Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
File:                     8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json)
Hash identifier:          l4FlA95pC1Zro7bZfz/o2cq1Bah8/Itpkwbi1VfPtY0=
Subject key identifier:   D4:39:4C:EB:FB:33:51:54:8F:C4:40:B1:DB:EE:EC:FF:6E:08:87:13
Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0
Certificate issuer:       /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
Certificate serial:       718F99392E0BDBA261318B08DE9B1F0C4A1368EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
Manifest number:          02B2
Signing time:             Fri 22 Nov 2024 10:20:04 +0000
Manifest this update:     Fri 22 Nov 2024 10:15:04 +0000
Manifest next update:     Mon 25 Nov 2024 17:37:04 +0000
Files and hashes:         1: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: EDBMQaQ4dqkKW3/Aqr0zHic0MOIJMjA++nVp8syiCJI=)
                          2: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: YxKZ8zphuIbkOhJRu9tlx9IwAr1jnWr4SmCvVLO5CK4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl
                          rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8f:99:39:2e:0b:db:a2:61:31:8b:08:de:9b:1f:0c:4a:13:68:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
        Validity
            Not Before: Nov 22 10:15:04 2024 GMT
            Not After : Nov 25 17:37:04 2024 GMT
        Subject: CN=D4394CEBFB3351548FC440B1DBEEECFF6E088713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:d6:69:d7:bd:7f:2e:82:4e:b0:06:52:2e:
                    80:38:9c:c1:80:96:a9:31:8a:90:7d:7e:01:b9:10:
                    59:86:79:0f:95:7b:60:33:0f:b8:91:e5:a9:45:05:
                    b2:73:7e:39:c8:86:da:70:c1:cf:cf:35:ad:4a:19:
                    2b:34:ce:b1:e3:35:cc:30:33:47:99:40:38:e6:96:
                    3d:83:54:65:70:3b:4c:6a:15:d1:2e:8a:53:ff:ce:
                    79:7c:29:b0:c1:00:0f:1c:8a:e7:35:31:16:dc:30:
                    cd:89:28:be:d9:d4:79:f6:5d:68:0c:ad:1d:57:07:
                    a9:61:9a:17:d9:27:17:49:78:50:ea:dd:2a:54:c1:
                    84:72:76:0f:b6:a2:b9:24:00:03:94:ec:8d:ea:4f:
                    62:f1:95:c8:8b:cf:fc:84:1e:a6:02:2c:92:1f:1d:
                    7a:19:59:bc:f2:e0:50:a4:7b:b0:0a:37:d6:de:ca:
                    58:3f:0f:1f:75:82:85:bd:45:70:6e:e5:d0:ba:ef:
                    71:21:c8:e4:c4:8a:e4:2b:da:4f:fe:e7:76:81:54:
                    71:df:3c:00:2a:97:f3:52:b8:68:f4:61:35:9a:4f:
                    0a:02:0f:8b:f6:8a:4f:57:c0:83:c4:70:a7:2d:64:
                    ff:09:c6:af:56:d3:1c:3c:67:d8:ae:b2:c8:7c:a0:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:39:4C:EB:FB:33:51:54:8F:C4:40:B1:DB:EE:EC:FF:6E:08:87:13
            X509v3 Authority Key Identifier:
                keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:68:a4:16:90:cb:61:00:7c:52:28:94:1e:31:a7:7b:95:51:
         b0:ec:00:72:b8:ee:6e:cc:06:76:35:9b:11:1a:99:ca:1b:f3:
         c9:bc:5f:8a:ce:0d:8e:a1:bc:d8:3b:14:5f:4b:3d:b3:97:d4:
         73:cb:09:5c:2c:46:91:f7:45:31:fc:3d:d6:79:81:c7:99:d5:
         1c:cd:3d:6c:86:05:f1:4d:3d:3f:66:6e:b8:53:1f:39:5b:ec:
         a3:9b:a0:33:b8:cb:10:90:55:0a:c6:96:80:04:80:94:5d:09:
         ee:58:66:16:ee:66:1c:f4:29:2d:ee:c4:2f:42:78:d1:56:e3:
         51:b6:dc:da:20:c8:33:a0:33:c0:f5:28:b8:de:66:4d:fd:7c:
         b2:22:2a:e2:fc:b2:0e:3e:d6:e6:36:43:db:95:5e:cb:7f:16:
         04:ed:7b:cd:8b:c4:5e:58:06:5c:28:3f:61:d2:e4:e5:b0:ab:
         cf:2d:f6:aa:4f:2c:a2:53:82:91:d8:9d:c9:72:e0:7c:e8:07:
         d4:d5:f8:34:c1:59:cf:83:b7:72:c5:74:8a:9c:3d:85:18:a5:
         80:fc:c5:49:41:7f:20:13:4c:9b:ef:4a:ec:5e:38:f9:39:07:
         c8:c0:b4:69:52:7b:44:72:9c:31:44:88:87:2a:81:93:a0:ae:
         5b:95:35:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org