Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft
File:                     ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json)
Hash identifier:          yIkDJ3PxeSInyhS2qOzUow/zcclTllv9WwBfelOzSqs=
Subject key identifier:   83:0B:33:F0:20:2B:41:4E:AC:05:96:80:75:E9:54:63:2F:FB:2C:25
Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D
Certificate issuer:       /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D
Certificate serial:       39F47B011530D9B9E37D4968C41A0DB2F2BCA394
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft
Manifest number:          60
Signing time:             Sat 18 May 2024 05:10:57 +0000
Manifest this update:     Sat 18 May 2024 05:05:57 +0000
Manifest next update:     Tue 21 May 2024 05:41:57 +0000
Files and hashes:         1: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: Tbk/uHhSCLeJ59eU06V8ubIBxCACPKrPwWSXjgAytUc=)
                          2: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: UKrCX8hKXX35lIh4CDsi03CNL9TxqP58DmrUATuzZOk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl
                          rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 05:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f4:7b:01:15:30:d9:b9:e3:7d:49:68:c4:1a:0d:b2:f2:bc:a3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D
        Validity
            Not Before: May 18 05:05:57 2024 GMT
            Not After : May 21 05:41:57 2024 GMT
        Subject: CN=830B33F0202B414EAC05968075E954632FFB2C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:32:f3:77:1d:e3:ec:e3:c8:4e:1e:a4:1c:
                    ec:14:27:63:86:49:b8:6a:ab:64:ec:5c:3d:ff:8b:
                    6c:ce:af:e9:34:52:a0:2b:c7:12:6c:0b:b2:93:60:
                    be:40:b3:02:2f:0b:37:c5:50:7e:49:dc:b9:04:b9:
                    4c:f1:97:19:e1:c2:25:b0:05:2b:67:2c:86:5d:e2:
                    23:b2:1d:e9:c5:5f:70:a6:f9:e7:96:03:c2:d2:5c:
                    08:ab:a4:aa:30:4d:63:5c:af:89:9b:7b:8a:6c:0b:
                    d9:b6:74:0f:9a:18:55:62:02:85:d3:bc:e4:05:7a:
                    87:1f:b9:03:a8:a5:9d:52:2c:d2:a6:aa:c3:b5:a7:
                    ed:4c:5f:65:da:7f:3a:76:13:96:07:59:28:41:79:
                    1b:c3:eb:84:2b:7b:b6:13:75:3e:6d:2d:33:1e:09:
                    45:ef:e0:38:d8:46:e7:03:78:b1:11:32:69:84:32:
                    45:1d:91:b0:37:50:3b:c2:62:a0:de:c5:88:c6:18:
                    50:93:cb:50:b0:6a:f2:61:55:df:1c:af:69:83:a4:
                    d1:e6:e1:68:d3:55:3f:87:bb:37:a5:93:f2:8f:7f:
                    35:20:10:b2:26:c3:c4:65:0e:19:01:ca:6a:b1:af:
                    39:40:11:1f:51:af:b6:71:95:fb:4a:74:44:93:e0:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0B:33:F0:20:2B:41:4E:AC:05:96:80:75:E9:54:63:2F:FB:2C:25
            X509v3 Authority Key Identifier:
                keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:69:2f:37:00:b7:79:b5:b4:8f:42:88:cc:21:ea:7a:e0:ab:
         70:64:9f:88:4a:dd:5a:cb:ee:93:b4:cf:37:b4:a7:44:c9:4d:
         12:86:d6:57:e3:e4:a1:79:ec:51:07:57:18:09:e3:1c:d9:05:
         86:3b:af:3c:95:05:ee:87:e1:52:76:2c:8c:f3:3f:28:41:eb:
         47:87:8b:49:89:93:0c:c8:df:ba:71:6f:3b:e1:a3:55:85:37:
         70:92:d7:81:32:c4:9a:db:87:35:72:23:7e:39:86:54:1a:9b:
         a9:bb:39:49:33:0b:7c:14:3d:3d:72:f5:28:d3:60:9d:97:c0:
         91:0b:56:bc:64:89:e5:1b:84:28:e1:ee:fe:30:36:ff:24:51:
         ff:3f:69:62:ad:b4:3e:f2:8f:8b:e3:96:5e:04:2c:15:3c:13:
         60:4a:11:8d:ea:6f:37:a9:97:16:38:32:0c:b8:b3:b6:d8:db:
         00:da:a6:55:db:f7:be:48:fe:86:d2:6a:8f:96:79:76:a2:11:
         4e:a3:45:51:c1:1d:e8:0b:9c:1a:45:22:61:bf:c3:73:97:39:
         60:98:b7:f0:f2:cc:ff:e3:dd:60:e8:75:c9:bb:12:d9:60:55:
         b5:4b:63:83:1f:16:12:3b:78:86:95:1a:c5:cd:2f:3b:df:fa:
         4f:0f:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:38:22 2024 by rpki-client on console-ams.rpki-client.org