:e3:a1:81:c9:c3:44:
                    72:d8:31:4d:8c:6b:83:35:a8:4e:ca:69:24:06:77:
                    e6:62:b1:20:ac:fe:75:8b:11:ef:b2:89:a7:b5:69:
                    5a:95:2e:2d:ce:ce:96:d8:40:2b:b5:0e:1c:9e:ca:
                    a1:3a:82:03:a6:d2:f2:03:85:33:a9:f0:a7:88:c3:
                    e5:05:d0:61:2a:38:a9:44:7f:cc:e3:0a:8c:39:03:
                    08:ba:dc:d4:0b:da:41:72:25:5e:7f:0b:36:2c:17:
                    7b:05:a4:98:35:aa:09:45:11:8b:12:6e:e6:00:ad:
                    96:89:e9:03:4d:0c:4b:2a:a3:9a:63:cc:e8:9b:01:
                    ea:70:8d:90:ff:53:51:e8:2e:48:0c:10:fc:6f:95:
                    87:f2:59:a5:dd:c4:b1:ff:d7:42:30:f1:fc:ba:2b:
                    39:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9F:E7:64:96:10:2E:43:BD:EE:70:2D:AE:D6:E3:7E:2C:1E:1F:29
            X509v3 Authority Key Identifier:
                keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:44:26:4c:20:47:4e:60:d9:44:60:78:05:b2:d0:cb:00:39:
         f6:c4:c0:f1:4a:c9:0c:d5:e0:ca:de:9e:ee:a5:db:f0:c9:12:
         be:bd:00:93:38:54:01:4f:af:93:7a:67:ba:76:b6:ef:23:ca:
         ee:8c:8c:4f:5c:75:6d:c8:f6:9b:20:fb:6e:54:bc:9f:df:5a:
         5c:d9:9b:ff:d6:d9:6a:1b:88:7f:5b:54:c3:27:a7:5a:92:d9:
         4a:e5:f9:76:c8:e7:c4:09:3c:59:dc:b9:54:00:be:8d:5d:af:
         b1:53:5a:6f:9b:4e:14:0e:d4:37:9c:b4:7e:ad:4b:95:0b:89:
         ac:88:ef:37:0d:64:d5:ce:2e:00:f1:b1:22:92:eb:ca:61:e4:
         25:ba:3b:97:c7:23:4b:74:08:37:fa:79:35:e0:ed:8c:0b:e4:
         03:71:d3:a8:2f:41:94:2b:49:47:99:01:15:68:c8:ef:a3:41:
         0d:64:60:94:a1:0f:68:fe:67:50:48:53:09:0b:41:47:5a:5e:
         3b:3f:88:bd:40:d1:ba:e7:8d:df:67:ef:92:20:fe:01:21:b9:
         dc:27:e0:b6:11:8f:81:e6:2f:0f:52:a9:7b:73:8c:b5:ac:aa:
         13:cb:39:b2:4c:91:d8:03:70:7d:c7:91:9f:c2:cf:0c:15:8a:
         c7:b7:36:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 13:52:39 2024 by rpki-client on console-fra.rpki-client.org