Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
File:                     C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft (raw, json)
Hash identifier:          1rbonDIjSjYpC7wpeYXR0VE8chaT2iCtYVuV5Jidn14=
Subject key identifier:   C3:5F:64:4B:B2:9E:48:F2:4D:FA:82:9B:8A:D5:62:D9:6D:49:1C:46
Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB
Certificate issuer:       /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
Certificate serial:       7C542923F3159C1EA8CBE58879A66ED571281B7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
Manifest number:          0494
Signing time:             Thu 21 Nov 2024 04:11:09 +0000
Manifest this update:     Thu 21 Nov 2024 04:06:09 +0000
Manifest next update:     Sun 24 Nov 2024 05:08:09 +0000
Files and hashes:         1: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: C3I03bKwqahoZs1vLJC2P0W/gVIIwRIvwhkzt1QShKA=)
                          2: C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl (hash: 9gunkil7ogYWlplEierT+90rua1hxSHLyxKeZc8EE1Q=)
                          3: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: vmivmL6Nin4jXQJ+otHLEjg1k9YMDVxxJbWYijf39Eo=)
                          4: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: 1il+bYXQjl2Z5M2afvU115zEzq23jQfoWNPWBzr6QnM=)
                          5: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: zLaCzFYcJmhf/sRs6wM2j5wW1nPbYiK+KMTtcnEwVeA=)
                          6: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: 3Ljvih8s5k4JRjf2dV5PRj3RzrrS3qrasuv8sChH6SI=)
                          7: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: XHwz7oHKAD+bVzb82LnhadWxzqWahrz7asG1+V+ECY8=)
                          8: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: cjfM+KtJCyfXNJnMETBSpXrNjmJMV3jp0GwIXEW85Rk=)
                          9: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: XFalZjv8g4D1W4AUa2Y8g1Gx2jFTKCjlevUUQqBaZ2w=)
                          10: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: PbVOVfoFeweVzjvEY9pOnArl1Ztl77cws3RLnI/lI98=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl
                          rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:54:29:23:f3:15:9c:1e:a8:cb:e5:88:79:a6:6e:d5:71:28:1b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
        Validity
            Not Before: Nov 21 04:06:09 2024 GMT
            Not After : Nov 24 05:08:09 2024 GMT
        Subject: CN=C35F644BB29E48F24DFA829B8AD562D96D491C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:84:f6:85:73:fc:cd:a3:88:27:83:01:51:c1:
                    ed:26:05:2c:46:00:c4:8e:b1:31:31:c6:21:e7:6d:
                    18:45:2d:ab:64:b9:49:98:e6:99:53:c6:8d:8b:45:
                    83:e2:69:74:db:1b:4b:89:39:c1:6b:11:b0:d3:70:
                    b4:13:3a:72:f7:bd:a8:7e:5a:32:86:fc:67:fd:2b:
                    f1:d2:81:8e:1b:39:66:90:0b:3d:64:40:96:c2:cb:
                    66:4a:46:1d:54:16:57:07:2c:be:ef:75:dd:7f:65:
                    95:3a:90:2a:c8:fe:25:88:d0:7b:c6:02:d6:40:61:
                    37:30:e0:29:c7:29:5a:a0:60:0b:fd:66:88:c5:c9:
                    01:0b:e3:2f:03:3c:13:92:c0:2d:76:f9:cd:8e:12:
                    c9:3a:db:37:1c:c5:98:5d:1f:bd:70:ca:47:12:fc:
