Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft
File:                     D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json)
Hash identifier:          iyfd8/Our9E2ilGcJaOZGaZfp92RIyWMpwrw0/5c8TM=
Subject key identifier:   14:57:7A:06:2A:AE:C4:82:41:D2:56:D5:D8:96:D6:D4:52:34:80:1E
Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A
Certificate issuer:       /CN=D8D82E797873C8877988A42E5C473D1919238C2A
Certificate serial:       194346CD8FE41E0A0F4A84F1D88C69B5D3F8482C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft
Manifest number:          47
Signing time:             Thu 27 Jun 2024 17:10:47 +0000
Manifest this update:     Thu 27 Jun 2024 17:05:47 +0000
Manifest next update:     Sun 30 Jun 2024 19:43:47 +0000
Files and hashes:         1: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: mpjegSKtEmRhj4ammyJHEgX4YPsDmDbnAwrsvANHuHc=)
                          2: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: T3ZJDMOJTb0CQTGu41Nf5Vlt0/shD7fTd/Z+eKLZcDM=)
                          3: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: S9u62clpgJe5h8+hsptEA2skWgmQVRUf4bT4pfGZtb0=)
                          4: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: BAWam8MEbaik8kVNAVbDe/wEunTtqh2OtvtHFe9hJeE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl
                          rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 17:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:43:46:cd:8f:e4:1e:0a:0f:4a:84:f1:d8:8c:69:b5:d3:f8:48:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A
        Validity
            Not Before: Jun 27 17:05:47 2024 GMT
            Not After : Jun 30 19:43:47 2024 GMT
        Subject: CN=14577A062AAEC48241D256D5D896D6D45234801E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:66:6f:2a:5a:73:0a:3e:e3:ed:ac:d1:1f:
                    64:64:02:67:04:ed:9d:b7:ff:10:85:12:90:3b:89:
                    7c:07:ba:18:0a:bf:23:41:a0:aa:5c:87:1a:d3:05:
                    f8:9e:c1:4b:30:e2:94:a1:7e:fe:c3:58:e9:fd:88:
                    fe:33:5c:bd:38:c8:ad:79:1f:2d:34:79:51:b1:4d:
                    c5:d4:1b:6a:0c:22:69:81:7a:6c:12:dc:6b:c3:f2:
                    e2:22:60:13:45:e1:77:f7:bd:df:e5:0f:85:b0:18:
                    48:36:46:1a:bf:b1:a1:86:10:c5:73:ac:1d:fd:bc:
                    72:22:4a:3e:ec:41:d9:0e:1a:00:26:db:2a:dd:71:
                    55:dc:61:6d:97:26:2b:5d:5f:ed:53:eb:5f:f9:3e:
                    0a:f9:96:32:30:ec:35:a8:37:3b:2e:11:5d:36:ec:
                    3d:b6:6e:59:13:e5:d8:f9:8e:49:f2:3b:94:fb:54:
                    b5:dc:91:42:a1:ff:13:5d:37:c2:36:74:36:86:8a:
                    af:31:4d:de:43:d2:a1:f7:b4:4c:79:8c:a2:2c:bc:
                    b6:ea:30:38:10:af:33:53:31:9a:65:5b:55:51:20:
                    02:72:ec:d1:ce:4c:89:c2:99:e3:37:d6:e1:4c:ce:
                    0b:d3:62:ab:a1:cb:7a:09:65:13:56:58:fe:ec:0c:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:57:7A:06:2A:AE:C4:82:41:D2:56:D5:D8:96:D6:D4:52:34:80:1E
            X509v3 Authority Key Identifier:
                keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cb:dc:b1:73:a0:44:8e:33:f2:2d:b5:a7:43:27:b4:11:94:
         9c:43:16:78:81:79:e7:12:48:6b:d3:0f:fd:38:32:ab:2c:3d:
         a6:c4:d1:93:4b:8e:4a:21:fa:70:6e:cd:4e:76:9a:ea:a1:e7:
         f1:7c:e7:43:50:8c:0c:b9:dc:83:73:16:f9:1c:f2:fc:64:fc:
         77:5b:35:74:bf:6b:44:b5:f8:e9:0a:7c:f8:bd:74:91:78:e1:
         cc:cc:ae:0c:33:ee:38:b7:06:5b:45:21:d4:9f:02:de:97:1e:
         d2:db:7a:d8:99:ba:53:a4:41:39:e5:25:06:fc:19:58:c0:44:
         3a:d8:c2:41:a6:74:59:8c:77:a1:49:f7:c7:5a:f8:3f:03:6a:
         a7:b6:52:3b:ca:b6:5f:94:7b:c5:08:51:a3:07:81:fd:f9:20:
         3c:40:3f:af:df:af:64:1e:6a:f1:5c:f2:82:71:ea:24:da:ed:
         bf:4d:05:0a:70:03:f8:69:a7:40:c0:4e:04:c5:b5:50:4e:db:
         30:9e:1f:b7:de:f1:67:e8:49:36:7f:2a:19:c0:23:f7:89:dc:
         a2:59:e8:fd:58:56:5e:af:dd:4b:f1:6b:db:17:b6:5e:50:64:
         b3:0d:d9:65:45:11:2d:e9:7c:7d:f8:06:b9:1f:c7:3c:dd:da:
         d8:b0:da:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 18:23:26 2024 by rpki-client on console-fra.rpki-client.org