Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft
File:                     B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft (raw, json)
Hash identifier:          UtCdvA5AQrsrJP4nc4+FZZFdXJCqs3hrEzVcW2rqZmM=
Subject key identifier:   0F:C1:99:37:D5:A1:88:AD:1F:A1:78:17:D1:DA:CB:8C:14:2B:F8:09
Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F
Certificate issuer:       /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
Certificate serial:       3D70B743F5881DDC4879E9F23D3E9EC034E11BCD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft
Manifest number:          02FF
Signing time:             Thu 21 Nov 2024 21:11:26 +0000
Manifest this update:     Thu 21 Nov 2024 21:06:26 +0000
Manifest next update:     Sun 24 Nov 2024 23:23:26 +0000
Files and hashes:         1: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: RKmYGLaYgObZD7901ggW/LVAf/9Ud/UJV76DnvmYAaQ=)
                          2: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: Gieaps/sVWGO4EVoaPnllxhgw2OpKbh8FOYq+URWEY4=)
                          3: B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl (hash: Kg0fI2JO1stSXmnmb0S0lyotqiLv0AmfZQxv3Wd1mTo=)
                          4: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: eOEer/2EILqe+CeV9fn8fCkTmQlvUdRdmkanObFI4kY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl
                          rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 23:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:70:b7:43:f5:88:1d:dc:48:79:e9:f2:3d:3e:9e:c0:34:e1:1b:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
        Validity
            Not Before: Nov 21 21:06:26 2024 GMT
            Not After : Nov 24 23:23:26 2024 GMT
        Subject: CN=0FC19937D5A188AD1FA17817D1DACB8C142BF809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:6c:f2:d8:4a:44:75:50:4b:f8:e7:37:3f:
                    f9:fc:99:14:b5:26:22:9f:31:db:1a:e0:27:6b:f4:
                    bd:5b:73:a6:5e:d0:df:a5:e0:14:18:2c:bc:28:d6:
                    2c:4b:bd:e4:83:5b:ca:0a:73:41:46:3a:2e:f9:f6:
                    92:51:88:8b:cd:d9:26:43:e9:c1:a6:ea:44:d4:93:
                    99:04:0a:b8:d1:f0:37:37:a1:fe:be:a2:c9:c7:a4:
                    23:ac:52:00:4a:95:7e:20:d0:1c:ae:f6:49:30:bc:
                    8c:e5:f3:c1:19:ae:56:3a:bf:c9:8a:dd:0e:f4:6d:
                    09:e0:1f:a7:25:2b:88:8a:82:f5:58:68:d7:1b:3f:
                    cd:5e:de:93:94:76:89:46:50:2b:29:af:eb:d1:54:
                    40:26:22:07:a2:79:93:a5:3d:d0:4c:18:0e:4e:fb:
                    57:5a:67:f3:c5:46:54:84:84:0f:20:d5:93:d7:6b:
                    2d:ac:b9:02:f3:de:74:88:3d:65:10:7b:85:8c:47:
                    05:5b:55:db:5a:3e:ca:7b:46:23:55:b0:61:71:74:
                    aa:dd:1f:a2:d3:10:42:1d:39:f9:0d:cc:6f:b4:ac:
                    a8:97:bc:48:12:33:8d:00:ff:9f:f2:9a:bf:62:4e:
                    34:ee:cc:02:aa:34:de:43:eb:3b:bc:c4:5c:48:d3:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C1:99:37:D5:A1:88:AD:1F:A1:78:17:D1:DA:CB:8C:14:2B:F8:09
            X509v3 Authority Key Identifier:
                keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7b:da:2f:29:d9:02:b2:51:82:fd:9e:92:12:ba:39:38:5e:
         bd:a3:5d:ff:cb:bc:51:fc:ed:c5:54:06:2c:fd:60:ed:39:cb:
         68:c3:8e:4b:25:8b:4b:c3:77:92:98:84:23:fb:e0:e9:5d:b0:
         d0:56:e3:b2:7a:fd:4c:b1:2f:27:ac:40:b4:bb:41:37:a5:b4:
         d7:51:50:e3:6a:5a:58:54:2f:24:96:df:d7:ac:c0:43:e8:cb:
         43:35:d2:c4:3c:e0:cf:f9:a5:96:d7:a1:9b:c2:4e:4e:5f:0f:
         e1:ae:c1:43:46:97:d1:6f:a2:3f:d1:08:ff:3e:f2:bf:89:e3:
         59:e2:af:6a:6a:e8:06:cc:1e:f2:41:66:52:53:e0:86:16:d1:
         0c:53:67:b3:89:94:70:35:7c:80:04:85:2d:3a:4c:ce:8d:ec:
         10:0c:2b:fb:5f:aa:de:42:56:b1:3a:19:a2:55:58:ff:41:9e:
         92:8b:1f:84:86:f5:e0:0d:70:bd:41:74:57:a1:0b:8e:17:ff:
         41:4b:b7:f9:94:87:61:cc:54:30:44:36:7e:ba:fe:98:86:fb:
         b5:02:03:34:87:2e:c8:e6:20:6e:93:83:c9:a2:fb:56:82:68:
         92:23:06:aa:a6:73:b1:14:ed:c5:81:96:18:14:2f:28:ba:8b:
         f4:a3:bf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org