Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft
File:                     DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft (raw, json)
Hash identifier:          pwdmXZg8CM5Ei4DRaKWpI/z9+YlxzY3Pi521RAPgC6k=
Subject key identifier:   54:66:76:A2:76:06:D3:6D:BA:F9:AF:1E:BA:99:56:4C:EE:5D:E4:F2
Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F
Certificate issuer:       /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F
Certificate serial:       09D59367D6305AB786656748544581A3B6760DEF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft
Manifest number:          0144
Signing time:             Tue 28 May 2024 07:21:45 +0000
Manifest this update:     Tue 28 May 2024 07:16:45 +0000
Manifest next update:     Fri 31 May 2024 09:18:45 +0000
Files and hashes:         1: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl (hash: 5sq9YKvkupC+sQ9jXgE3JM+ZSgh/NP3F4cWuaWv1ZDU=)
                          2: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: qqCe6NIeY5wOKnmmaXo6AjpaN3wuW5Sv2eZDOjhNZNE=)
                          3: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: rIYn2x9xBTvWYF02bgk79rRjdwgksSC8GmTAPqYdm0M=)
                          4: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: qCHg+9KrPmmCMKbN84AylMJKCiXjXQ2KVOvVNtBlvIQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl
                          rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 09:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d5:93:67:d6:30:5a:b7:86:65:67:48:54:45:81:a3:b6:76:0d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F
        Validity
            Not Before: May 28 07:16:45 2024 GMT
            Not After : May 31 09:18:45 2024 GMT
        Subject: CN=546676A27606D36DBAF9AF1EBA99564CEE5DE4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:b7:54:6c:eb:57:fe:25:ca:3b:68:f5:c3:
                    67:ee:db:52:10:ab:11:b7:57:b8:96:a1:c7:40:71:
                    eb:59:64:90:d8:4d:1a:14:3a:10:8a:fb:f7:da:a9:
                    45:8c:c8:6a:ff:d6:33:e4:48:7b:34:10:73:e0:fb:
                    f7:31:78:3e:27:b1:d0:57:84:c4:73:2b:6d:d2:85:
                    0c:66:4f:aa:7e:d5:61:a5:22:3a:64:dd:a9:87:fb:
                    db:c1:01:9c:9e:ac:3d:f1:c4:ed:95:77:8b:21:6e:
                    e5:02:0a:ef:39:da:b7:b9:c5:92:e9:75:e5:1f:e7:
                    dc:c8:12:05:1c:d5:f9:62:23:4a:95:fe:fd:05:5c:
                    05:df:4d:cd:eb:ba:f7:2b:82:bd:0f:5f:fa:81:53:
                    20:67:4c:c5:dc:7f:92:51:b8:77:d9:42:d7:15:d3:
                    0e:3d:3d:4e:0b:2f:8d:17:70:17:e0:d7:af:bc:5a:
                    bd:b8:dc:25:39:c8:ab:d1:47:a8:c9:dc:01:da:51:
                    e1:56:a8:6e:78:1c:ba:d7:95:d1:7d:fd:83:09:36:
                    d7:4f:f5:ef:57:3f:d5:e9:8b:39:43:39:7b:8a:76:
                    49:83:25:6d:b7:5a:d0:d7:aa:d3:e8:0d:e8:ec:ef:
                    26:fc:5c:b8:38:f4:d9:ab:55:dd:6a:34:6a:f6:d1:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:66:76:A2:76:06:D3:6D:BA:F9:AF:1E:BA:99:56:4C:EE:5D:E4:F2
            X509v3 Authority Key Identifier:
                keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:4a:d1:00:9b:aa:09:84:c3:ac:34:a2:27:58:0c:15:05:c1:
         7f:ab:03:8a:62:c7:e8:50:fb:4a:a7:a2:fa:f7:25:4c:b5:71:
         09:20:3c:a3:1b:c8:48:5b:b5:7a:58:ec:92:72:81:2c:7f:61:
         5e:fa:65:ec:ae:9f:62:da:1f:34:b7:ba:79:7e:00:55:1c:71:
         fc:44:86:5a:ae:a4:a0:e5:2d:6b:17:1e:df:77:92:60:e4:ec:
         64:86:ab:65:3a:df:55:15:74:31:d7:b1:98:44:57:1e:d0:ff:
         93:d9:ce:d6:83:b4:76:2b:cb:56:5b:1b:bf:69:2f:e9:12:59:
         4c:23:08:60:d2:21:60:82:bf:6a:ef:d1:02:a6:d6:ac:00:3e:
         6b:83:2c:bb:a4:f7:a2:8f:b8:1c:99:c0:01:2e:24:37:5e:0c:
         ae:6c:f1:86:d5:d8:f9:19:d4:05:15:4d:1f:5d:1e:a1:8e:0b:
         bc:00:d3:bf:d6:28:45:68:c6:45:65:9a:1f:9c:ea:91:18:81:
         90:24:6a:05:39:9d:a9:c4:1a:a8:d6:93:de:bf:5b:32:28:cf:
         25:bb:78:7f:15:b9:42:f2:73:60:2d:07:25:76:45:a8:30:a1:
         28:c8:f1:23:a5:33:b1:b5:58:6a:d1:a5:c4:c2:e7:59:82:23:
         6b:30:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 09:05:21 2024 by rpki-client on console-fra.rpki-client.org