Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
File:                     10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft (raw, json)
Hash identifier:          158p4t1vA+UdvfnsDO4yZgu73JMG+D6Kf8lM9Iq/yAs=
Subject key identifier:   75:6C:6C:42:5A:D3:A6:A4:1C:AF:B2:2D:7B:6B:F1:4E:EB:BD:7F:BB
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       4578B534D14379D607B9C2E1510DFFA34066BCE2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
Manifest number:          0480
Signing time:             Wed 20 Nov 2024 22:01:01 +0000
Manifest this update:     Wed 20 Nov 2024 21:56:01 +0000
Manifest next update:     Sun 24 Nov 2024 06:37:01 +0000
Files and hashes:         1: 34352e36342e39362e302f32342d3234203d3e203538343737.roa (hash: Gk747J2jBNpEXtir02tl58RV5f1YzhrWN3iKgxbQ7KE=)
                          2: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (hash: 9WCeU5uurKdIma/RjBrGY6SbYw575daktwtbDsB0hn4=)
                          3: 3130332e32382e3134392e302f32342d3234203d3e203538343737.roa (hash: hPcgJjVDE9m3tBKtqfCMvkuvUEnp8UYizUZsK3IRz8k=)
                          4: 323030313a6466303a3237333a3a2f34382d3438203d3e203538343737.roa (hash: eL7Y1izm4AtK8cu6bXuRjAi2YgKXj79o6hvPdbF1OWQ=)
                          5: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (hash: H7qdxG0CJs/yYiQYilPVBOjCY0BNB2JobVkWTO7DC7g=)
                          6: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl (hash: Vw6HLTCAGjF90L2JgeUimm3RpP8UwbEV7jvUM413y68=)
                          7: 3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (hash: pBwebMpuYYJXTb5pShB2CNNWZl6DNw4TGc/uma6DMgE=)
                          8: 34352e36342e39382e302f32342d3234203d3e203538343737.roa (hash: U+Nn2r5Sn/4yz+Dw8s2J+Cn+SRVePHMvbt6ShZoiqDk=)
                          9: 3130332e32382e3134382e302f32342d3234203d3e203538343737.roa (hash: FXD9Xl9HQjE5rhTpZsmUh0+M9Gq4Zq3tqVQkODiT8rI=)
                          10: 3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (hash: ljwF6ITVZZqVtcMOWEgbQb3tCP2RBo+I4AZDViUqEJs=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
                          rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:78:b5:34:d1:43:79:d6:07:b9:c2:e1:51:0d:ff:a3:40:66:bc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: Nov 20 21:56:01 2024 GMT
            Not After : Nov 24 06:37:01 2024 GMT
        Subject: CN=756C6C425AD3A6A41CAFB22D7B6BF14EEBBD7FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:16:13:f4:7c:66:d7:40:05:c2:89:c1:8c:23:
                    bb:43:5a:90:d3:a8:1e:98:51:3e:44:99:78:5c:6f:
                    5d:e2:09:01:93:38:76:f7:8b:59:8e:1d:52:49:28:
                    76:a0:60:5e:0d:4a:1f:69:4a:cf:4f:c8:59:1e:3a:
                    c2:81:92:92:3d:a7:98:28:5d:9f:6b:5b:d6:0e:b5:
                    a5:7a:d5:84:29:f1:d4:70:6d:f0:53:e0:e0:23:72:
                    61:f6:6c:05:5b:64:78:87:e7:89:ab:65:41:d5:70:
                    96:c2:fc:56:51:25:1b:f3:7d:69:aa:22:57:12:7d:
                    0c:64:ce:33:4f:12:aa:5b:08:ad:ad:a6:03:b4:9d:
                    f1:ae:1d:f4:1b:3d:62:6c:e4:1c:17:ce:e6:46:ce:
                    73:ba:c5:4a:57:9e:a5:7d:49:b4:08:d3:9f:3f:93:
                    30:3c:64:3c:bd:ad:4f:a0:89:0e:b4:05:b0:00:7c:
                    f9:6b:cd:f3:19:77:ec:0f:b8:7b:2d:e1:0c:c9:13:
                    88:79:1d:32:b5:eb:b7:ed:ed:7d:91:ed:15:4d:04:
                    9b:ad:3b:78:8e:4b:92:1f:f5:76:37:49:32:22:83:
                    05:09:a2:dc:44:d2:56:9a:01:a4:f1:6b:0a:82:f7:
                    9c:17:03:a8:ef:f6:c8:1e:9e:01:58:6c:84:71:46:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6C:6C:42:5A:D3:A6:A4:1C:AF:B2:2D:7B:6B:F1:4E:EB:BD:7F:BB
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:0e:89:7f:e7:a5:85:0e:cd:cf:6a:1b:6f:2d:21:b7:64:d7:
         96:51:fd:fc:5e:bf:1c:28:4e:e3:70:a8:a6:33:df:bb:0f:1b:
         25:33:65:b7:a4:79:5e:b6:e1:ae:72:14:c3:62:3f:c6:e1:7a:
         ac:9f:3b:aa:be:22:71:e0:16:66:02:61:7c:17:8c:51:b5:3e:
         da:94:fe:27:d3:38:3e:75:1c:0b:70:4c:2a:26:04:93:bd:65:
         67:61:c8:7b:6a:90:63:f3:66:b2:b9:39:e6:46:a2:a3:b3:fe:
         52:0a:9b:f2:24:45:4e:c4:87:50:45:65:6f:bc:13:f2:cc:b8:
         a2:9a:19:15:e9:f0:d2:83:3b:e1:e2:09:fe:53:cd:9f:a3:77:
         42:56:3e:33:76:1a:c1:6c:21:f3:0d:fd:be:44:bd:ba:10:66:
         70:ed:9b:ee:c5:6b:f4:ad:75:d3:82:b8:ac:eb:0a:9e:b6:a6:
         d7:cc:7c:c5:7b:23:0f:00:a7:c1:92:21:d4:06:d4:85:ad:ff:
         5a:bd:aa:f5:8c:68:f7:2f:b7:5d:f7:65:15:1d:d5:8f:e9:e9:
         b1:66:25:ed:88:a0:09:0f:de:eb:6f:59:ce:4b:59:64:26:60:
         72:e5:c4:0d:14:87:3b:96:95:04:14:c3:b3:33:63:38:e4:6b:
         03:75:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org