Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
File:                     E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft (raw, json)
Hash identifier:          XU3xUknj4dTM9uM4Vxa20rHbmj11a1q6JOF4v/R3t3I=
Subject key identifier:   64:1B:E4:C4:A2:C6:24:81:21:95:68:71:50:19:EC:E4:62:E3:D5:D0
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       644ED0FF5DD46D555376C33B133ABFC391658BE7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
Manifest number:          049D
Signing time:             Thu 21 Nov 2024 22:51:38 +0000
Manifest this update:     Thu 21 Nov 2024 22:46:38 +0000
Manifest next update:     Mon 25 Nov 2024 04:48:38 +0000
Files and hashes:         1: 3130332e32302e39302e302f32332d3234203d3e203538333831.roa (hash: /CSO8supT7aQ6XhE526jfYeeawuC32U4f2084rMmy7I=)
                          2: 3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (hash: 9H/O6RXGkUL1F2Gd6TXUsfG8JVvcw4hqIZRoFPabOsU=)
                          3: 3130332e352e35302e302f32332d3234203d3e203538333831.roa (hash: jo/j+vvJnzXg0fK/MvrTnhv5lI0YEzuzodAk9RwF5Tg=)
                          4: 3130332e352e35312e302f32342d3234203d3e203538333831.roa (hash: FL+Jio9NhJDzyWbq0envUDG8YbiyjExCusCopYRGO9I=)
                          5: 3130332e32302e39302e302f32342d3234203d3e203538333831.roa (hash: Fy8b2s02N6vrL4BHoxobePxdRF7v83Pby5Q1ro53igE=)
                          6: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (hash: j7JaOEwVvZDPtojTO9yGTpC46kUST+sU/oyqs93maRE=)
                          7: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (hash: y6dO/RTV0WG/FB7q+9moElFaVn2GJkU7nSjhW/VxRZE=)
                          8: 3136332e35332e3139322e302f32342d3234203d3e203538333831.roa (hash: 3GPLX8zC50oH8SgHdGu0+Ppo/HOjknB/6wwNzQLVN5w=)
                          9: 3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (hash: ly8n481+Yx6O5KGuaN3HRYfsgFCFF9rGxBWRU5jAipc=)
                          10: 3130332e32302e39312e302f32342d3234203d3e203538333831.roa (hash: h1i/BLpVjGqNROG+me5XI+Qi0eqss8Zo/gE+98e3SJo=)
                          11: 3130332e352e35302e302f32342d3234203d3e203538333831.roa (hash: G46kGz/xA08Ms8YM6GBbSJC8zdV3+ogVXnQjnKCMDzw=)
                          12: E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl (hash: K6HbzNzkpdweVaKLzoS1TS5WxpWiwrtNarU25xiaISk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4e:d0:ff:5d:d4:6d:55:53:76:c3:3b:13:3a:bf:c3:91:65:8b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Nov 21 22:46:38 2024 GMT
            Not After : Nov 25 04:48:38 2024 GMT
        Subject: CN=641BE4C4A2C62481219568715019ECE462E3D5D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:0f:9e:6e:cd:9d:ce:18:a3:fb:40:5e:3e:
                    05:29:5a:ee:ac:db:78:43:1b:8d:f8:db:bb:24:02:
                    1e:88:2e:a6:13:60:3f:ea:59:46:73:66:d1:3d:40:
                    36:f1:3d:4b:ae:bf:43:46:43:c7:fd:5e:3b:5c:0f:
                    e8:49:b6:fc:8d:ef:04:fe:dd:a1:6b:6b:6e:2b:1d:
                    1f:97:dc:14:75:b8:5c:99:04:46:af:6b:03:ec:e5:
                    34:63:b6:6f:48:2c:92:2e:af:0e:68:8e:8f:80:2b:
                    ed:6a:aa:5c:de:22:ae:ca:9a:3a:79:2e:de:5a:16:
                    dc:d4:57:4e:cc:56:21:7b:30:05:35:4c:44:db:29:
                    bc:34:9b:61:8a:1d:20:4e:3c:a6:c6:88:1d:c9:ac:
                    6a:bd:b3:76:f9:2d:b3:20:a1:1d:bf:1b:0b:96:ab:
                    97:55:11:62:60:ff:e3:86:2a:e7:1d:67:75:75:55:
                    0d:e5:95:eb:7d:76:6a:b1:c8:21:a4:d4:18:fe:e4:
                    2e:78:02:50:6a:bf:5d:fe:c2:69:91:40:94:f7:90:
                    75:24:b2:69:25:8b:c9:c7:7f:f9:b5:70:31:67:83:
                    3b:ee:c6:ac:23:c9:1f:bb:6e:b8:e7:ea:50:e6:f0:
                    fc:65:9f:ad:35:f1:f2:58:39:2a:0c:d1:c0:42:cf:
                    65:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1B:E4:C4:A2:C6:24:81:21:95:68:71:50:19:EC:E4:62:E3:D5:D0
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:56:59:23:35:4a:a0:7b:a4:97:b9:63:d0:04:a8:35:b0:eb:
         de:6e:4b:56:b9:95:87:1d:4f:1a:b4:04:95:89:f8:f6:2f:8d:
         0d:56:03:7a:83:40:8b:1b:da:ed:64:69:eb:1d:87:66:35:80:
         ba:26:0c:1a:db:93:fa:ab:8f:dd:f0:bb:97:eb:26:d6:ec:23:
         8f:ab:74:d7:fc:82:8d:54:ee:a2:db:e0:46:f0:7b:d8:a8:06:
         06:8c:9e:8a:70:31:d1:51:95:3d:03:06:d1:90:c7:c8:7c:10:
         b4:17:48:4d:fb:14:96:a7:2c:f0:5a:ba:4d:a0:fc:4b:99:26:
         cb:68:47:bf:84:c1:f3:4d:79:ae:c3:cc:a2:bd:30:a9:3f:e1:
         8c:eb:45:5c:07:d6:0b:52:ee:34:35:90:ec:e7:4c:19:b7:4b:
         9f:45:c9:bc:31:0e:73:d0:fb:c0:b1:d2:d6:43:78:40:68:fa:
         66:aa:a0:ab:a9:05:1f:47:a4:d3:3d:87:bd:b9:d1:d7:a9:60:
         14:e2:6b:dd:57:47:e4:28:7e:79:08:2a:12:da:e0:e5:60:5b:
         95:5f:4a:82:51:2b:fb:77:e4:fd:a5:bf:c8:7f:cc:8e:4b:fd:
         b4:ae:2b:89:2d:c7:b0:f8:34:fe:53:6b:38:e0:36:f9:82:cb:
         12:bf:b6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org