Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft
File:                     B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json)
Hash identifier:          s58a6VcKyrVCvwSC6hzzMMBW5mIYWUEq32jlA0dg+5Y=
Subject key identifier:   65:4B:94:8F:CF:AE:3E:43:22:14:84:3C:CD:53:3B:52:53:9A:B0:56
Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB
Certificate issuer:       /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB
Certificate serial:       06FAC6655070E6C3CD09F8DBDE941F821308A728
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft
Manifest number:          0157
Signing time:             Tue 28 May 2024 17:51:51 +0000
Manifest this update:     Tue 28 May 2024 17:46:51 +0000
Manifest next update:     Fri 31 May 2024 19:35:51 +0000
Files and hashes:         1: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: CBS6PkPJm2fUJO/gSSovGJ6gkrXOP+jZncGULJDTAhQ=)
                          2: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: WaExmdE1KwNDamWsYUwC2OhYRUUH8G2ZgYFPiEvcQzM=)
                          3: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: VUgo07FAP183hcn1tsxAwvEb1gMHzb6Dj7hfMPU//BE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl
                          rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 19:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fa:c6:65:50:70:e6:c3:cd:09:f8:db:de:94:1f:82:13:08:a7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB
        Validity
            Not Before: May 28 17:46:51 2024 GMT
            Not After : May 31 19:35:51 2024 GMT
        Subject: CN=654B948FCFAE3E432214843CCD533B52539AB056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:1a:71:72:bb:a8:9f:27:64:89:39:48:6d:
                    8a:2b:4a:ce:33:c0:b3:4f:7f:f1:64:37:05:97:29:
                    dc:ea:c4:2c:13:f0:c5:f1:7c:35:5e:4a:f3:55:57:
                    4f:0c:44:ed:f2:da:8b:59:22:ee:6a:14:f7:c4:17:
                    17:e0:18:f0:c2:a7:19:fc:3d:c3:c4:b3:5c:4c:66:
                    f6:99:85:d5:b1:5e:16:46:eb:53:aa:2e:2b:46:84:
                    e6:5d:15:ba:02:0b:82:25:17:37:dc:be:56:2e:ec:
                    44:ab:fe:35:8a:e6:af:8b:48:4b:18:d7:bb:3a:f9:
                    90:eb:30:10:aa:c2:6d:14:5f:5f:f0:4c:1d:3f:56:
                    85:90:17:54:0d:82:c4:62:71:14:11:f5:0f:86:20:
                    4e:f9:ad:45:0d:41:ce:34:e7:97:05:3a:d2:ef:b1:
                    61:d6:00:ab:0d:5d:db:84:cb:ad:c6:ae:9c:dc:cf:
                    26:3e:2a:26:88:b9:df:7c:ea:37:7a:1b:47:a9:d4:
                    d2:d1:cc:6c:9f:12:26:b9:22:f7:88:1a:a7:c8:72:
                    84:27:da:5f:66:33:d7:ae:1d:6a:fd:6e:78:74:c3:
                    b4:dc:8b:df:88:e7:f8:bf:b0:9e:c2:83:5b:4e:2e:
                    d2:aa:cd:35:e4:e8:3c:01:58:c4:0a:b0:33:99:d8:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4B:94:8F:CF:AE:3E:43:22:14:84:3C:CD:53:3B:52:53:9A:B0:56
            X509v3 Authority Key Identifier:
                keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2b:8f:31:9e:8d:e9:9d:29:de:1d:83:48:13:cf:23:a7:73:
         50:3f:09:cf:ca:a8:48:b8:f4:a9:1f:dd:73:4d:e4:ef:bf:dd:
         16:21:86:5d:36:4a:25:6e:59:dd:db:cc:30:9a:fb:63:60:45:
         44:07:22:b7:33:9a:12:ca:63:fa:e0:8e:7b:cc:7f:a4:0d:5f:
         f4:84:a3:85:f4:eb:2e:29:96:25:11:c0:5e:31:1d:18:3d:9c:
         3a:d0:7a:d9:04:18:66:e0:9a:03:80:2f:f3:4b:9a:cc:67:e5:
         a1:78:5a:29:d9:b3:33:24:8c:2f:6d:41:3a:96:b4:fb:78:e4:
         c3:38:a5:af:d4:37:93:1a:7b:01:9e:3f:14:10:ec:f3:b6:20:
         a1:85:95:a2:69:18:12:0a:bd:a2:f6:4c:23:82:2e:ee:79:95:
         e4:ab:d8:17:9c:a2:0c:85:b0:9a:d8:16:6e:16:ef:8e:d2:6f:
         42:c3:ac:5f:02:da:60:49:53:3f:91:80:07:6b:c1:8c:b0:01:
         0c:5c:44:87:b7:e9:bb:f7:c8:dc:a8:38:00:51:a8:b9:8e:31:
         93:da:b8:0d:98:80:36:43:af:4b:3b:15:9d:6d:b1:f0:e8:8e:
         30:99:b0:36:8a:c6:f8:4c:1f:07:af:9a:5c:ba:86:8e:3a:89:
         3a:ea:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:28:40 2024 by rpki-client on console-ams.rpki-client.org