Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
File:                     28351380A86044778274FC7CEC0F116CF3B3CA39.mft (raw, json)
Hash identifier:          nQGD7L3AeSL1cFvhd2zFGRXbvKtqpNGZ6SZtqsNMue8=
Subject key identifier:   D3:C6:F7:ED:F0:ED:36:02:0E:57:46:52:02:84:99:E8:21:E9:60:C8
Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
Certificate issuer:       /CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Certificate serial:       768EE39CB9A3310B2F6BEA75C3ADC4B3F1EC6871
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
Manifest number:          0484
Signing time:             Wed 20 Nov 2024 12:00:47 +0000
Manifest this update:     Wed 20 Nov 2024 11:55:47 +0000
Manifest next update:     Sat 23 Nov 2024 20:49:47 +0000
Files and hashes:         1: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: o8WCNHqPgFVCcJIPMMNyY9wNR4s4bWFgWCE9Rc1XnKc=)
                          2: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: C8mpthKpYoXubM6q6uGalmKMPilhsW9s24BUFwWotXs=)
                          3: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: ALHucxfZn6/DilYu8UfYHg2H5JY1f1TtwEgS6ThEO7s=)
                          4: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: NJdokcXpJ5XaumKzAZ6NIMhaU1ktPDdYz9EjGIFdANE=)
                          5: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: rBGdSMT8TyCX1hza79EhNX5rZ23TWWthY7OuvHhtfMI=)
                          6: 28351380A86044778274FC7CEC0F116CF3B3CA39.crl (hash: barvGj1ZSUa/hbk39E9z7BtOgd3POZesQjNs9astNGw=)
                          7: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: C+GCiZbyOWqTIP/iREeF81SfHqAfUnmzJ8NSghudrRI=)
                          8: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: NUbYBP04DuPbGhyIytzZLet0AimjBEKWNuV7fszyTmU=)
                          9: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: c52sokWCxiHM47HXpwxIRcIDim32PalL1alwxXZgY9U=)
                          10: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: neR217ApV7QIViRVCl6i2tqUQ8xAdpZVrB9KWhUY/mg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
                          rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8e:e3:9c:b9:a3:31:0b:2f:6b:ea:75:c3:ad:c4:b3:f1:ec:68:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39
        Validity
            Not Before: Nov 20 11:55:47 2024 GMT
            Not After : Nov 23 20:49:47 2024 GMT
        Subject: CN=D3C6F7EDF0ED36020E574652028499E821E960C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:73:ca:63:0d:f8:82:4d:74:55:52:f7:a3:15:
                    ad:33:b0:95:8f:fc:2d:27:67:e1:ae:88:8e:fd:39:
                    1e:b5:af:d6:69:04:9e:71:0c:e0:b8:de:cd:b2:62:
                    ce:1f:e1:d1:44:c2:65:8c:f3:59:c1:f6:da:dc:1f:
                    2a:e5:7c:42:0c:d4:0f:86:8f:84:42:9e:e6:4c:d7:
                    6a:7e:9c:8e:7c:3d:29:23:bf:84:1a:f0:70:53:82:
                    93:45:a1:f0:7b:ba:06:d0:c5:bf:f0:3e:f5:9e:a5:
                    e3:1d:8d:e2:63:52:31:5f:0e:fd:ac:9e:0c:b1:f8:
                    fb:5f:54:12:67:2e:0b:1a:fd:3e:89:69:66:e1:17:
                    3f:40:a4:e3:f9:7e:3e:aa:a2:2c:a1:59:72:a5:79:
                    32:c4:f0:76:c2:b7:9e:53:e2:09:5d:3b:08:86:11:
                    a0:ec:78:f2:45:70:c5:b4:be:b4:6b:ea:8d:9b:65:
                    2b:7e:51:9f:c8:24:97:4a:b7:95:54:4f:67:9b:2b:
                    42:37:1d:b3:31:46:37:70:25:3c:1c:23:7f:36:c9:
                    56:db:5f:6b:67:77:52:b0:5d:c3:22:58:75:48:08:
                    0e:30:16:2a:8e:57:ad:20:cb:ce:62:aa:c9:27:b1:
                    1e:c6:11:66:d6:75:44:6e:6d:b9:aa:57:a3:7a:3e:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C6:F7:ED:F0:ED:36:02:0E:57:46:52:02:84:99:E8:21:E9:60:C8
            X509v3 Authority Key Identifier:
                keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5e:8d:08:fb:09:ab:4e:d4:d9:69:2f:63:d5:4d:06:08:da:
         a1:91:95:df:6a:a0:db:0e:33:56:cf:a2:89:81:42:69:d6:10:
         70:87:f8:67:e5:e3:45:5c:6c:b0:b0:83:04:4e:45:d9:1e:63:
         9a:dc:65:d7:5e:f8:72:b6:32:6f:15:f8:63:ac:ec:4b:91:75:
         85:82:0d:87:8d:0c:5e:34:50:65:74:c9:e3:eb:1d:d7:88:65:
         c8:f1:02:0b:6d:26:60:f6:ef:8a:35:fe:9e:95:67:1a:51:06:
         c7:e6:6b:8c:d7:f9:b7:f2:5c:c6:34:79:3e:74:0f:de:08:dc:
         9f:fe:49:7b:76:cc:49:32:ef:2b:e5:26:80:4c:db:f4:16:dc:
         1a:ea:ff:c1:e5:29:43:69:72:a9:6b:ac:a2:f1:8c:01:11:c9:
         bd:bb:c9:ff:f8:29:40:96:d3:fb:7c:85:22:9e:d2:c7:d1:4c:
         5c:e3:ef:88:39:7e:be:91:0c:8c:67:a3:54:7c:8d:e3:e1:5f:
         64:05:d5:46:d6:df:b8:1d:0e:02:8e:f9:c9:f8:80:05:f7:5c:
         90:2f:f6:e2:0a:76:26:62:08:d9:26:e2:87:80:0c:4f:f6:fc:
         2a:03:7b:c3:b1:71:ab:4d:20:c6:a6:08:9c:ce:db:ca:3a:df:
         93:0a:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:27 2024 by rpki-client on console-fra.rpki-client.org