Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
File:                     F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft (raw, json)
Hash identifier:          4T1lKCjw8C3xBzinJZLRSfI9HzJJq5YTEWDXng23ROs=
Subject key identifier:   B1:35:A9:0C:0D:C7:E2:DF:B7:BF:5E:08:6F:67:0E:CA:08:87:75:9D
Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
Certificate issuer:       /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Certificate serial:       696560B47487348976BDE0BCB3317DEAE4F629D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
Manifest number:          A7
Signing time:             Sun 19 May 2024 21:50:34 +0000
Manifest this update:     Sun 19 May 2024 21:45:34 +0000
Manifest next update:     Wed 22 May 2024 23:32:34 +0000
Files and hashes:         1: 3130332e3136342e35382e302f32332d3233203d3e20313431393130.roa (hash: yUVxZDargSk2FtLBXi+cpONrxw8G3BPYR5lXD9FjXw0=)
                          2: F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl (hash: bpLcj47ka4BITyU9yAZRkWW6pao9X22rfDtxxf9wir0=)
                          3: 3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (hash: EzfUcVppF7kV0tBYky+ji9HzTpbBoE7AvZdEKau3gSw=)
                          4: 3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (hash: lEApANfBynwmS7n3WrJkA/+fBsqZjtiQIfYdyCYnd28=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
                          rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 19:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:65:60:b4:74:87:34:89:76:bd:e0:bc:b3:31:7d:ea:e4:f6:29:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
        Validity
            Not Before: May 19 21:45:34 2024 GMT
            Not After : May 22 23:32:34 2024 GMT
        Subject: CN=B135A90C0DC7E2DFB7BF5E086F670ECA0887759D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e2:de:56:76:0b:d8:0f:d5:ac:b6:f1:1a:c8:
                    1a:db:ee:02:84:1d:f0:22:46:b4:55:e4:75:66:d3:
                    02:3a:db:c2:5e:99:7b:79:26:0b:8b:67:51:76:e7:
                    ae:c6:e1:fa:97:f0:e3:a9:d3:c4:ec:dd:54:1c:24:
                    85:d6:e5:46:a3:39:0f:a5:93:63:e7:20:65:04:71:
                    0e:90:99:74:02:ec:36:4e:35:61:3b:87:56:61:f6:
                    a9:1b:3e:95:0e:7c:74:f6:1a:53:8d:59:f0:4c:75:
                    58:eb:af:b0:19:23:2c:11:bb:b6:24:22:df:74:28:
                    8d:81:67:e5:13:3c:89:f1:a8:66:99:2d:92:31:87:
                    6e:ea:87:3d:3f:9a:d0:95:12:8d:b0:c3:b2:3f:7f:
                    36:8f:4e:b4:cd:6a:33:3d:5b:d6:94:d9:d5:78:5c:
                    dc:f9:bb:d3:d1:2d:9a:0f:be:77:2e:b6:ed:6b:6a:
                    70:31:b2:2b:9d:27:4e:92:43:eb:19:8d:ab:bb:52:
                    3e:0f:0f:ef:46:03:c9:36:9f:68:32:ba:1b:0f:bd:
                    80:2e:f1:f1:a6:0a:d5:3a:c1:6e:4f:6c:75:5e:9a:
                    1e:9a:57:26:f6:2b:e1:5d:b7:43:d6:93:16:f8:20:
                    8d:0a:92:13:9d:f0:cc:51:8f:bf:76:63:0b:a0:e2:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:35:A9:0C:0D:C7:E2:DF:B7:BF:5E:08:6F:67:0E:CA:08:87:75:9D
            X509v3 Authority Key Identifier:
                keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ce:db:cc:60:39:07:6e:8a:db:63:72:b7:b6:bb:76:c6:c9:
         be:0d:00:7f:e8:b7:f2:09:89:b5:e7:68:41:0e:e8:6a:6c:86:
         23:74:74:31:0a:aa:d1:52:6b:d6:b2:ec:36:56:d3:70:a7:ef:
         45:19:b1:50:cd:69:72:87:bc:eb:10:51:7c:dd:96:2f:0c:74:
         83:45:30:8c:8b:77:cf:fa:ee:10:17:ea:df:ca:b1:c1:5b:72:
         39:f3:f0:cb:ae:64:41:85:b5:04:08:ed:91:ed:16:22:20:b3:
         d8:ec:73:2e:1b:62:e0:52:d0:2f:fc:a7:3b:64:ec:2c:48:91:
         4e:69:19:2c:64:00:42:dd:8b:34:2e:2e:b6:6c:a8:de:22:37:
         b7:98:ec:2a:e0:5e:59:41:e2:4f:5b:16:ed:92:b5:3d:ce:2c:
         ba:88:b1:1a:aa:bc:15:2b:d2:4d:50:5c:af:55:5d:b3:6a:77:
         9b:70:69:c9:73:7f:65:b1:bf:96:47:9f:04:fd:37:09:34:fa:
         d0:84:4a:f5:49:ad:00:71:f4:03:ae:fa:cc:df:67:cf:bc:b1:
         4b:8a:12:5d:c9:70:2b:e9:76:e9:be:e2:31:e6:03:01:f0:21:
         ff:46:49:01:12:52:63:77:28:b3:70:41:a1:19:61:e3:55:8a:
         76:4b:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:56:05 2024 by rpki-client on console-ams.rpki-client.org