Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
File:                     0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft (raw, json)
Hash identifier:          NnvIOtFvO/KIl/a3UkP309w3tJ31ClgI5biV4MfHZLo=
Subject key identifier:   9B:0C:57:E4:DC:7D:0E:04:58:5F:22:55:9F:BA:25:24:AA:6F:26:9B
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       34F8E10983AB36012822B72DCFA7F3A9D3BCD520
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
Manifest number:          01B8
Signing time:             Thu 21 Nov 2024 02:11:25 +0000
Manifest this update:     Thu 21 Nov 2024 02:06:25 +0000
Manifest next update:     Sun 24 Nov 2024 06:17:25 +0000
Files and hashes:         1: 3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (hash: blvhC5mu+XJhjfitpMdYcO0PTVbYBI2WHhZRJy/oOBc=)
                          2: 323430343a613634303a36363a3a2f34382d3438203d3e20313333383237.roa (hash: 1cGLb6flF+sG9FbIeo7gqKEbomQnfYkuNhzZyM8ulKw=)
                          3: 3130332e39352e362e302f32342d3234203d3e20313333383237.roa (hash: s/uZYeJprhGnWX2//HBqYGCHtbueKtXiv18b+uk27Pk=)
                          4: 323430343a613634303a3935373a3a2f34382d3438203d3e20313333383237.roa (hash: 9IIX/I4LwDiuE+KeZYA2yYvi5TMJFCE/fbqcURjEk/E=)
                          5: 0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl (hash: 3YKYvyh3wz17zBuKz76sb1sCKEGaC3caXwz6E/jnSxo=)
                          6: 3130332e39352e362e302f32332d3233203d3e20313333383237.roa (hash: Te3AvUTGPO22MnUJ6/LYwCMSzsuyx7JfvuvxsiGtkzc=)
                          7: 323430343a613634303a3133393a3a2f34382d3438203d3e20313333383237.roa (hash: xLGvyaDjwqpeZLZ4IR0CWf1khT74vyueTZyVJB2lFVg=)
                          8: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (hash: jek+C8sMQzNOH2Uvvj48S7MAbmvC7ae719XDihYll7I=)
                          9: 3130332e3232302e3131332e302f32342d3234203d3e20313333383237.roa (hash: XpFPcsbLxCI6NKz3XGZEwQyDlDuJ1JV+kC2sTVPG1no=)
                          10: 323430343a613634303a3131333a3a2f34382d3438203d3e20313333383237.roa (hash: 0dUKes+eIh/aOaX/cHPsineN0HFtNVJsDIk5syVGyQk=)
                          11: 323430343a613634303a36323a3a2f34382d3438203d3e20313333383237.roa (hash: /u1J0jxw0/CBuY30P8rvzQ6/4rkEqB7xBedzBnR2804=)
                          12: 323430343a613634303a3935363a3a2f34382d3438203d3e20313333383237.roa (hash: YVPmHYNM/91Kh3go+8hTY3GFfVG3Jf2pj4Fr/0KSs7Q=)
                          13: 3130332e39352e372e302f32342d3234203d3e20313333383237.roa (hash: 2278ZJ1gGMvFP2g/vEd5/wEl+LVW1rbxi3M1w9tcyIU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f8:e1:09:83:ab:36:01:28:22:b7:2d:cf:a7:f3:a9:d3:bc:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: Nov 21 02:06:25 2024 GMT
            Not After : Nov 24 06:17:25 2024 GMT
        Subject: CN=9B0C57E4DC7D0E04585F22559FBA2524AA6F269B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:de:97:f5:21:67:c6:bf:00:90:e1:77:a5:
                    1a:53:72:63:5a:44:d3:5b:8c:89:00:e0:a1:c0:86:
                    d1:60:3a:34:30:15:a2:9c:05:20:f5:e0:8d:ea:2a:
                    39:81:45:93:65:5e:cf:e6:92:3f:eb:8c:23:44:8a:
                    3a:09:9d:d8:b1:24:70:12:59:d9:8e:04:ab:df:3e:
                    20:29:08:84:a7:71:15:90:43:c6:b4:fa:b7:e6:ef:
                    a6:15:a2:71:51:27:83:87:04:50:a8:d2:e2:8f:4a:
                    9d:c8:96:7d:25:8c:41:a1:25:46:9d:2e:95:6b:6d:
                    a8:e2:08:55:be:f4:a2:d3:62:49:e4:6b:64:74:7d:
                    9c:18:75:5e:1a:57:21:31:60:4e:7e:56:36:71:46:
                    69:16:47:e0:80:20:60:20:dc:5e:87:1b:98:02:b7:
                    bb:b3:33:31:d8:24:2d:6c:ef:63:aa:b4:55:61:76:
                    81:b8:25:dc:db:74:58:03:45:2e:43:bf:ad:22:fa:
                    65:f3:bc:db:b7:d6:dc:95:ff:82:d2:71:03:cc:13:
                    18:bc:8b:56:32:66:a9:81:ce:c1:0d:09:30:40:95:
                    86:9f:f6:8d:33:d7:08:b5:4b:fc:36:ca:1d:96:e2:
                    15:a6:a1:c4:37:01:07:94:fd:0f:27:a8:fc:cd:4c:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0C:57:E4:DC:7D:0E:04:58:5F:22:55:9F:BA:25:24:AA:6F:26:9B
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:49:ea:4c:0d:3e:42:22:47:f8:4d:8c:87:22:52:7a:fc:04:
         e2:d5:b9:55:e1:3b:d1:34:2f:e1:3f:ec:c4:97:49:94:b8:44:
         60:70:b2:01:d0:8a:13:a7:b7:cb:aa:3d:62:9d:90:d7:ad:f4:
         34:d1:60:f0:eb:06:c8:c4:15:9b:4f:46:dc:3f:9e:73:2e:11:
         74:59:28:86:2e:90:2a:21:c9:e9:54:7b:2a:36:78:9d:31:29:
         18:f7:cd:7b:cd:e2:e4:e3:df:02:da:e7:2c:e2:5e:46:0f:58:
         56:6a:f3:07:b7:65:2f:73:a8:ee:66:22:0e:46:d7:bd:6b:bc:
         48:b2:2c:c3:3d:ec:9a:c9:3d:b6:b2:69:6f:77:25:50:17:a2:
         8a:c9:0b:05:31:b2:a8:05:4c:a5:02:ce:47:33:93:b9:bb:97:
         5a:42:86:77:e0:c8:e7:48:57:e3:07:af:6a:8a:a5:f8:97:b0:
         f9:45:2b:78:51:26:dc:46:e1:89:a0:82:b9:56:b1:08:fe:5b:
         b6:c9:2a:5f:c6:42:a2:59:24:11:f9:1b:5a:2b:c8:71:e0:60:
         fb:87:04:c7:5f:83:d2:06:ae:33:d4:99:f3:00:07:7d:28:37:
         c7:5f:51:03:6e:dc:18:09:57:06:f5:b3:a9:05:09:66:f6:5d:
         01:2b:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org