Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
File:                     DA8766A90851AE44D76B8563D83586F0164FE5CF.mft (raw, json)
Hash identifier:          VaObDKIqu0IF/Mi/RqRbanU9yemvGGGQFxG9Vyg4xyY=
Subject key identifier:   13:D2:94:72:DC:15:C3:3C:6E:79:8C:75:89:7A:DC:93:69:F2:63:C3
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Certificate issuer:       /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial:       1BEABA78015A43DB01BC8B33E5D77F5C26AB2CE3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
Manifest number:          04BC
Signing time:             Wed 20 Nov 2024 20:10:57 +0000
Manifest this update:     Wed 20 Nov 2024 20:05:57 +0000
Manifest next update:     Sun 24 Nov 2024 07:14:57 +0000
Files and hashes:         1: 323430353a616163303a35333a3a2f34382d3438203d3e20313339393439.roa (hash: 020qXb6fxBPPQD9oydTx8URwcN7iFSS5uXlTmQveyfY=)
                          2: 323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa (hash: geflI9/4w7m7+iCOsFZdzYH8ahMptfHVtvGDBvvL4ns=)
                          3: 323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa (hash: O9133om7NZyf516vJmhBqe0GTNpePpXSB4u9RMPfgzg=)
                          4: 3130332e3134372e35332e302f32342d3234203d3e20313339393730.roa (hash: HIoJThuHqvo3723nMTnvAhmWLc53frjDsf5GVSadtxs=)
                          5: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393730.roa (hash: Zwf6XUbRXYFjehHU1h9I5ryNBsEeHpo1RBUo7mecalo=)
                          6: DA8766A90851AE44D76B8563D83586F0164FE5CF.crl (hash: TL25Xf1dMokcWjgv9LWzRpOvj6p7Qk1Eahglo9EjWbk=)
                          7: 323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa (hash: Cu1z5KCpRxnxlOm9tBDJXUdlb7h1bqn0dG5xRCk7zxA=)
                          8: 323430353a616163303a35323a3a2f34382d3438203d3e20313339393439.roa (hash: w9qb3Np2jEp+gLtY5Ht7czjk8Xqwgx5y2Ho1C1qiHWo=)
                          9: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa (hash: 8ta7yw4B4utuXOXcNX0Ilejom40ybRp3siLVt8aLaX8=)
                          10: 3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa (hash: cixK9QRhQR3yed+eCrNd6ZkJ6H49Mr2sD+89zs3NN78=)
                          11: 323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa (hash: beL+gm/Z0HEOJLWebvTWM02eae65ZxzPPiShihmuKhI=)
                          12: 3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa (hash: cfYq+fqAtv2W7/3YFOAT1JCVCyfHlVa9TGMC+4lELVk=)
                          13: 323430353a616163303a3130303a3a2f34382d3438203d3e20313339393439.roa (hash: r5ISPP8o2HPfHpTYeKJqTMHFk0FOHbid87VW1uUq8a8=)
                          14: 323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa (hash: KQZo+3HIHnlbyCCPEj10WYBSIOntfHXQo1x4ll1wXeQ=)
                          15: 323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa (hash: dfMyY1+apmjDSv4RT94o2bI5n2Rl6/A6pyJmAiEHNu0=)
                          16: 323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa (hash: nb6/1YfyqjRx4TuFEXv2tzZ5jZKzUUCvYx7+kjEQjDA=)
                          17: 323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa (hash: NCqxglkAE9miCro9r1CT3LmpsDZVNXHsUFjbUWHVMhs=)
                          18: 323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa (hash: EfXQgH3skqgBZ59mU79eQZFqw5azW9WiU2e3l6sHPMc=)
                          19: 323430353a616163303a35353a3a2f34382d3438203d3e20313339393439.roa (hash: ClX6YjP1U64O0x9o8QokVLrn1o3v+XEkhwuow1RaaYI=)
