Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft
File:                     7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft (raw, json)
Hash identifier:          bv4wWEcHcRH7ImL80Cg11FDHPp34oYqq8kRL5E9smwU=
Subject key identifier:   98:1A:D1:57:38:3D:B7:EF:0F:FA:98:FB:9C:33:AD:10:DB:96:09:27
Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99
Certificate issuer:       /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499
Certificate serial:       14BAE79574C4B50390F336A2EAB68F2733D23B3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft
Manifest number:          B9
Signing time:             Sun 24 Nov 2024 18:01:47 +0000
Manifest this update:     Sun 24 Nov 2024 17:56:47 +0000
Manifest next update:     Wed 27 Nov 2024 21:25:47 +0000
Files and hashes:         1: 3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa (hash: ORKr4ha8P6tv9X5zA4ht6mjFvslVRbnM+gzBN7aD/Sw=)
                          2: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl (hash: MSxFl3ZKFRi2YnAeVkqzWW7bRcatwIkeJQUMhBf32nE=)
                          3: 3130332e3131392e3233372e302f32342d3234203d3e20313531353836.roa (hash: 18Hkz/XR+bc2+4hLanlNPrrmjy5COqEUY7Uy7tOHT7Q=)
                          4: 3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa (hash: smWnJtZ/R67U2ULFGK7Jk8VcGNSJ3hQ7lt79pWbaLFY=)
                          5: 323030313a6466323a666534303a3a2f34382d3438203d3e20313531353836.roa (hash: goBdU2IBnHy9wcOLLQQ/OCQZydl32zY5z0yZl8PUzN4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl
                          rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ba:e7:95:74:c4:b5:03:90:f3:36:a2:ea:b6:8f:27:33:d2:3b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499
        Validity
            Not Before: Nov 24 17:56:47 2024 GMT
            Not After : Nov 27 21:25:47 2024 GMT
        Subject: CN=981AD157383DB7EF0FFA98FB9C33AD10DB960927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:00:5b:91:2c:40:28:0e:66:14:2c:df:b7:
                    da:6e:93:ca:87:c6:ca:ff:85:68:1a:c2:e1:9d:bb:
                    6b:a5:bf:98:96:89:41:05:e9:88:d7:86:c7:e6:71:
                    6b:a2:dc:63:d5:9f:98:38:e5:3e:c4:3e:e7:55:3a:
                    32:5c:df:e7:36:24:5d:5f:64:1e:0a:b0:66:69:aa:
                    38:3d:f8:d1:92:df:30:9e:60:56:a8:fa:5b:2c:d5:
                    dc:88:2f:6b:a7:5c:f5:0e:cc:6a:ca:0e:5a:df:8c:
                    35:c3:d0:34:ed:9f:05:10:b4:24:c8:23:84:a3:73:
                    4e:11:55:58:da:06:47:f8:48:53:28:48:0e:d8:87:
                    33:b3:f2:62:b2:3d:c3:2b:3b:5b:04:75:c3:4b:1a:
                    51:fe:4b:2a:73:5a:12:3e:f8:23:33:8c:6a:ad:80:
                    7a:4d:e7:6c:0d:f8:f1:30:4f:34:6e:40:9c:85:2a:
                    fc:93:d6:1e:f9:62:6c:e9:7f:ef:0e:be:c0:12:1e:
                    20:0c:ea:5f:64:9b:0a:be:99:b7:52:8b:98:13:c1:
                    35:3c:96:d5:12:2d:c4:78:e9:69:20:1b:fa:f0:09:
                    d0:e5:26:ba:b9:93:6b:41:19:2a:ec:21:05:e3:d1:
                    2b:be:90:0b:2e:a4:77:b5:82:44:49:24:e5:9a:19:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1A:D1:57:38:3D:B7:EF:0F:FA:98:FB:9C:33:AD:10:DB:96:09:27
            X509v3 Authority Key Identifier:
                keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:bf:14:04:08:fe:ba:08:ea:50:a1:a5:06:62:82:8a:70:8e:
         27:09:c9:93:83:c4:ed:53:e9:9e:71:6a:4d:40:60:80:3f:4b:
         02:bc:33:87:15:9d:fb:cf:39:9e:98:ab:34:bc:d1:3d:dc:5c:
         90:b1:7c:1c:0c:f2:ba:a3:4c:7b:f0:cc:0e:44:87:d8:28:cd:
         9b:bc:15:88:9f:22:e0:bc:ab:1f:7f:71:db:36:fb:d7:4c:6d:
         bc:23:4b:f0:6c:6f:e8:d5:6f:6b:4b:47:80:a0:9c:94:63:e8:
         1d:f9:31:6e:ff:12:8e:89:20:4f:10:b7:7c:e6:bf:19:d5:7b:
         c1:86:db:29:6e:9f:d4:6d:02:ca:42:8f:7f:d2:23:ab:4d:96:
         dc:61:10:69:65:6a:7d:db:50:ed:9e:69:fb:c6:dc:05:ab:91:
         c8:61:80:2f:3e:4b:60:eb:64:b1:1d:ac:0d:e6:83:63:c3:db:
         fc:2b:06:6c:5a:4a:83:d9:39:dc:00:e3:c1:e7:59:d7:2d:32:
         5c:14:cf:5f:a6:f5:91:df:2c:73:9d:ad:72:a9:76:8e:08:ff:
         f2:a3:5f:0a:a9:8a:2d:cf:bf:8a:8e:de:c5:de:31:f8:f4:1a:
         fd:f2:48:06:4b:91:26:ec:b6:35:13:03:08:a9:5e:ed:4b:93:
         08:24:ff:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org