Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
File:                     CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json)
Hash identifier:          fHAMlU0DHGRYond7UaMeMhWlGSaL52oRRGFYLXTZoUw=
Subject key identifier:   35:57:59:69:62:4E:42:50:0F:E5:75:CE:72:A8:4A:CD:62:10:17:3A
Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D
Certificate issuer:       /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D
Certificate serial:       59BC74A0F062F902AE21B4C0444BBA677ED920BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
Manifest number:          EE
Signing time:             Fri 22 Nov 2024 11:12:07 +0000
Manifest this update:     Fri 22 Nov 2024 11:07:07 +0000
Manifest next update:     Mon 25 Nov 2024 14:33:07 +0000
Files and hashes:         1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: OWaYDg1cDH9a+akHuxTt6wYPqaxaynY90OG7HIU4OWI=)
                          2: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: cTVmAIuYYkzg6/1Sgf81wNKNuj69EmS69VfnqzNnhDM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl
                          rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 14:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:bc:74:a0:f0:62:f9:02:ae:21:b4:c0:44:4b:ba:67:7e:d9:20:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D
        Validity
            Not Before: Nov 22 11:07:07 2024 GMT
            Not After : Nov 25 14:33:07 2024 GMT
        Subject: CN=35575969624E42500FE575CE72A84ACD6210173A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6b:44:13:64:05:0e:07:fd:60:c3:06:c0:21:
                    c1:51:47:92:ff:31:42:17:62:69:d3:d2:3d:ef:c8:
                    95:c1:9c:97:05:be:5c:05:f8:ff:5f:35:90:bd:9c:
                    0c:2f:85:53:83:8a:78:95:a6:89:c5:8f:d0:a9:c3:
                    3b:0b:16:b8:c6:2d:84:3a:c7:cc:1c:d9:b4:11:47:
                    88:a8:25:48:f2:f3:ae:c8:51:58:0d:b4:df:3d:85:
                    7d:fd:69:71:c5:c1:a0:fa:79:27:bd:4e:31:dd:44:
                    bb:52:08:03:a1:d9:3b:4d:0f:98:a2:88:68:6a:cd:
                    e7:2b:7c:1c:11:0e:de:06:e3:dd:a8:8a:9a:80:ac:
                    6a:3a:d4:22:87:9f:78:db:ba:bc:46:71:44:db:3a:
                    08:58:67:ef:7a:6e:67:54:42:31:da:73:23:df:20:
                    9d:ef:d9:78:39:b5:f0:b1:21:ef:9a:27:11:95:c2:
                    df:9c:5b:03:67:88:25:5a:ed:97:8a:cb:ee:3d:fc:
                    c9:aa:0e:be:52:a6:56:fd:91:73:4f:b6:b7:42:ac:
                    ea:a4:6c:de:73:31:05:df:a2:07:20:59:2e:8b:94:
                    d8:65:2b:84:9a:db:16:20:e0:65:af:d8:c4:dd:4a:
                    00:ba:f4:f3:1c:83:e0:19:8d:92:65:db:0e:e1:45:
                    e2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:57:59:69:62:4E:42:50:0F:E5:75:CE:72:A8:4A:CD:62:10:17:3A
            X509v3 Authority Key Identifier:
                keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:82:b7:2d:43:13:7f:60:2a:40:1f:0d:d6:9e:9c:b7:31:e0:
         fd:d3:57:df:32:2d:66:61:f1:79:89:0c:4f:b8:01:14:f2:d6:
         e6:c7:9e:e5:1d:95:d1:38:48:66:e6:bc:0a:97:e9:70:2e:bb:
         74:aa:8b:7b:06:92:86:86:29:95:41:f9:c7:81:ac:46:cc:7e:
         95:f5:29:cb:ac:7c:0a:50:9e:a9:8c:ea:07:4e:a0:ca:df:eb:
         d3:dc:d5:7a:10:8c:e4:e9:ab:26:4e:be:55:ee:1f:35:55:41:
         a3:09:e0:8c:dc:5e:0e:b2:e7:8c:29:2b:b6:9e:1c:1c:8b:dd:
         2d:f7:74:5d:d2:c0:bd:c2:e2:ae:95:8d:d0:dc:82:34:49:11:
         bd:4c:d2:f3:2e:2a:72:7a:bd:80:e2:75:46:ba:73:55:05:03:
         d4:9c:27:7e:f9:53:ec:27:cb:a8:17:d5:1d:4b:be:ae:70:21:
         52:3f:05:56:a5:a0:35:e8:85:6b:b4:41:a1:21:f2:93:8a:75:
         c8:5e:7c:a7:b7:b4:03:86:85:c8:10:d9:db:24:6c:80:89:06:
         d1:f7:5a:01:ed:55:11:f9:ce:5d:9b:17:bc:03:7c:f1:8b:44:
         60:2d:cf:f1:a8:b2:3e:3e:9e:10:4a:ed:85:bc:dd:a9:a8:a2:
         ca:08:55:0d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWbx0oPBi+QKuIbTAREu6Z37ZIL4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF
NTk3NTkwRDAeFw0yNDExMjIxMTA3MDdaFw0yNDExMjUxNDMzMDdaMDMxMTAvBgNV
BAMTKDM1NTc1OTY5NjI0RTQyNTAwRkU1NzVDRTcyQTg0QUNENjIxMDE3M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4a0QTZAUOB/1gwwbAIcFRR5L/
MUIXYmnT0j3vyJXBnJcFvlwF+P9fNZC9nAwvhVODiniVponFj9CpwzsLFrjGLYQ6
x8wc2bQRR4ioJUjy867IUVgNtN89hX39aXHFwaD6eSe9TjHdRLtSCAOh2TtND5ii
iGhqzecrfBwRDt4G492oipqArGo61CKHn3jburxGcUTbOghYZ+96bmdUQjHacyPf
IJ3v2Xg5tfCxIe+aJxGVwt+cWwNniCVa7ZeKy+49/MmqDr5Splb9kXNPtrdCrOqk
bN5zMQXfogcgWS6LlNhlK4Sa2xYg4GWv2MTdSgC69PMcg+AZjZJl2w7hReK7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUNVdZaWJOQlAP5XXOcqhKzWIQFzowHwYDVR0j
BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2
RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3
NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0
MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG
N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHuCty1DE39gKkAfDdaenLcx4P3TV98yLWZh
8XmJDE+4ARTy1ubHnuUdldE4SGbmvAqX6XAuu3Sqi3sGkoaGKZVB+ceBrEbMfpX1
KcusfApQnqmM6gdOoMrf69Pc1XoQjOTpqyZOvlXuHzVVQaMJ4IzcXg6y54wpK7ae
HByL3S33dF3SwL3C4q6VjdDcgjRJEb1M0vMuKnJ6vYDidUa6c1UFA9ScJ375U+wn
y6gX1R1Lvq5wIVI/BValoDXohWu0QaEh8pOKdchefKe3tAOGhcgQ2dskbICJBtH3
WgHtVRH5zl2bF7wDfPGLRGAtz/Gosj4+nhBK7YW83amoosoIVQ0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org