Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft
File:                     88D56B9372987974D75D5FEB6C48FA491B771DE6.mft (raw, json)
Hash identifier:          p0m8Vcm2ROi8uJkFxN0jzNCiZ1kXVag62zQuu/ZRPTk=
Subject key identifier:   17:47:2C:46:04:07:98:09:09:73:D4:32:A8:40:75:FE:CE:A0:AE:CB
Authority key identifier: 88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6
Certificate issuer:       /CN=88D56B9372987974D75D5FEB6C48FA491B771DE6
Certificate serial:       37AC07C345183D43BD12E7420EE4099CDBB1B4AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft
Manifest number:          8A
Signing time:             Fri 22 Nov 2024 14:22:07 +0000
Manifest this update:     Fri 22 Nov 2024 14:17:07 +0000
Manifest next update:     Tue 26 Nov 2024 02:06:07 +0000
Files and hashes:         1: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: 5oQbJ6mK4sPz0uTg4aXk3zz/9To4mydaJp9vn+QeMP0=)
                          2: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: wygMRWpWYrOcZ46ARQQR4s9zeM2Bs+6zuSLJK/ddP6k=)
                          3: 88D56B9372987974D75D5FEB6C48FA491B771DE6.crl (hash: yin/Ek7pMUeIFKBFtnqqqhgPaquruAaU8zedLZz/j4E=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl
                          rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ac:07:c3:45:18:3d:43:bd:12:e7:42:0e:e4:09:9c:db:b1:b4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88D56B9372987974D75D5FEB6C48FA491B771DE6
        Validity
            Not Before: Nov 22 14:17:07 2024 GMT
            Not After : Nov 26 02:06:07 2024 GMT
        Subject: CN=17472C46040798090973D432A84075FECEA0AECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ea:ea:a8:e9:ef:ff:18:2e:a0:5b:1b:c7:75:
                    ae:1e:26:ae:c3:ed:e9:d6:34:0b:67:95:7d:0e:80:
                    3f:bc:54:56:30:95:83:af:eb:4d:04:c5:1b:82:09:
                    69:c1:3d:37:6d:48:80:2f:0c:0f:9d:bc:ad:fe:54:
                    d8:79:d8:4c:7e:3e:a4:c9:af:0f:8d:5f:cd:b1:9f:
                    95:9f:40:12:cf:5e:d0:d5:b9:e8:6d:9e:c6:eb:43:
                    44:8f:a7:cd:f4:24:72:96:0f:f7:13:6f:4c:52:47:
                    50:0e:97:5f:4b:0c:87:1c:21:ba:34:5e:bf:2d:0e:
                    63:42:a4:e3:0e:d2:6b:32:78:bc:38:a8:05:6b:c5:
                    2b:27:d6:a2:1b:bf:31:c2:92:29:5b:97:5f:10:a4:
                    af:c1:72:9a:03:ff:aa:96:64:e7:dd:92:43:9c:56:
                    ec:72:4e:a4:26:d3:09:9f:e7:0d:f9:f8:ce:1e:8a:
                    32:f3:67:02:80:7f:76:4e:7f:a9:c5:61:c9:01:8f:
                    10:ca:b3:86:ec:25:65:a3:f8:c9:ad:81:d7:63:99:
                    37:64:73:74:2d:aa:7a:37:b2:cc:ed:09:40:7d:f6:
                    d4:27:03:30:cb:1e:c0:b5:62:34:b5:9a:f5:20:f5:
                    e3:37:fb:b2:66:1b:90:15:32:85:06:4f:fa:61:e2:
                    00:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:47:2C:46:04:07:98:09:09:73:D4:32:A8:40:75:FE:CE:A0:AE:CB
