Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
File:                     B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json)
Hash identifier:          7CTcSlnvowoG5o1iZEtWaLIdj/5Ljel8QIGk2HURnLo=
Subject key identifier:   D6:8B:25:9C:C5:15:68:70:F9:54:3C:5D:EA:19:52:95:00:3F:95:88
Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB
Certificate issuer:       /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
Certificate serial:       0A4B11B4C67735C2E810B05C4981976B77EF15CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
Manifest number:          0191
Signing time:             Mon 27 May 2024 21:01:27 +0000
Manifest this update:     Mon 27 May 2024 20:56:27 +0000
Manifest next update:     Fri 31 May 2024 03:32:27 +0000
Files and hashes:         1: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: 3qSjq/jqetaUHlXUWcJecHn2SSWiXCNCXKHeLwZzntw=)
                          2: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Ti4AVLjtCHcbYt/fOp6n1pQPT8S6/M9csl1u1YR/7w4=)
                          3: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: QuOlufAkw0xB3aClvsC2vuyjNtFbNhtL+ZhAE6MplZU=)
                          4: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: 3GAl4Urihw/Z0hmmd32uC2UnV8tlO3ans8ygIvazXnk=)
                          5: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: YrzRoHL+7FhmkmXX2kcQHvm2oiKuK1bw9TtWy68Iz2o=)
                          6: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: vuVFz67ev/Lbg5I4cpPWAEk9eJqcruyBNLvbnAFidpw=)
                          7: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: 2/EoyMi9Qd1YRz9IbcJ971e5TMvEq6Eq65Lp1jlKetw=)
                          8: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: V3wKwFZv3C172ZN3zaGBDRTN69sWThslNE+cBZrP3ck=)
                          9: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: 2MbbVET/Ap12bXEZA+pomevueJXZ5rLBAy45cydUgLE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl
                          rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 21:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4b:11:b4:c6:77:35:c2:e8:10:b0:5c:49:81:97:6b:77:ef:15:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
        Validity
            Not Before: May 27 20:56:27 2024 GMT
            Not After : May 31 03:32:27 2024 GMT
        Subject: CN=D68B259CC5156870F9543C5DEA195295003F9588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:2a:b3:3c:be:9d:ea:56:9f:8a:67:97:14:
                    92:7b:bf:e3:21:2f:35:a9:84:54:d6:74:cd:dd:a5:
                    7b:02:08:f6:1f:fb:0f:57:6a:d7:ed:6a:12:0e:61:
                    82:72:e9:6a:8b:d2:34:57:73:70:ba:4d:19:7e:4b:
                    46:46:a8:8c:50:76:5d:28:76:ba:6f:f8:b9:26:e7:
                    fc:c5:48:e3:24:75:27:90:34:d5:50:62:2f:29:e7:
                    54:73:b2:de:66:29:b6:06:3a:27:01:18:d7:3c:f6:
                    ab:ca:e8:5b:1b:e6:6c:40:af:24:b4:8d:fc:8c:c8:
                    73:1d:e7:dc:80:a2:49:2f:d3:5e:53:14:39:f2:2e:
                    20:ec:bc:2c:6e:63:42:19:d2:70:1e:fb:98:3f:ae:
                    3d:df:c9:f3:64:34:5d:c2:c6:3b:4c:b1:2f:59:82:
                    b5:81:9f:60:b1:6f:52:5e:8e:d0:3b:b8:8d:5a:03:
                    f3:bb:d5:0f:d1:2e:b7:75:c7:b7:bb:16:9b:0f:e0:
                    3a:1e:61:28:db:84:de:51:27:70:8d:0a:fd:af:10:
                    bb:f2:57:e7:bc:a1:0d:ec:ae:61:d4:39:49:b6:ce:
                    9d:a2:e8:48:12:4e:a0:19:5e:45:da:4a:3e:ed:ac:
                    fd:84:bc:d0:82:78:4a:d9:c4:68:ba:61:59:36:19:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8B:25:9C:C5:15:68:70:F9:54:3C:5D:EA:19:52:95:00:3F:95:88
            X509v3 Authority Key Identifier:
                keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5c:d2:b5:dd:58:ce:45:93:c4:1c:f0:53:a7:56:c0:35:1c:
         e3:92:01:52:02:3b:20:6e:b8:40:6d:aa:fd:33:d6:05:27:f5:
         b4:3f:55:77:bc:16:2b:b6:bc:52:8c:ca:6f:2c:2a:15:1a:b0:
         99:40:5f:d2:45:2f:74:9c:71:f0:8e:0d:29:96:69:e0:90:b0:
         cf:90:04:a0:bf:0d:12:dd:49:fc:1c:ec:10:2a:25:23:0d:83:
         ab:4a:7b:6d:4d:6e:21:8f:dc:6a:15:d8:f2:48:ef:29:90:3a:
         3f:b6:24:b5:a8:c6:6c:bf:1f:7b:ec:30:1b:d3:f1:12:4a:be:
         64:20:87:2e:7b:53:c8:d2:6c:50:3e:9b:2a:dd:6e:7a:d3:ff:
         25:80:2a:f8:3a:70:7f:b8:4a:2b:8d:9d:f4:a8:9b:6a:94:89:
         51:1a:88:8f:8a:0c:f7:f6:28:fb:db:74:8d:8a:e0:86:41:44:
         42:cf:58:50:60:98:72:8f:e6:b9:41:a4:54:57:72:64:42:a7:
         48:1b:4a:26:08:66:3f:44:26:85:a9:1f:0e:ce:cf:aa:51:17:
         0f:aa:41:f7:54:cf:6e:c9:11:6e:62:c2:9d:21:c2:23:29:8d:
         0e:cc:a4:63:fe:26:92:89:03:67:ea:c1:26:d5:6f:ff:a1:27:
         28:b9:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 22:50:41 2024 by rpki-client on console-ams.rpki-client.org