Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
File:                     3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json)
Hash identifier:          4JHOWUbiPybED0+z7m6bWGiJKwIZDhhDhnfttI26rO8=
Subject key identifier:   C6:C3:17:C7:56:CF:2F:6F:D0:9D:8A:B2:FF:36:40:7E:6D:4B:61:74
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Certificate issuer:       /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial:       1FC141CEB904E2E23F7ECF6586148FC83DAA83B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
Manifest number:          01AE
Signing time:             Mon 25 Nov 2024 18:32:14 +0000
Manifest this update:     Mon 25 Nov 2024 18:27:14 +0000
Manifest next update:     Fri 29 Nov 2024 02:47:14 +0000
Files and hashes:         1: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: in1eOlYNKCk2lGbXKJTXvY33Xdz5YgM95JjqhRefg8I=)
                          2: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: y+koXC0SKC7czkSwcd2cG19vH0+o53OQtkOYra+BrVo=)
                          3: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 3xWXXks4UVNYkXH6dJVO0j8s1qvxiBuFe16NtmlEZXU=)
                          4: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: hjeyl+1kW/m4y26p6b/tuPgZHiWK7vgetVIit1iPkOY=)
                          5: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: WsluVFkB4a+lP57xwnkZuJyPr6zcJ1fd0nejjcDmukA=)
                          6: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: e2hZqRmumwwjihIOo4NSyIcflDvxaVJmQVJkA8KGCsQ=)
                          7: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: A10fZ5oBGWm/ydsGNd4ClvdYu28lRcTQqL1+gfTVn6c=)
                          8: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: SMu/CEzc8AVdGXATEzraGqIbslbrtyKCNL26AnGYvS4=)
                          9: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: 7lwbDZ+aI5yIIWKifKCkb4tfAf37jKqB7Px1ZTR64Jg=)
                          10: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: AlUWTxdz4XyVx/BJnp5RHH7Yu2FT507lFQbZMytd2ZM=)
                          11: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: GUSl7LUTkCNLq3kjAIVktijnSt4hBS8Y9L517womeqQ=)
                          12: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: CsvPbO1dTyPsmUs0Y51ZaJ0Q65Hxq5scKNV2P6WWsfo=)
                          13: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: oInZsMVgdwEvnpVcu4rctnbwGDY+GjcyJ5+JQSNMsAM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
                          rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c1:41:ce:b9:04:e2:e2:3f:7e:cf:65:86:14:8f:c8:3d:aa:83:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
        Validity
            Not Before: Nov 25 18:27:14 2024 GMT
            Not After : Nov 29 02:47:14 2024 GMT
        Subject: CN=C6C317C756CF2F6FD09D8AB2FF36407E6D4B6174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e5:0d:d7:a9:16:1c:e9:3f:e0:49:cd:73:eb:
                    0d:ac:96:38:6e:87:8a:ea:34:bb:c8:35:96:87:93:
                    3a:fe:61:ab:e3:76:1d:f8:4a:17:04:99:dc:ea:e6:
                    16:f1:8c:40:2e:4f:9d:d3:4d:0d:ff:24:1b:88:ce:
                    37:16:ea:fc:5b:69:c5:91:69:e3:b3:92:44:0a:ec:
                    4a:73:32:b0:b8:ce:2e:3f:ad:6b:06:3a:40:8a:0e:
                    c0:69:9c:3c:f7:e6:1a:31:3f:43:98:d5:cd:e8:49:
                    c9:45:c4:76:e2:b5:7b:d6:c0:14:97:da:d2:bf:09:
                    df:3f:91:a7:b3:8f:f8:82:26:73:77:e7:6d:3f:fa:
                    12:54:31:65:19:0d:6a:30:2d:f4:8c:2a:24:f2:4b:
                    52:1a:31:24:50:23:60:97:8b:c8:54:ee:db:fd:9c:
                    a9:ca:f7:99:63:06:1a:a2:ef:dc:31:58:d0:84:84:
                    f3:5b:8d:6d:42:2c:ad:6c:2d:75:a4:6c:0a:9d:2c:
                    67:6e:0c:d0:59:2d:4e:f8:73:30:91:87:04:0b:f3:
                    16:b2:46:8a:72:5b:03:9d:e1:a0:f4:f0:9d:6b:66:
                    39:e1:b1:b9:34:33:69:22:f0:86:13:8c:de:89:7b:
                    06:dd:84:d7:19:df:ec:4f:0d:55:f7:7d:75:1d:e9:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C3:17:C7:56:CF:2F:6F:D0:9D:8A:B2:FF:36:40:7E:6D:4B:61:74
            X509v3 Authority Key Identifier:
                keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:00:b1:95:ac:a9:9a:8d:a1:f0:6e:7b:b8:d6:e4:58:63:cd:
         3d:ef:40:83:5a:d8:59:84:7c:5d:21:cd:f9:4c:52:33:72:37:
         fb:9b:32:7d:d8:2d:26:ae:6f:51:34:49:18:c6:33:36:bc:7e:
         cf:2f:11:32:04:f1:a3:ff:b1:4c:77:2d:af:88:41:0c:bd:53:
         55:d3:55:f8:09:eb:a8:f4:c5:da:71:ad:6d:1a:4a:13:c7:2c:
         48:9c:ca:bd:de:f4:b7:3e:eb:3d:55:85:ee:96:f3:38:b9:27:
         c3:2b:21:a0:f5:8b:e8:03:18:a3:fe:35:0e:b7:e6:43:20:9d:
         4a:f2:21:9f:05:eb:47:0d:c2:b4:59:03:1a:03:31:17:e9:18:
         c0:3a:77:8c:e4:5c:1a:42:c7:88:f6:18:e1:77:ac:97:d9:62:
         94:27:d2:d4:64:e3:3a:5b:27:4a:d3:e7:20:78:60:1b:61:c6:
         29:4b:2a:7f:d7:1e:fa:f5:35:e0:18:c8:15:91:63:31:01:19:
         4d:1f:1e:72:21:eb:fb:11:1e:87:a1:cc:b7:f1:67:10:ab:1f:
         1a:33:14:ae:8a:6a:4b:c1:4d:b4:20:17:36:a1:2f:6a:b3:fb:
         c3:7d:8f:01:b3:6a:42:18:60:24:a7:72:bc:b8:01:14:40:81:
         ed:c3:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:13 2024 by rpki-client on console-ams.rpki-client.org