            X509v3 Authority Key Identifier:
                keyid:88:D5:6B:93:72:98:79:74:D7:5D:5F:EB:6C:48:FA:49:1B:77:1D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88D56B9372987974D75D5FEB6C48FA491B771DE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/88D56B9372987974D75D5FEB6C48FA491B771DE6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:7d:17:99:62:10:af:c4:89:4b:63:cf:54:fe:f9:ba:30:5c:
         1f:bc:35:bc:3c:ce:52:4d:8e:f4:e1:67:9d:40:e5:5d:49:47:
         c5:e1:14:97:9c:2c:dc:15:b3:38:3b:7a:b7:0f:ad:6e:8e:8d:
         46:2b:95:17:bf:2a:a3:75:3d:89:7b:4c:84:ec:a4:90:49:c1:
         5c:ad:19:8d:7f:32:86:d2:27:8b:49:3c:38:4c:be:bb:0d:37:
         86:11:51:0d:ed:37:5b:1a:40:ac:83:c6:44:96:f2:f8:32:19:
         ed:60:9a:3f:72:cf:ed:78:c5:6d:73:ac:83:34:59:88:f0:5d:
         bb:6e:e3:31:70:f4:12:41:1e:3c:b5:56:5e:8b:33:17:df:65:
         be:b3:66:ff:67:96:4e:2d:d9:79:36:c5:69:98:dc:42:9c:5e:
         b8:c4:81:9a:5c:0d:aa:42:7a:21:ba:a4:a9:4e:22:e5:8b:fb:
         da:80:fd:5b:27:4a:dc:8b:0a:fe:53:ac:a4:7a:e3:00:d3:e9:
         84:80:a7:9c:67:b2:e0:64:be:c6:11:38:8e:56:d4:7f:f3:9a:
         3e:59:a0:f8:55:a9:3d:47:e3:6e:cd:94:51:82:b1:78:64:3c:
         1b:7d:fa:31:48:06:8d:3f:05:d2:67:15:c8:c4:9c:aa:e4:86:
         e6:32:1d:01
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUN6wHw0UYPUO9EudCDuQJnNuxtK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkx
Qjc3MURFNjAeFw0yNDExMjIxNDE3MDdaFw0yNDExMjYwMjA2MDdaMDMxMTAvBgNV
BAMTKDE3NDcyQzQ2MDQwNzk4MDkwOTczRDQzMkE4NDA3NUZFQ0VBMEFFQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26uqo6e//GC6gWxvHda4eJq7D
7enWNAtnlX0OgD+8VFYwlYOv600ExRuCCWnBPTdtSIAvDA+dvK3+VNh52Ex+PqTJ
rw+NX82xn5WfQBLPXtDVuehtnsbrQ0SPp830JHKWD/cTb0xSR1AOl19LDIccIbo0
Xr8tDmNCpOMO0msyeLw4qAVrxSsn1qIbvzHCkilbl18QpK/BcpoD/6qWZOfdkkOc
VuxyTqQm0wmf5w35+M4eijLzZwKAf3ZOf6nFYckBjxDKs4bsJWWj+MmtgddjmTdk
c3Qtqno3ssztCUB99tQnAzDLHsC1YjS1mvUg9eM3+7JmG5AVMoUGT/ph4gCBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUF0csRgQHmAkJc9QyqEB1/s6grsswHwYDVR0j
BBgwFoAUiNVrk3KYeXTXXV/rbEj6SRt3HeYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NTA2MzNmYy1mZTIzLTRkODItYmE2NC1iYjdlZTZkZDZlMDYvMC84OEQ1NkI5Mzcy
OTg3OTc0RDc1RDVGRUI2QzQ4RkE0OTFCNzcxREU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZBNDkxQjc3
MURFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh
NjQtYmI3ZWU2ZGQ2ZTA2LzAvODhENTZCOTM3Mjk4Nzk3NEQ3NUQ1RkVCNkM0OEZB
NDkxQjc3MURFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIR9F5liEK/EiUtjz1T++bowXB+8Nbw8zlJN
jvThZ51A5V1JR8XhFJecLNwVszg7ercPrW6OjUYrlRe/KqN1PYl7TITspJBJwVyt
GY1/MobSJ4tJPDhMvrsNN4YRUQ3tN1saQKyDxkSW8vgyGe1gmj9yz+14xW1zrIM0
WYjwXbtu4zFw9BJBHjy1Vl6LMxffZb6zZv9nlk4t2Xk2xWmY3EKcXrjEgZpcDapC
eiG6pKlOIuWL+9qA/VsnStyLCv5TrKR64wDT6YSAp5xnsuBkvsYROI5W1H/zmj5Z
oPhVqT1H427NlFGCsXhkPBt9+jFIBo0/BdJnFcjEnKrkhuYyHQE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:18 2024 by rpki-client on console-fra.rpki-client.org