Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
File:                     F61D0A85B56D8F824658A8287BE8D4F659680324.mft (raw, json)
Hash identifier:          Tz+CHWcRvR3dGdgoc7F2RAnk16nBzksSnx4iVryjaj4=
Subject key identifier:   CB:43:C4:2A:4F:84:44:5A:55:AE:8E:42:51:99:A5:16:4A:AB:C1:D7
Authority key identifier: F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24
Certificate issuer:       /CN=F61D0A85B56D8F824658A8287BE8D4F659680324
Certificate serial:       4CC71B5870752007D5ADEEAA5CB8052E32E90283
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
Manifest number:          0153
Signing time:             Fri 17 May 2024 21:12:02 +0000
Manifest this update:     Fri 17 May 2024 21:07:02 +0000
Manifest next update:     Tue 21 May 2024 01:49:02 +0000
Files and hashes:         1: 3130332e3138362e39362e302f32342d3234203d3e20313439363933.roa (hash: JbWzlg1lnWum+3WuBwswrM9CMw427j/ZXnbxFo3i/MI=)
                          2: F61D0A85B56D8F824658A8287BE8D4F659680324.crl (hash: VUgKFT0vtlDLHZXeSO9JP1k6ATpXR9Ie55SrIt2SpiY=)
                          3: 3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (hash: 0HrmaIWLMVJ522C0uZ3ctQptadI235WIoKRs1xErZ34=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl
                          rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 01:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c7:1b:58:70:75:20:07:d5:ad:ee:aa:5c:b8:05:2e:32:e9:02:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61D0A85B56D8F824658A8287BE8D4F659680324
        Validity
            Not Before: May 17 21:07:02 2024 GMT
            Not After : May 21 01:49:02 2024 GMT
        Subject: CN=CB43C42A4F84445A55AE8E425199A5164AABC1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:61:12:c0:18:46:ad:55:cf:e0:86:89:86:
                    aa:be:08:0f:e7:c4:db:99:e7:46:53:e9:81:11:c1:
                    dc:b1:69:b9:a5:e4:39:53:e6:e9:81:99:2d:c5:5d:
                    3a:ee:86:d1:d3:d2:86:de:db:57:6d:f0:d3:fd:4c:
                    46:65:63:17:c2:72:85:18:8a:25:aa:f7:d2:f0:7c:
                    44:9b:d0:e7:a2:30:27:1c:96:45:9f:41:5a:25:1f:
                    5b:bb:96:a8:22:6d:a8:50:d2:e5:8f:2f:4f:8f:8e:
                    96:38:ba:fb:51:12:0c:1d:cf:5f:c9:48:1a:84:9b:
                    1b:e4:15:9b:18:37:42:38:39:53:32:7e:5c:12:71:
                    5d:48:4a:4c:39:ac:9e:44:8b:30:1f:86:51:78:31:
                    a1:9b:34:9f:77:ef:d3:ea:bd:9e:53:ea:fc:ff:1e:
                    ec:fb:4a:a7:03:a4:81:01:5c:4d:d4:8b:32:f0:e3:
                    4c:ce:25:c7:63:4f:80:3e:69:7a:f9:91:6b:d0:68:
                    53:f3:a7:20:e1:b8:4c:a7:07:a0:cb:c7:01:8a:00:
                    40:55:3d:ce:e7:8d:91:f4:e7:8f:51:3d:e7:02:46:
                    e3:c3:0a:6d:4b:34:a8:63:0a:7c:cd:b0:e2:cf:ba:
                    35:93:a6:a7:dd:0f:3d:f5:84:a7:ea:3e:7f:d4:6f:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:43:C4:2A:4F:84:44:5A:55:AE:8E:42:51:99:A5:16:4A:AB:C1:D7
            X509v3 Authority Key Identifier:
                keyid:F6:1D:0A:85:B5:6D:8F:82:46:58:A8:28:7B:E8:D4:F6:59:68:03:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F61D0A85B56D8F824658A8287BE8D4F659680324.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/F61D0A85B56D8F824658A8287BE8D4F659680324.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:5c:9f:28:a3:90:1a:4a:3f:54:71:95:a1:41:dd:95:19:
         76:ed:42:1f:0b:2d:a6:e7:7e:97:a2:63:16:15:a8:1a:2f:0b:
         c3:a3:d8:08:21:8e:ee:3c:62:36:ac:c1:e2:2f:3f:30:3b:6e:
         de:68:96:b3:87:84:e9:be:90:45:05:a1:75:2c:c3:9f:06:39:
         ae:7f:e5:e8:ef:30:ea:9a:e5:e4:84:59:d2:a4:d5:3f:2f:c4:
         82:1a:9a:f0:a1:23:d6:76:2d:8b:05:41:6c:53:93:48:d7:52:
         d3:14:22:bb:16:67:50:63:d7:5c:8a:0a:4c:0a:c3:52:36:17:
         1e:c0:8f:20:0e:6e:37:f6:f9:1f:1f:d0:bd:c4:ec:5d:4c:29:
         2c:6f:bf:e2:1a:7f:63:81:0a:62:a6:a7:af:69:b3:3b:c9:1d:
         fb:b4:09:ed:8b:24:aa:6a:84:4b:ac:12:25:65:53:2b:0a:50:
         b8:a9:73:eb:5c:93:1c:51:39:92:3b:ac:84:51:b1:47:f4:3c:
         71:53:3d:d9:71:50:af:42:1c:38:bd:86:c9:04:54:6e:95:83:
         c2:bb:4b:44:2e:47:8d:22:2b:80:ca:e4:6b:04:02:32:7c:83:
         97:cd:47:67:77:fa:19:20:76:90:28:88:66:88:81:79:30:6a:
         16:a2:39:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:38:07 2024 by rpki-client on console-fra.rpki-client.org