Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
File:                     8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json)
Hash identifier:          TA8hyle1klmNCI1eSCPsxQpbICyleznTxh43SF1nz7M=
Subject key identifier:   37:8E:43:F9:35:AD:3D:93:C3:13:B0:BC:E1:68:BF:FA:70:44:0A:2F
Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA
Certificate issuer:       /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
Certificate serial:       48D6E53A98551CB7FF1D533D5A3BCB40034B5720
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
Manifest number:          048E
Signing time:             Sat 23 Nov 2024 17:22:23 +0000
Manifest this update:     Sat 23 Nov 2024 17:17:23 +0000
Manifest next update:     Wed 27 Nov 2024 04:12:23 +0000
Files and hashes:         1: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: sNKZ6WZZPmaHtUNz7hBbPBr4Atod59achVTbvqZWhGg=)
                          2: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: MYJNrU0VoWxeODSQuazQKu3caT32XeuZxRTUvcHHTN0=)
                          3: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: Qcbh+h2883zUwr0S+SUXilwq/cneroJBnZ3iaMjWnuk=)
                          4: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: 7ZlgZqpVWmjc84NgERPPp7pmCN6tdh6tZZrTTYHHci4=)
                          5: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: XJCfR7v/70LrZOt9dR7IMNA0zK9gR1i+67CWTOG1K2Y=)
                          6: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: Wfn3mViCtbYcO116Nit8juuVUmxE7iFy1wIgqkeF8m8=)
                          7: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: rYe6DYVvEMVS+k+SjVX0fK2moli9sRVF9OmCPyWl2fc=)
                          8: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: XWtNBehkXOlikMKWmDfAFFb/WHd7lr9UmM7MPjl2atY=)
                          9: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: uou3jhERhLb5Hf/nZdkvWtCXj/uGpfzUNB/Tz8NX434=)
                          10: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: YXql7fxttoFZNwhdUVJjEI/x+s9mIL1d+UUjSd3+HKY=)
                          11: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: 0nokqEKG1vAiG/aTJWu62GnbbPt3CoJsFSs/emKFKg4=)
                          12: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: sorjtrA7Odh3LFsfIE9o61YadSrjMgDQkOTDBiG6kEk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl
                          rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d6:e5:3a:98:55:1c:b7:ff:1d:53:3d:5a:3b:cb:40:03:4b:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
        Validity
            Not Before: Nov 23 17:17:23 2024 GMT
            Not After : Nov 27 04:12:23 2024 GMT
        Subject: CN=378E43F935AD3D93C313B0BCE168BFFA70440A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:e5:fb:6f:18:7c:02:8b:84:22:3e:f0:93:
                    90:78:9f:48:14:a9:4e:06:1d:0e:e9:ec:cf:05:6e:
                    8a:d2:3f:25:87:7a:40:9e:8c:77:f3:d6:88:7a:c9:
                    a7:53:3c:f9:f3:96:7f:0a:f9:d0:b8:f9:c1:cf:cf:
                    2a:d8:c7:f9:b9:8c:46:77:cf:4c:3d:2b:d4:5d:22:
                    45:11:83:7c:c8:ac:51:20:e0:bc:df:7c:09:ed:e3:
                    16:56:a2:47:b0:f5:bd:5b:69:5f:f4:8a:00:77:5b:
                    d4:a3:df:9d:1a:f6:ed:54:86:26:15:4a:f7:51:c3:
                    3a:12:5e:e1:02:df:e9:31:7e:99:54:94:0b:40:84:
                    67:a5:45:8a:6a:43:2e:3c:eb:bb:04:33:ff:81:1e:
                    0b:53:dd:58:39:03:03:50:de:78:58:89:5c:49:4e:
                    78:0c:b1:72:91:3a:a0:d2:1e:4d:10:1b:a0:e7:21:
                    b8:19:63:94:fa:ce:03:aa:97:20:70:86:22:00:b5:
                    c1:01:76:5e:f2:ba:dd:08:67:1a:b2:a0:d5:0e:ed:
                    45:4d:64:fa:44:9b:7b:5e:25:93:cc:a7:df:35:c8:
                    26:e1:e6:48:48:b1:80:f8:d2:e5:dc:38:cf:59:48:
                    e6:90:1b:f2:ff:56:4a:73:40:36:2b:cd:59:dd:42:
                    2d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8E:43:F9:35:AD:3D:93:C3:13:B0:BC:E1:68:BF:FA:70:44:0A:2F
            X509v3 Authority Key Identifier:
                keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:dd:c2:aa:73:6b:e1:4e:83:81:2f:42:83:cd:8d:3f:1f:5e:
         85:a3:d0:15:e6:81:ab:ad:5f:97:d4:ef:76:2a:33:13:d0:c8:
         79:33:8d:f7:1b:d2:01:4e:ce:2f:9b:69:69:08:a9:d5:5d:65:
         2c:b9:fc:5a:e2:80:67:53:dc:f4:c8:1f:70:fe:eb:92:7f:e2:
         2a:eb:28:63:36:7e:50:ec:00:8b:fa:cd:73:84:32:c9:05:63:
         b1:87:0f:20:7a:6c:43:18:f3:4c:c9:2f:1b:ce:cf:ab:7a:6b:
         88:2f:5d:74:2d:f3:ce:9d:40:89:bd:9a:9b:98:d6:a2:c6:7f:
         3d:dc:ce:05:57:93:06:bc:ba:f8:6c:c1:68:33:5f:dc:65:05:
         83:fa:26:93:56:5f:48:b7:00:78:af:6b:ad:99:3f:3d:df:b4:
         c3:97:92:ec:15:97:12:1c:33:e3:aa:82:7a:27:d6:be:ff:b2:
         de:2e:51:a1:0d:c5:32:fb:33:a3:9c:bd:6c:a6:69:3f:d9:7a:
         f0:a7:5a:f3:ce:22:83:e9:e3:cd:a6:4b:d0:0a:d5:6d:ec:dc:
         ef:10:5e:d4:6a:58:1b:c5:fa:1b:78:7e:5b:c8:8f:f6:80:3b:
         29:07:82:fc:19:f0:d1:e3:4c:87:eb:c3:c0:7a:35:b0:c4:ce:
         23:f5:ff:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:51 2024 by rpki-client on console-fra.rpki-client.org