Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
File:                     FC646066A689B77054AF95653FA324395357E6A3.mft (raw, json)
Hash identifier:          oxDeRTewOaR7qEF5sD9VArGU8fDKuJd51QY8wvJf2jo=
Subject key identifier:   D9:C4:80:84:78:5A:61:9C:B4:A6:36:DF:41:8C:8F:DA:30:B1:75:1C
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Certificate issuer:       /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial:       315B903DE2F5AAEA16021707AE7E3C2A707FF3D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
Manifest number:          0430
Signing time:             Sat 18 May 2024 00:11:59 +0000
Manifest this update:     Sat 18 May 2024 00:06:59 +0000
Manifest next update:     Tue 21 May 2024 02:25:59 +0000
Files and hashes:         1: 323430323a633330303a3a2f33322d3438203d3e203535363533.roa (hash: /zt3GRiJNj5wGbh/aOYj3PZCyOkoiz6T/zzdS4RgYm4=)
                          2: 3230322e35322e31322e302f32322d3234203d3e203535363533.roa (hash: f0YmbcdptWuvXe0FKIl4PHpC9KJKMlKiP/X8ERQTCDs=)
                          3: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (hash: b5VQWKC2xBARXrUwyGWXCm41AY5zF8CkHAe5nlsAHiY=)
                          4: 34332e3234392e3134302e302f32322d3234203d3e203535363533.roa (hash: 92Ft7XJfqVJHH31lkZx2rejiwmp3996Uuj7gVMEiVoM=)
                          5: 3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (hash: 7srUQKoO5rHeVTvX7A7WP5B+w9PDonTAVbVBRgo6eeE=)
                          6: FC646066A689B77054AF95653FA324395357E6A3.crl (hash: mr9E8CLmKvfGfkDVkkR3OmrW4gsbWR66JNUt9bMMlsg=)
                          7: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (hash: 4qURHOrI0QyBD0a7W7pQdCuS3TJVGrbs9mQvKOhMAFQ=)
                          8: 3130332e31312e39362e302f32322d3234203d3e203535363533.roa (hash: LKyrZWRnEOAachj2gnQW+DCvgKmWkI/NGzPaT1efClo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
                          rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 02:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5b:90:3d:e2:f5:aa:ea:16:02:17:07:ae:7e:3c:2a:70:7f:f3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
        Validity
            Not Before: May 18 00:06:59 2024 GMT
            Not After : May 21 02:25:59 2024 GMT
        Subject: CN=D9C48084785A619CB4A636DF418C8FDA30B1751C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:db:76:e8:11:8c:55:3f:c3:c5:e4:89:39:
                    75:54:6e:dc:38:01:be:3e:12:cc:3d:bc:54:f5:98:
                    90:72:7e:66:a6:c6:eb:75:24:fa:23:2b:a3:71:b9:
                    01:70:d2:a2:e2:82:7c:61:bb:e6:ad:85:70:1b:57:
                    38:53:05:39:18:bd:4d:98:86:db:54:9a:87:07:f7:
                    38:82:6d:55:97:14:e3:57:e0:71:d2:76:4b:9c:06:
                    f4:58:68:23:d9:11:5d:b9:d5:19:a3:d5:a0:9a:c6:
                    c1:fa:51:00:18:f7:53:8d:ac:b6:74:17:de:41:3f:
                    4e:10:3e:56:84:0a:de:73:ef:48:1b:51:16:77:98:
                    ab:2c:1e:55:1d:ce:72:cf:52:92:64:2f:49:3d:c2:
                    56:27:cc:61:ef:23:63:c8:c4:5e:ff:d9:bc:fe:b4:
                    93:75:83:63:c4:54:c9:b5:35:a1:4b:60:df:24:64:
                    73:89:dd:27:42:d7:bd:f0:b4:48:65:a7:73:98:83:
                    2a:55:64:e5:d2:32:8c:51:6f:d4:6e:46:97:f5:b2:
                    c9:3d:bd:e7:b5:74:e7:4f:f3:c6:9b:15:b7:3b:81:
                    00:57:8f:f0:7c:3f:a4:77:80:bc:73:99:92:02:b4:
                    86:fb:66:eb:07:de:81:bc:d9:32:20:e2:e4:5e:59:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C4:80:84:78:5A:61:9C:B4:A6:36:DF:41:8C:8F:DA:30:B1:75:1C
            X509v3 Authority Key Identifier:
                keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:cf:e3:67:fc:c3:ab:f0:36:7d:e8:95:88:e5:93:5f:75:a0:
         2e:55:84:b6:3e:f3:65:27:93:4f:36:d6:ff:43:91:48:86:b0:
         bf:88:32:d3:a9:c7:8b:05:7a:6d:06:c4:35:b3:27:51:b6:d4:
         6b:04:dc:b1:d1:4b:b5:8e:36:c3:17:f4:f2:0c:81:62:3d:90:
         c6:9a:0e:f4:39:48:a4:6e:76:1c:54:ec:d5:cf:e4:db:e6:f4:
         0d:6b:78:ce:72:c8:cc:f1:7c:18:ee:7e:0b:94:30:0c:05:be:
         7b:d1:8d:41:ed:0b:e4:0b:04:be:28:73:26:23:1f:01:a6:39:
         55:ce:c5:e7:65:5b:90:8a:2a:a4:91:fc:5e:49:06:e2:6c:bb:
         1c:7c:c1:68:da:23:a6:58:39:a2:d5:30:14:7f:19:37:d4:d7:
         6f:6c:23:15:c3:14:3f:6d:b1:5f:b6:ea:82:04:5d:c6:58:c5:
         bb:5c:95:5f:39:ed:b2:c7:4f:5e:c1:b7:7e:1b:89:43:2b:8f:
         96:7c:60:a3:a3:90:76:43:76:61:d3:4f:4d:65:e0:c2:6b:9c:
         1b:b6:41:d6:a2:9f:48:08:ab:e4:bb:05:75:0f:81:7c:75:e7:
         d2:1a:4e:ad:0c:80:18:92:6d:91:31:b4:a8:f9:c7:47:00:60:
         c9:43:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:42:24 2024 by rpki-client on console-ams.rpki-client.org