Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
File:                     3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json)
Hash identifier:          30iSEe2QWYOSeHCgTLeqYqAlB3o89+4LL32U4+O2H58=
Subject key identifier:   D5:D2:A7:DE:CB:F3:5B:82:AF:DD:BC:2C:18:48:52:91:A5:EA:CD:79
Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4
Certificate issuer:       /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4
Certificate serial:       681E5B23DCD6F9694C40B416DAC41F717BC77153
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
Manifest number:          0C
Signing time:             Thu 21 Nov 2024 06:10:56 +0000
Manifest this update:     Thu 21 Nov 2024 06:05:56 +0000
Manifest next update:     Sun 24 Nov 2024 14:40:56 +0000
Files and hashes:         1: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: 6pByXgAQ6YR6dUDH4dJy61wrtOMRHMSvLiETBeP3xAU=)
                          2: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: soThEr3N8YxSPx0cU3wTM9+hniDwBCcnd3fUrFBwiU8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl
                          rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1e:5b:23:dc:d6:f9:69:4c:40:b4:16:da:c4:1f:71:7b:c7:71:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4
        Validity
            Not Before: Nov 21 06:05:56 2024 GMT
            Not After : Nov 24 14:40:56 2024 GMT
        Subject: CN=D5D2A7DECBF35B82AFDDBC2C18485291A5EACD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:86:3c:e7:15:43:18:ff:1c:00:64:ec:e9:
                    42:56:50:c8:7c:38:c1:6d:5d:a4:94:53:36:6a:ea:
                    fd:0e:2d:99:fa:58:78:6a:5e:a0:4b:37:4a:98:00:
                    0a:d6:2e:cd:ca:71:f0:69:fd:f5:ed:50:af:18:b5:
                    1d:ac:07:1d:e0:7f:49:44:33:aa:14:cf:25:4c:37:
                    9e:14:c1:31:04:54:b0:61:6b:81:b0:23:b1:f8:b4:
                    2d:a3:79:31:ad:98:01:a9:f2:de:c5:5d:52:a0:be:
                    23:10:5f:05:45:1f:7a:73:8d:18:9f:1e:1b:1d:a7:
                    02:db:ae:6d:54:07:0c:45:c7:9d:d5:a1:e5:d2:47:
                    10:2b:4d:37:b0:3a:b3:f7:23:99:d3:f9:15:2e:78:
                    17:67:0f:90:72:23:22:8f:24:b2:72:47:42:5b:e7:
                    11:8f:75:59:4a:35:b5:00:a6:53:fd:9a:0b:d4:6d:
                    31:6f:4d:13:e4:9d:d5:a3:08:59:7c:40:18:5c:0d:
                    1f:59:f2:bf:51:77:1c:76:4f:77:71:a3:90:b4:87:
                    8f:34:31:12:0c:52:32:ef:11:87:88:40:4c:d7:f3:
                    0b:32:e7:f1:eb:0e:a3:71:fd:70:34:1b:e2:7a:42:
                    90:45:d2:03:58:da:57:16:0f:a6:70:cc:82:80:01:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D2:A7:DE:CB:F3:5B:82:AF:DD:BC:2C:18:48:52:91:A5:EA:CD:79
            X509v3 Authority Key Identifier:
                keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ac:7e:85:91:d8:92:49:8a:92:8b:3e:5f:e9:cb:74:5f:8e:
         4f:38:0b:71:c9:48:21:85:28:f4:08:b7:0c:71:34:31:39:ef:
         06:8b:cb:48:5c:fe:b8:1e:d1:30:43:3e:b0:3e:72:e3:59:73:
         6f:29:25:a2:fb:b8:26:30:e5:ff:d6:4e:bf:ba:3b:43:47:54:
         4a:e9:e9:9d:71:27:c1:b9:61:f9:2e:72:88:72:39:eb:95:9f:
         2b:8c:76:53:93:ec:63:eb:c3:36:7c:56:b4:3d:84:8f:db:01:
         33:63:f0:fc:34:23:80:15:1e:99:b4:c6:b3:c4:b4:9d:ab:2f:
         f8:65:14:ec:79:6e:5d:f0:cc:12:22:98:ee:c8:89:a7:69:14:
         fa:ef:c7:ea:66:fd:94:57:eb:ec:6c:01:35:b2:03:fa:d3:19:
         e5:32:eb:54:b5:75:e8:43:ab:8b:ab:20:06:40:5a:31:02:94:
         39:06:f1:90:34:df:09:a1:66:48:85:3f:6f:cd:f2:82:5e:5e:
         a9:f5:32:68:86:23:bd:19:dc:0e:5e:45:46:03:1b:29:e4:cf:
         84:bd:84:63:ef:cf:86:68:ec:e7:83:b9:3a:b5:ac:74:90:09:
         bb:a6:b2:52:a5:c6:89:92:25:91:96:66:30:57:33:87:6d:70:
         d7:70:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:39 2024 by rpki-client on console-fra.rpki-client.org