Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft
File:                     E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json)
Hash identifier:          KnCZ5542saTijV0bifUsCR/CDi+QNivk/PwhxEc0mJ4=
Subject key identifier:   2A:8F:4E:C7:BD:D1:B9:D0:3D:FF:1D:25:ED:90:37:20:18:51:E9:B5
Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F
Certificate issuer:       /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F
Certificate serial:       091A539F531537921563832323475812867B69CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft
Manifest number:          0124
Signing time:             Mon 25 Nov 2024 09:10:54 +0000
Manifest this update:     Mon 25 Nov 2024 09:05:54 +0000
Manifest next update:     Thu 28 Nov 2024 10:46:54 +0000
Files and hashes:         1: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 0BDZfjN5jJdVoqvf+B7Xrs+R9mL9Zk/6v6BQQD2LVbk=)
                          2: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: t0mUR/zp3XH1m2fJiPnmnqzWHnodGZoiDzslttEx9xw=)
                          3: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: 9i9QaNaare7dfDPwmiXtRJvPCp+bxH3Njnaz5cdwIUY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl
                          rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 10:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1a:53:9f:53:15:37:92:15:63:83:23:23:47:58:12:86:7b:69:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F
        Validity
            Not Before: Nov 25 09:05:54 2024 GMT
            Not After : Nov 28 10:46:54 2024 GMT
        Subject: CN=2A8F4EC7BDD1B9D03DFF1D25ED9037201851E9B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:ad:e3:60:cc:1a:75:13:7b:f1:05:8c:11:
                    bc:de:47:87:05:a2:20:69:47:4d:b3:b3:46:e1:3d:
                    c8:97:7b:d6:81:69:db:ec:8e:58:eb:b5:e9:54:ff:
                    59:32:83:58:f8:0f:60:29:e1:a6:2c:7b:1a:65:01:
                    ae:d7:04:79:cd:9f:77:cc:ef:0d:39:b8:5a:2e:49:
                    56:80:cb:e7:7b:9a:1e:3c:79:55:ab:9c:3a:16:08:
                    a1:e4:e2:1f:49:50:a7:fc:ca:b6:33:80:fc:bf:05:
                    5a:5b:5e:da:db:6d:4c:e0:d5:03:52:f8:a4:42:30:
                    03:de:c1:b1:c2:cb:f9:9a:8d:90:3e:a4:50:a1:22:
                    79:6d:3c:d7:55:7e:10:1c:f8:c4:ce:0d:39:8b:6f:
                    ef:c5:c4:82:d9:57:08:56:fa:33:09:db:6a:cc:b3:
                    af:42:1e:78:88:12:f0:f2:5c:f5:7b:4a:6a:32:0f:
                    25:dd:c5:b4:4e:28:5b:ea:74:58:34:d2:4e:80:7a:
                    ac:e3:08:84:ba:ab:07:24:5b:29:83:f9:dd:9d:ea:
                    0e:1b:0d:38:41:a8:ff:b1:a7:40:b4:10:67:9b:b7:
                    c0:40:49:b3:9c:fe:ee:05:1b:ca:a2:ce:74:bf:96:
                    b1:f7:34:fd:ee:28:4d:62:27:e8:c8:61:89:a3:e1:
                    15:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8F:4E:C7:BD:D1:B9:D0:3D:FF:1D:25:ED:90:37:20:18:51:E9:B5
            X509v3 Authority Key Identifier:
                keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ad:7b:b9:65:67:e5:bd:49:3c:4f:74:68:bb:b7:2f:37:35:
         c4:61:7a:02:ff:1f:a6:0c:42:b5:62:e2:7a:e9:c4:91:6c:ba:
         24:e5:53:59:4c:dc:d9:1f:73:f0:20:d9:ee:0a:f6:7e:f1:a3:
         88:d0:49:36:df:29:f1:24:12:87:36:86:a4:9d:66:a9:16:57:
         05:7f:ed:0f:1c:1b:28:01:95:54:dd:77:55:37:14:4f:10:3e:
         43:06:70:7d:1d:a6:ed:4a:85:c8:1f:5c:10:54:38:a4:b3:58:
         c5:e8:12:c0:a2:25:52:71:4f:12:d6:d4:4e:55:d6:96:cb:8d:
         ef:f5:7c:6b:7f:5d:79:6a:bd:4e:6e:4e:0b:a5:94:73:36:05:
         df:0d:c6:30:ec:0a:32:d4:7c:ad:a1:21:79:0e:e3:d5:b2:b8:
         f2:91:62:34:3d:95:9c:81:6a:dd:5e:e1:63:c8:ca:e1:e3:cb:
         1f:cc:85:ba:ab:da:cf:7a:48:bf:14:4f:23:7c:8d:08:fa:12:
         0e:ee:7e:d0:2a:53:6f:35:b6:11:e6:1e:36:d8:33:86:3a:80:
         14:f3:57:95:ed:f8:73:df:26:66:c3:3f:33:7f:29:29:79:ad:
         07:0a:e8:42:79:90:50:ca:e1:38:b4:77:80:63:98:b5:c0:95:
         b8:f9:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 10:55:38 2024 by rpki-client on console-ams.rpki-client.org