                    fa:a5:6c:3a:ab:06:41:01:16:da:91:34:ac:c1:4b:
                    42:c1:ba:a1:fb:02:f6:7d:a7:98:e4:e8:d7:1f:17:
                    16:b0:e7:6e:50:a8:9a:c9:a1:77:d6:c2:21:fe:be:
                    e6:43:19:5d:87:a5:4e:25:74:ce:1a:ec:fa:f7:ea:
                    f5:26:94:cb:7b:0f:a0:16:a0:30:e9:89:6a:e0:f3:
                    67:3c:08:5b:97:74:e0:13:3a:2d:01:c9:67:7a:14:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5F:64:4B:B2:9E:48:F2:4D:FA:82:9B:8A:D5:62:D9:6D:49:1C:46
            X509v3 Authority Key Identifier:
                keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e8:fc:29:b9:09:cf:dd:29:8f:47:e5:c0:3b:6b:a8:3e:80:
         d7:70:90:6d:1c:fd:5f:37:66:98:b1:9c:c3:ad:01:c1:be:bf:
         4e:2c:92:2e:97:b4:17:09:f7:e7:27:68:3d:4d:53:b1:f4:e7:
         01:2a:75:cb:5e:e2:96:20:e4:19:d1:eb:45:ce:6b:3a:dd:fd:
         6d:d0:24:23:7a:db:05:0c:cd:29:16:97:0b:4a:d4:46:5c:92:
         e9:2e:8a:bd:75:81:59:15:0b:e0:18:3f:93:9b:aa:5a:cc:3b:
         93:73:ea:68:fb:f8:3b:fe:03:75:cd:96:80:b0:0c:d4:c7:45:
         e2:2d:03:6c:15:6e:a6:28:3e:40:c2:eb:92:7e:e5:48:fe:29:
         07:9f:ec:cb:d4:18:d0:82:9d:7a:bf:59:0f:51:2e:ba:fc:6f:
         25:37:91:d8:59:7c:99:ca:72:d8:41:73:5d:35:67:96:9b:4c:
         8e:0e:43:91:8f:6d:ac:69:dc:9f:8f:60:a6:1c:b1:ca:a6:d4:
         b6:f7:5b:d3:1e:c2:3d:be:f5:1c:5e:61:e7:53:46:f8:99:8e:
         45:c7:f5:77:8f:6b:cd:4f:a4:dd:e8:b7:d2:82:57:72:bf:84:
         54:b5:a2:12:c5:d6:03:82:ec:42:22:be:33:02:56:bd:1f:3f:
         a5:2d:dd:55
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfFQpI/MVnB6oy+WIeaZu1XEoG3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZC
RUZCM0FCQjAeFw0yNDExMjEwNDA2MDlaFw0yNDExMjQwNTA4MDlaMDMxMTAvBgNV
BAMTKEMzNUY2NDRCQjI5RTQ4RjI0REZBODI5QjhBRDU2MkQ5NkQ0OTFDNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hPaFc/zNo4gngwFRwe0mBSxG
AMSOsTExxiHnbRhFLatkuUmY5plTxo2LRYPiaXTbG0uJOcFrEbDTcLQTOnL3vah+
WjKG/Gf9K/HSgY4bOWaQCz1kQJbCy2ZKRh1UFlcHLL7vdd1/ZZU6kCrI/iWI0HvG
AtZAYTcw4CnHKVqgYAv9ZojFyQEL4y8DPBOSwC12+c2OEsk62zccxZhdH71wykcS
/PqlbDqrBkEBFtqRNKzBS0LBuqH7AvZ9p5jk6NcfFxaw525QqJrJoXfWwiH+vuZD
GV2HpU4ldM4a7Pr36vUmlMt7D6AWoDDpiWrg82c8CFuXdOATOi0ByWd6FEo1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUw19kS7KeSPJN+oKbitVi2W1JHEYwHwYDVR0j
BBgwFoAUyOwY4CdjmwW8WKIijRJkhr77OrswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YzI4OTcwNi1hNGY0LTRlMWYtOWE2ZS0wMWM5YzUzY2Q4ZjkvMC9DOEVDMThFMDI3
NjM5QjA1QkM1OEEyMjI4RDEyNjQ4NkJFRkIzQUJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZCRUZC
M0FCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMyODk3MDYtYTRmNC00ZTFmLTlh
NmUtMDFjOWM1M2NkOGY5LzAvQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0
ODZCRUZCM0FCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABjo/Cm5Cc/dKY9H5cA7a6g+gNdwkG0c/V83
ZpixnMOtAcG+v04ski6XtBcJ9+cnaD1NU7H05wEqdcte4pYg5BnR60XOazrd/W3Q
JCN62wUMzSkWlwtK1EZckukuir11gVkVC+AYP5ObqlrMO5Nz6mj7+Dv+A3XNloCw
DNTHReItA2wVbqYoPkDC65J+5Uj+KQef7MvUGNCCnXq/WQ9RLrr8byU3kdhZfJnK
cthBc101Z5abTI4OQ5GPbaxp3J+PYKYcscqm1Lb3W9Mewj2+9RxeYedTRviZjkXH
9XePa81PpN3ot9KCV3K/hFS1ohLF1gOC7EIivjMCVr0fP6Ut3VU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:32 2024 by rpki-client on console-fra.rpki-client.org