                          20: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393730.roa (hash: P1ezuvcXd/dXHbJpsEnb4/Rkjy/xfn0EypTeR0QwgvA=)
                          21: 323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa (hash: LWmX8VJBo79sp16mdPKaXRXV6xMs7AWHG724RPLxSoc=)
                          22: 323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa (hash: EdYd7IGuHyCu/cThwtshNLf7zxuRmElBhySIxR+qG6g=)
                          23: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393439.roa (hash: qXIjeeExO/XufyXjG1sxIkLEm2m4bEVPVgjG+QC+xR0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
                          rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ea:ba:78:01:5a:43:db:01:bc:8b:33:e5:d7:7f:5c:26:ab:2c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
        Validity
            Not Before: Nov 20 20:05:57 2024 GMT
            Not After : Nov 24 07:14:57 2024 GMT
        Subject: CN=13D29472DC15C33C6E798C75897ADC9369F263C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:29:b8:e2:ac:b2:84:26:d8:c0:31:f2:47:
                    c7:40:b9:e5:f0:69:af:ff:79:9c:5f:d7:9b:b5:c7:
                    97:aa:d0:15:ed:a0:ee:a8:49:da:99:ff:d7:2e:ba:
                    64:15:e1:d0:ed:87:48:ba:2b:39:d7:3f:ab:df:24:
                    83:b3:ad:d7:01:77:5a:9c:24:76:db:89:af:c9:f0:
                    da:0c:ab:4c:51:c6:39:cc:11:df:48:a2:bd:13:54:
                    6d:74:9b:b0:15:b4:f3:aa:e0:76:71:d5:4c:d6:13:
                    ec:91:3b:11:9a:0a:d7:08:6d:b5:11:48:51:70:22:
                    62:c1:31:68:27:47:f0:93:c4:89:a8:bc:62:f1:2e:
                    25:24:a7:cb:98:0d:ec:04:38:c1:6b:85:16:d1:72:
                    43:bd:39:60:c7:86:6e:ad:cc:3e:55:a8:ed:f5:50:
                    26:d1:d9:1f:8a:5b:c9:2e:db:39:06:7d:dd:9f:f8:
                    b8:0d:6c:49:40:4f:87:72:27:b7:68:cf:76:6a:6b:
                    cc:a5:b1:83:69:5c:67:30:dc:19:b8:9c:5f:88:ea:
                    1c:6b:96:3d:6d:7d:30:77:b5:d2:25:4c:c1:be:15:
                    20:51:41:e6:35:63:eb:34:a5:3b:7f:86:9b:4a:37:
                    b5:2b:f8:6a:32:0c:9c:04:98:da:5d:e1:01:3a:72:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D2:94:72:DC:15:C3:3C:6E:79:8C:75:89:7A:DC:93:69:F2:63:C3
            X509v3 Authority Key Identifier:
                keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3a:7e:3b:62:a6:79:95:f3:2c:b9:70:c2:5e:23:76:db:a1:
         fc:8c:91:bb:af:5b:8d:92:c2:f1:46:b2:63:33:d8:88:90:fd:
         1a:54:01:d6:13:94:b0:41:63:d0:cf:e4:75:33:e0:21:13:a9:
         0f:26:55:b2:fd:73:c6:9c:9b:4b:88:3e:b1:94:f3:16:68:b2:
         bc:f2:94:a5:17:bf:a2:c7:9e:6f:4f:bf:6c:45:cc:97:90:4f:
         bd:a5:b7:8d:99:1e:5e:87:9d:1f:69:22:a2:9a:a3:8c:e6:12:
         3f:72:13:5c:e3:a3:9d:ad:e4:6e:b2:9e:62:31:14:ec:89:41:
         46:07:d4:25:10:0c:3e:8b:8a:bf:a0:ac:08:6e:03:ef:e9:c1:
         3e:06:60:3e:55:7c:0d:24:38:70:bc:bd:ea:42:de:75:84:6a:
         c4:08:0d:d4:93:f8:a9:20:ca:b5:3d:d1:ae:21:25:a8:f7:35:
         67:2d:c1:09:1f:4c:61:69:91:cc:ab:3c:60:b6:0a:78:39:25:
         56:6f:68:9f:56:6e:a7:63:a8:0e:67:d5:e8:54:3e:20:1c:7d:
         4c:08:e3:15:9f:c5:94:d1:48:7a:c6:47:fa:b1:35:6a:ee:4c:
         73:0a:da:48:74:27:7a:e9:43:28:9e:bd:8c:ed:95:ca:fa:bb:
         c0:6f:3c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:32 2024 by rpki-client on console-fra.rpki-client.org