Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft
File:                     89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json)
Hash identifier:          loAZdQBSiouIHmdnGcQVQCDWB2mcxyiVfBQX0VnIkVQ=
Subject key identifier:   E2:2F:EF:4D:3D:75:F6:CA:82:F5:F2:24:7F:1A:94:89:CB:B5:3E:B0
Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54
Certificate issuer:       /CN=89B98D1F135A7FC66C0284C34477C19604645554
Certificate serial:       79F7BDAE66AE333CB23C7DDB0C82AFF55D8F7419
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft
Manifest number:          BA
Signing time:             Tue 28 May 2024 00:22:01 +0000
Manifest this update:     Tue 28 May 2024 00:17:01 +0000
Manifest next update:     Fri 31 May 2024 10:20:01 +0000
Files and hashes:         1: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: iBce8EmgyPopGL+H7wWheojmLLts3PdyHs2P5FPK4X8=)
                          2: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: Ru3oN3rMT+0+D/uIJb02vXgH0ObKyRjYQNK9vHRK5L8=)
                          3: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: wTaE+d3Fp2+QOZ2gZH9WEx+gRb3GKojxjRUqTNijR7U=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl
                          rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 21:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f7:bd:ae:66:ae:33:3c:b2:3c:7d:db:0c:82:af:f5:5d:8f:74:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554
        Validity
            Not Before: May 28 00:17:01 2024 GMT
            Not After : May 31 10:20:01 2024 GMT
        Subject: CN=E22FEF4D3D75F6CA82F5F2247F1A9489CBB53EB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:3c:09:8d:77:2f:89:a6:4b:86:07:d7:ee:
                    d5:f6:9d:2c:b4:14:c3:f1:49:64:52:1b:91:92:3d:
                    00:5c:8c:98:46:fa:8a:94:bd:56:5b:3b:84:05:19:
                    5d:5d:7b:e6:47:14:32:27:02:ba:89:74:f3:38:55:
                    84:1a:c1:bc:3f:cc:4c:8e:24:c0:de:80:b8:0a:85:
                    16:06:c4:1a:64:b2:bf:32:6d:9b:61:99:49:af:05:
                    db:1d:c7:69:05:4e:fa:ef:26:2e:76:4e:01:ee:cb:
                    47:4f:96:af:54:e9:6a:15:b3:c7:8c:8d:15:97:aa:
                    c5:31:0c:f9:3a:08:ec:e8:dc:b7:09:53:78:32:1a:
                    5d:bc:fb:87:97:56:59:d0:7d:d8:d3:cb:1a:df:13:
                    3e:6f:04:e1:cf:9f:9d:00:d8:88:1e:ac:0d:8d:d8:
                    ee:1b:6f:bb:a2:3c:6c:9e:ef:4a:67:34:ff:3b:a8:
                    1c:bb:98:92:b4:ca:84:95:39:52:bd:d0:7b:fa:5d:
                    dd:34:26:fe:bc:69:e3:84:95:44:ee:09:52:e2:f0:
                    ab:7b:50:b4:04:f3:cf:e7:f5:5a:22:72:3d:08:c5:
                    63:57:2a:68:40:4c:40:dd:96:70:a7:9f:2c:e5:90:
                    72:3b:7b:e2:d2:76:4c:b5:83:ee:e2:74:a8:32:6f:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2F:EF:4D:3D:75:F6:CA:82:F5:F2:24:7F:1A:94:89:CB:B5:3E:B0
            X509v3 Authority Key Identifier:
                keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:15:b2:02:c4:5b:b9:e4:cb:b4:a7:f1:07:78:88:73:19:05:
         58:c3:91:df:06:17:2a:5d:fd:86:d0:af:17:52:12:7e:0c:b6:
         66:58:9d:81:79:a3:7c:d8:c2:a7:15:d5:c5:fc:15:d7:f3:37:
         a1:c3:db:11:71:98:d6:f3:59:31:60:f9:7c:38:bf:5a:6f:ad:
         4e:1f:90:39:20:99:e9:db:67:7b:f3:d1:6c:c0:61:43:ea:4f:
         32:01:04:09:95:ec:ef:88:fc:2c:a0:74:be:d2:11:38:9a:77:
         79:16:92:a4:88:f8:32:a9:40:4a:16:2b:3f:0b:80:c1:d2:40:
         a8:06:3a:64:7c:86:47:7a:c5:ca:04:fb:77:ce:d5:eb:7d:1f:
         b9:3a:a6:e8:02:07:26:a0:50:7b:66:37:ef:7f:2d:3d:7c:00:
         9b:f4:c1:12:e7:06:00:36:e9:7c:09:76:f9:cf:7e:70:9f:fa:
         27:41:8c:e2:f3:7f:b5:be:a5:a3:a8:cf:27:03:91:ab:ae:82:
         c7:77:0b:40:c1:08:0b:26:10:9e:c0:cb:cb:e3:6a:72:56:4f:
         c8:4c:cc:9a:e9:10:ed:17:c6:d0:f0:a7:56:e0:50:2e:16:ab:
         c4:f2:32:ec:49:6f:db:17:db:5f:e1:8e:ea:41:ab:ec:98:c8:
         0f:62:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 00:58:47 2024 by rpki-client on console-fra.rpki-client.org