Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
File:                     EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft (raw, json)
Hash identifier:          iUReHOVaOu3pkq7uhhqLjv6Hnl5JhPZoMrajI1AarFY=
Subject key identifier:   B7:C5:6A:E3:D7:D0:2D:9C:3E:65:2B:5D:B5:AE:0A:F3:1E:6A:4F:FA
Authority key identifier: EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81
Certificate issuer:       /CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
Certificate serial:       01342DB8162D33072ECEC99BE5F8DE2455F51BCB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
Manifest number:          01D3
Signing time:             Mon 25 Nov 2024 14:10:02 +0000
Manifest this update:     Mon 25 Nov 2024 14:05:02 +0000
Manifest next update:     Thu 28 Nov 2024 16:12:02 +0000
Files and hashes:         1: 3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa (hash: HM06Nxz+y/gIUQ+X/bWtaqdgCwesuVZhQ6jDGPYAPi4=)
                          2: EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl (hash: xj5W/E9vyQ07YTo7NvV0sZLyVWrH25T7oO4C5iVVFJ4=)
                          3: 3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa (hash: iZAMnIuUrgIYHshhetHF0U3NPUY0+b+6EE6t2BUtZpk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl
                          rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 16:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:34:2d:b8:16:2d:33:07:2e:ce:c9:9b:e5:f8:de:24:55:f5:1b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
        Validity
            Not Before: Nov 25 14:05:02 2024 GMT
            Not After : Nov 28 16:12:02 2024 GMT
        Subject: CN=B7C56AE3D7D02D9C3E652B5DB5AE0AF31E6A4FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:11:94:55:33:c2:cf:63:1a:11:f4:de:27:
                    96:0e:d5:e0:a8:71:80:45:4f:38:a0:60:d9:59:a3:
                    54:bb:f4:32:3a:ab:d1:27:4c:e8:45:4b:4d:b2:bf:
                    da:2a:35:51:e7:75:28:a4:70:ac:7a:4c:4b:ab:fe:
                    09:c6:a7:c4:03:98:c4:55:ce:6e:ef:7a:12:7a:50:
                    88:3f:8c:70:d8:2b:f5:d5:2f:02:f6:23:e5:60:9c:
                    61:74:94:74:ab:c2:f6:0e:e0:c3:83:cd:59:c7:ca:
                    93:b7:68:15:a1:17:b5:93:54:2f:4f:91:18:db:b2:
                    d7:6d:ff:6c:bd:a1:75:03:2f:f2:c2:a4:76:e9:43:
                    93:4c:34:11:f4:2d:51:47:e5:43:4c:b6:4d:e5:e0:
                    ca:4f:7b:ca:ea:39:1a:c2:18:d6:db:f7:35:93:d8:
                    77:d3:46:7d:d8:40:b4:88:73:00:d3:98:54:61:ab:
                    8b:21:dc:97:c3:53:95:3d:5e:77:92:a4:0a:e2:bc:
                    6b:d8:a0:a5:df:8b:e6:da:25:f6:63:d2:ea:5e:1e:
                    a8:9e:c8:5d:1d:32:6e:35:a3:23:f5:d5:6d:06:5f:
                    99:36:0a:c4:53:ec:64:c1:d8:62:e0:59:ce:6b:0f:
                    cd:b1:ab:77:07:b3:a2:28:a7:b8:49:1c:a4:05:99:
                    7a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C5:6A:E3:D7:D0:2D:9C:3E:65:2B:5D:B5:AE:0A:F3:1E:6A:4F:FA
            X509v3 Authority Key Identifier:
                keyid:EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:85:64:b7:b0:1a:a5:a2:b7:1b:55:5d:9e:b4:40:8a:4c:66:
         18:2c:c1:9f:bf:fc:ee:04:b4:22:a4:ef:81:55:3d:99:07:97:
         21:7c:60:21:91:f0:15:4e:a4:03:d1:df:33:d9:7a:2c:5a:1f:
         aa:4c:91:61:53:dc:e7:32:0d:d1:b4:01:b0:df:02:10:7e:36:
         9f:84:f8:c2:4d:81:10:6b:1c:92:41:24:60:08:b0:44:c8:3d:
         cb:05:e7:e9:cb:f1:d5:c0:ee:81:15:99:5d:64:29:9f:68:23:
         62:4d:15:ec:ba:b3:91:82:2f:8e:c4:4b:f2:94:bf:44:4b:0f:
         f1:ac:70:3a:30:b5:34:1d:83:3a:2e:31:b3:6b:5d:25:d6:2c:
         9e:ef:f8:8c:04:0d:9c:6e:92:6f:78:27:4d:c6:bb:87:ea:ce:
         f6:5e:d6:f2:7d:aa:e3:3a:dd:7a:24:91:21:17:bc:53:05:93:
         24:9a:6e:bc:3b:b2:68:f3:ad:08:49:f3:b3:6e:aa:cd:35:35:
         2b:cb:4e:b4:9e:be:c3:a6:b6:e3:3e:31:b1:76:52:17:e6:ba:
         39:17:3d:0d:64:81:3a:8b:cb:f6:94:4f:3d:8f:e6:d5:35:db:
         49:e7:f6:2f:8e:4a:99:e2:3d:c7:ec:da:3a:36:1c:8e:1b:45:
         b1:56:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:26:44 2024 by rpki-client on console-fra.rpki-client.org