Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
File:                     BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft (raw, json)
Hash identifier:          ajHkelBqyWfB5fMsYREdUzq1yfvrWyjJwL4evRMR7bM=
Subject key identifier:   08:75:C4:F1:EF:1A:9F:7D:9E:5D:46:09:99:2E:0B:6C:DB:6F:D3:89
Authority key identifier: BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B
Certificate issuer:       /CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B
Certificate serial:       22E9EEAE5A54FBDB758F76B9406F1756C017A5E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
Manifest number:          012A
Signing time:             Thu 21 Nov 2024 05:01:21 +0000
Manifest this update:     Thu 21 Nov 2024 04:56:21 +0000
Manifest next update:     Sun 24 Nov 2024 07:30:21 +0000
Files and hashes:         1: BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl (hash: C9i3sg7t7CnbddbB8qao+aFcn/5bXOAfTNdEi0ph9OE=)
                          2: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: 0mqG/liJMTX8oPiItYLWlq40s+lsa6Z1Gz/HI3sVisI=)
                          3: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: Dm2ms3SxXfn/z9K1ll+j7cqBN26glV8kby4OHsl8Bnc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl
                          rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e9:ee:ae:5a:54:fb:db:75:8f:76:b9:40:6f:17:56:c0:17:a5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B
        Validity
            Not Before: Nov 21 04:56:21 2024 GMT
            Not After : Nov 24 07:30:21 2024 GMT
        Subject: CN=0875C4F1EF1A9F7D9E5D4609992E0B6CDB6FD389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5f:18:37:55:93:f3:e7:0f:d5:a3:35:86:3e:
                    ea:7d:01:06:77:1a:c3:d2:44:13:90:a6:16:fe:ce:
                    d8:2c:d9:99:49:26:45:f2:67:cb:f5:87:c1:a3:bf:
                    0d:f8:bc:ad:90:1a:4e:ad:e5:df:69:f1:4d:a6:6f:
                    21:ac:8a:ea:0f:8b:57:0f:20:b5:ab:8f:fd:d0:e0:
                    bf:08:72:16:16:b6:bc:d4:13:a6:ef:94:1c:8f:e9:
                    dd:7c:ff:f9:fc:f7:b9:f2:d8:1c:78:29:13:8a:e5:
                    46:f6:f9:5f:72:26:d5:58:9a:71:fa:44:f6:45:e8:
                    13:82:25:cd:09:ae:b7:9b:ad:10:91:46:b4:1c:c2:
                    66:22:3f:55:40:bb:35:9f:84:b2:52:f4:c6:86:8f:
                    57:62:fd:ed:ea:74:22:90:9e:e0:c8:b1:ea:c0:a0:
                    8f:3b:a9:62:51:9c:4e:aa:51:0d:82:25:5c:52:24:
                    1a:bf:59:89:3a:c3:66:e5:5b:80:11:e6:77:d6:ac:
                    4e:e6:ff:d2:2e:15:97:64:73:38:8a:41:c7:d5:86:
                    c2:36:6f:cf:de:0e:03:d8:b1:80:cc:64:15:e4:68:
                    c7:1a:7f:b7:6a:be:ef:00:be:bf:2e:a9:72:43:02:
                    ed:9f:35:32:ca:eb:03:88:92:d5:72:29:ca:cb:95:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:75:C4:F1:EF:1A:9F:7D:9E:5D:46:09:99:2E:0B:6C:DB:6F:D3:89
            X509v3 Authority Key Identifier:
                keyid:BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:9b:4d:91:55:50:26:8d:c1:87:82:a5:af:45:11:c6:ce:
         93:cb:ed:98:ff:ec:96:67:f3:da:a3:69:85:ef:8c:d9:de:ac:
         31:dc:72:db:49:80:91:a7:95:ae:b4:66:80:cd:ba:c2:9c:9e:
         68:ab:a0:1a:ec:b1:1d:fe:b6:44:36:ca:8a:b3:a3:13:72:d5:
         7f:79:ae:84:7b:e5:80:dc:ab:12:d0:f8:2c:76:03:3f:b8:f3:
         5b:14:fc:c2:c4:d8:ab:35:40:3b:33:2a:7d:87:a5:58:14:9f:
         ac:ca:22:72:20:e2:da:71:fa:5f:a9:25:35:70:54:1b:3c:08:
         cc:d3:10:db:81:4a:42:c6:97:3e:16:8b:f8:7e:5e:8d:6f:ce:
         8c:f9:ba:e2:30:26:4b:01:c9:3e:2e:74:c3:0d:82:49:ff:9b:
         0d:64:3a:82:b3:41:90:6e:48:13:d7:6a:e3:19:62:5a:08:9a:
         11:c2:cc:fe:6d:1e:92:28:91:dc:ec:77:62:f5:79:be:c2:b0:
         96:80:15:6f:25:44:8e:8b:0c:97:aa:21:6e:e2:b5:8b:cf:b8:
         39:f1:b2:e5:7e:e9:e6:50:f6:e7:3e:cd:43:81:e3:1d:08:5b:
         f7:1b:cb:e0:81:ef:b2:ac:a7:94:47:ab:b4:05:cb:5d:02:c0:
         53:97:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:39 2024 by rpki-client on console-fra.rpki-client.org