Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft
File:                     0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json)
Hash identifier:          ULLCn1dAu9VNTGY3qpyLfQ0Uy/W2LQLrVoHa87YFLcI=
Subject key identifier:   2F:A5:C9:3B:BB:F5:71:84:10:60:CA:0D:CC:36:9B:1C:3A:EE:17:41
Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21
Certificate issuer:       /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21
Certificate serial:       63484A09CEB935A1DCFE9CEF2B14FD383553DAA6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft
Manifest number:          2C
Signing time:             Sun 19 May 2024 13:01:30 +0000
Manifest this update:     Sun 19 May 2024 12:56:30 +0000
Manifest next update:     Thu 23 May 2024 00:05:30 +0000
Files and hashes:         1: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: PC+ijrflLlC2CTnSpuRYRRlo2oL0mLRC4JQTsIkbYWw=)
                          2: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: GSIpN3A/UVfQ4BxfQnmEQMW+C2fjV3PHe2aGLKovfhk=)
                          3: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: sHMaW1pWojxXwpfeTSrOw0K7/6th9mVnF132l/n/AbM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl
                          rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 03:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:48:4a:09:ce:b9:35:a1:dc:fe:9c:ef:2b:14:fd:38:35:53:da:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21
        Validity
            Not Before: May 19 12:56:30 2024 GMT
            Not After : May 23 00:05:30 2024 GMT
        Subject: CN=2FA5C93BBBF571841060CA0DCC369B1C3AEE1741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:80:da:30:d0:dd:0c:79:b4:2e:da:9f:2b:
                    4c:e8:65:39:be:b1:3f:5c:8f:75:e2:e2:dd:7e:4c:
                    3b:8c:db:37:fe:65:01:e0:69:1d:d9:12:99:c4:41:
                    06:f6:34:bb:3b:05:bb:3d:d3:4c:4e:ba:14:66:bb:
                    df:31:0d:0f:ee:fe:10:7d:cd:ab:d1:c5:b5:53:3a:
                    3c:89:30:ce:04:f2:0f:16:5d:1e:04:a7:0e:22:4c:
                    02:ef:64:bc:24:25:8a:c9:08:85:6c:be:50:5e:59:
                    67:bf:bf:4d:a3:4d:e5:c5:4d:4c:1a:a6:63:1b:83:
                    1c:87:aa:de:bc:67:52:0f:6e:5a:4a:b7:c9:1e:04:
                    3d:e5:71:76:6b:c8:29:a2:b8:32:d1:ec:17:35:4c:
                    91:85:2f:59:ce:66:c3:36:94:5d:67:94:d4:ff:0e:
                    60:8e:b4:e5:f1:e8:65:ba:93:c2:64:38:bc:11:f1:
                    b7:cb:08:fb:69:79:18:b1:80:3b:6b:31:e7:7b:f5:
                    3f:51:7c:64:29:ba:fd:47:1a:f0:49:ef:4e:d2:cd:
                    0c:df:36:cb:60:fd:85:31:6a:e8:67:8f:09:44:16:
                    40:b7:f0:7b:35:5a:d7:af:3e:c4:63:60:04:ba:28:
                    53:e4:f8:9a:a0:bd:ae:46:fc:83:ce:10:52:fb:e1:
                    38:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A5:C9:3B:BB:F5:71:84:10:60:CA:0D:CC:36:9B:1C:3A:EE:17:41
            X509v3 Authority Key Identifier:
                keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:11:27:23:a5:9b:f4:50:5a:1c:43:28:d8:00:d9:98:40:da:
         9e:9f:dd:5b:4b:4f:ad:27:0e:c2:de:9f:d2:69:a0:70:14:f9:
         1c:f4:1b:f2:19:62:c4:55:ee:d3:67:e0:8b:d0:f1:b1:de:f2:
         e5:f8:b8:e2:79:83:e6:1f:26:fb:dc:92:12:8a:0d:b1:16:a0:
         33:ed:82:48:fe:f3:8b:7d:01:d7:d3:31:23:bc:1d:2e:3d:d5:
         ad:da:af:09:46:d0:e4:9b:b0:25:86:82:e7:21:9f:21:24:46:
         23:22:42:61:3f:e8:93:1b:45:ab:85:00:09:bb:36:ae:f0:1f:
         37:11:fa:5a:7e:e6:30:10:ba:f4:65:80:38:ed:9c:1e:ed:e0:
         13:5a:f0:22:83:20:29:ea:5c:56:62:78:ba:0e:5b:8d:b0:94:
         13:8c:a6:61:98:6c:63:73:ed:86:25:76:68:3c:5c:e9:1c:21:
         40:c0:64:04:57:12:09:79:82:0a:6e:af:c8:94:95:fb:cc:26:
         59:7a:92:bd:3f:83:63:0e:4e:e6:e1:87:a2:7f:53:59:2f:75:
         2d:4c:f6:d3:4f:43:c6:b7:36:0a:1f:d6:7d:e9:19:37:a8:59:
         4b:f0:6e:45:10:e7:04:80:30:7f:54:0e:dd:9f:fe:dd:bb:63:
         24:f0:8e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 13:35:05 2024 by rpki-client on console-ams.rpki-client.org