Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft
File:                     9FB9D7ED833E1CA6E4053773AC164214889108CB.mft (raw, json)
Hash identifier:          m65PDKjk4zPPw84ucBG4lF0M7+CueVehn6c5b677QDY=
Subject key identifier:   C0:8F:21:AC:72:FE:EF:C6:54:BD:D7:C8:C1:A7:27:65:1C:DC:F3:BB
Authority key identifier: 9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB
Certificate issuer:       /CN=9FB9D7ED833E1CA6E4053773AC164214889108CB
Certificate serial:       212D00FD459B1AB5D1AEACBED65B4F0FFB754E42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft
Manifest number:          01B5
Signing time:             Sun 19 May 2024 14:30:34 +0000
Manifest this update:     Sun 19 May 2024 14:25:34 +0000
Manifest next update:     Wed 22 May 2024 17:00:34 +0000
Files and hashes:         1: 3130332e3134382e3139342e302f32342d3234203d3e20313430303033.roa (hash: WwIftBKW42Ou3zbHepcdWMPt//BmDGnSz7+gpAMb2W4=)
                          2: 9FB9D7ED833E1CA6E4053773AC164214889108CB.crl (hash: gjBFlhxFbbqCbCE/L7m0SjzBXRnK3MOKCJNZVo+R6cs=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl
                          rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2d:00:fd:45:9b:1a:b5:d1:ae:ac:be:d6:5b:4f:0f:fb:75:4e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FB9D7ED833E1CA6E4053773AC164214889108CB
        Validity
            Not Before: May 19 14:25:34 2024 GMT
            Not After : May 22 17:00:34 2024 GMT
        Subject: CN=C08F21AC72FEEFC654BDD7C8C1A727651CDCF3BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:be:db:37:db:d6:2b:d3:dd:d8:ea:4a:3f:
                    93:a4:f2:35:6d:74:22:02:c6:27:3f:9a:ba:f9:92:
                    12:1f:23:10:3b:0e:c7:2b:d5:04:55:08:1e:2f:5a:
                    3d:7a:cd:9b:90:13:53:30:c1:68:90:24:81:a5:6e:
                    82:85:df:8e:fc:a1:cc:0b:f7:7c:7a:76:ff:4c:d5:
                    fb:9b:bb:a6:e9:b3:05:b9:30:58:dd:2e:a1:6b:4c:
                    ac:f5:38:39:e3:06:7b:65:7d:c6:2d:e6:ee:c2:95:
                    b0:51:ab:10:9a:b5:e6:9b:d6:6c:33:f0:91:5f:af:
                    08:a8:5e:2c:fa:4a:76:39:aa:a7:9b:08:54:6e:53:
                    3b:e3:97:5b:38:68:75:d2:d9:50:80:f8:df:e1:96:
                    39:0b:f3:0a:8e:e1:f0:95:d8:4f:0f:84:ce:27:35:
                    be:b6:c8:8a:3e:cb:69:0f:1d:ce:b5:f1:5e:5c:05:
                    41:8e:8d:ab:b0:0f:25:15:18:0a:9c:b1:49:9e:b5:
                    81:40:12:b7:bc:0a:5c:6a:94:ee:f0:09:aa:13:01:
                    7e:af:dc:3b:b9:5b:21:c7:a4:ff:de:e3:5b:ca:8e:
                    83:31:92:f1:7f:ba:f0:52:ab:0e:52:f8:bb:61:9d:
                    82:41:17:4b:6a:d4:0a:e9:cc:14:8b:c2:0f:1c:99:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8F:21:AC:72:FE:EF:C6:54:BD:D7:C8:C1:A7:27:65:1C:DC:F3:BB
            X509v3 Authority Key Identifier:
                keyid:9F:B9:D7:ED:83:3E:1C:A6:E4:05:37:73:AC:16:42:14:88:91:08:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FB9D7ED833E1CA6E4053773AC164214889108CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bcb9ba7f-efd1-4994-a2a3-77993338b242/0/9FB9D7ED833E1CA6E4053773AC164214889108CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:4b:eb:95:2b:12:2e:72:8d:22:ac:b6:14:92:93:bf:6a:38:
         dd:b2:f2:60:eb:1e:d3:01:ca:ad:f0:b6:b3:70:74:c1:55:b6:
         78:47:77:73:95:8c:64:d9:54:a7:f2:bc:5f:2f:70:9e:98:fd:
         47:15:d3:f1:1a:d2:2a:c7:68:cb:84:90:5f:1a:b4:b5:76:11:
         fa:f5:2a:73:aa:aa:e4:56:27:66:9e:4f:49:d0:ea:e7:e4:18:
         ee:6c:52:95:6f:f0:0f:c4:2b:e1:c3:25:a2:6b:56:5e:8e:a9:
         29:83:99:5a:00:ed:dd:d3:ab:68:3d:29:a4:f3:ac:12:0d:ec:
         28:6d:8b:4f:e0:b8:5f:76:f2:c3:73:f5:f2:a8:ec:d9:72:c5:
         e1:48:f4:51:2d:53:15:3e:9a:d4:de:10:37:4a:03:49:84:84:
         c2:ab:38:14:9e:d2:ba:35:c8:f4:66:2b:3a:00:b4:56:37:88:
         6e:10:0c:c8:98:20:03:f2:23:e2:16:06:f8:22:6e:f3:36:b2:
         5c:e5:bc:65:3d:b9:c7:22:32:de:bb:77:f6:f0:31:9b:27:18:
         1e:dc:37:d2:99:3e:26:bd:0e:14:20:f3:82:c1:0b:45:a1:c9:
         c0:de:fc:64:7c:0f:dc:e9:61:59:ae:8a:5c:a7:96:21:92:e5:
         89:83:1f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:45:36 2024 by rpki-client on console-fra.rpki-client.org