Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft
File:                     8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json)
Hash identifier:          LMqyImbZUMo3zBiab8kxC0SMuZvDdOwXFrFA8rWACCY=
Subject key identifier:   AD:14:5A:21:19:F3:1C:D6:11:3B:76:67:6B:52:B6:27:09:72:2F:BE
Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86
Certificate issuer:       /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86
Certificate serial:       16D5F24E63E97507545587DA0D6FFF7683C3CB87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft
Manifest number:          025E
Signing time:             Sun 19 May 2024 16:51:09 +0000
Manifest this update:     Sun 19 May 2024 16:46:09 +0000
Manifest next update:     Wed 22 May 2024 20:53:09 +0000
Files and hashes:         1: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: mVJX9oxL4QYhiz5hVeq2v8NHUYA+ubI8hiYmT+KOby0=)
                          2: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: p6rvWa8yiv+uhxyXxf3MhcWGZ+heTnuBCTWTkTgrapY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl
                          rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 19:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d5:f2:4e:63:e9:75:07:54:55:87:da:0d:6f:ff:76:83:c3:cb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86
        Validity
            Not Before: May 19 16:46:09 2024 GMT
            Not After : May 22 20:53:09 2024 GMT
        Subject: CN=AD145A2119F31CD6113B76676B52B62709722FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:6f:9f:ea:64:df:90:84:b8:de:e7:08:64:
                    fc:13:db:a4:be:84:0c:db:5b:e3:d3:d0:15:8c:aa:
                    30:d4:d0:f0:1f:58:ae:af:31:97:61:68:92:0f:22:
                    44:29:19:ea:e6:f0:39:75:18:b5:08:52:af:24:f1:
                    d0:5a:83:e8:bb:f3:c0:11:9b:b0:b5:86:a8:a9:66:
                    91:62:fc:2d:f7:d6:7a:85:0c:a9:ff:79:f7:e5:18:
                    0d:df:d2:12:b2:1e:2b:b4:c6:68:8f:45:e8:32:bc:
                    bd:9e:95:96:92:d3:a6:65:4e:30:61:05:83:11:f9:
                    49:e3:6e:95:88:28:8f:0b:56:d4:a3:69:fd:04:5d:
                    c4:e7:3e:4d:87:01:cf:10:a3:ca:91:67:42:d9:78:
                    1e:41:ff:0b:3e:f6:9b:b3:d0:9b:c9:ac:87:a0:f1:
                    90:42:81:2c:6a:78:ae:a3:dd:87:01:17:a1:53:55:
                    e4:a7:61:bf:f8:26:81:9e:df:ad:75:b4:d1:e3:62:
                    2e:d6:5a:65:a0:df:50:d6:20:74:2d:a5:ed:0d:8a:
                    3f:3a:54:ae:6d:15:33:b2:ea:03:b3:de:59:de:2c:
                    cd:22:27:18:80:56:f4:6d:ea:02:ef:a2:9f:d2:24:
                    19:7a:4a:65:a7:95:09:51:78:10:86:80:86:df:a4:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:14:5A:21:19:F3:1C:D6:11:3B:76:67:6B:52:B6:27:09:72:2F:BE
            X509v3 Authority Key Identifier:
                keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ca:8e:e1:1e:26:8e:da:c5:83:83:53:df:d0:ee:53:19:35:
         65:fb:3f:8a:b5:0c:26:e7:78:d3:36:5b:6f:e5:20:3f:2a:62:
         4f:b7:90:2e:a5:08:b3:4f:66:ae:05:b7:f9:68:d3:be:b0:cd:
         ae:81:53:ff:72:ac:f2:a5:a7:7c:3e:cd:6a:5b:fe:b4:ce:73:
         73:d0:e9:ff:ba:f0:85:8e:30:87:63:59:a6:a5:74:8a:56:63:
         71:44:33:cd:df:97:2f:a1:f3:06:15:bb:d4:43:c7:a4:8b:23:
         7b:58:d0:fc:70:f4:20:70:ba:a9:23:78:7c:57:40:08:03:ea:
         d0:70:82:b3:2f:d2:43:ed:d4:13:d4:42:ba:82:0e:9a:8f:0f:
         6d:f6:e0:2c:60:1b:09:f1:26:cf:63:ad:f6:3a:47:92:85:42:
         17:34:d4:2d:83:0f:09:ec:2b:40:8b:9a:80:b3:83:ed:2f:80:
         71:8d:b0:30:d8:e2:ba:78:4d:08:2a:89:a9:1c:77:d8:b1:1d:
         fd:31:f9:64:f8:74:ef:d7:12:66:c2:93:8b:82:1f:f7:44:d7:
         e7:1c:7b:2a:2f:65:7d:06:4c:d5:ed:f2:a9:ba:2a:d9:4e:c1:
         97:7e:d8:ad:02:6b:9c:76:59:b4:32:cb:5c:a9:91:8a:61:52:
         32:ef:4c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 18:34:49 2024 by rpki-client on console-ams.rpki-client.org