Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft
File:                     1FA59BCEE428AFC03264229113A5539024697A14.mft (raw, json)
Hash identifier:          bMKdCCotVwQVsWauF5dPMuArCB/l57K4ARPeWHTIR5E=
Subject key identifier:   95:9E:94:DD:22:DC:8A:4B:3F:DE:1A:F0:67:F3:0F:9E:A9:FC:29:4C
Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14
Certificate issuer:       /CN=1FA59BCEE428AFC03264229113A5539024697A14
Certificate serial:       4840AB6E4F6303047EF8DD7A6D85C3FED6130951
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft
Manifest number:          0484
Signing time:             Fri 22 Nov 2024 18:40:05 +0000
Manifest this update:     Fri 22 Nov 2024 18:35:05 +0000
Manifest next update:     Mon 25 Nov 2024 21:41:05 +0000
Files and hashes:         1: 1FA59BCEE428AFC03264229113A5539024697A14.crl (hash: gjSOhjgdGZGaNdltyvv4FIDrRc19AHhEMjMcOakkXN4=)
                          2: 3130332e35342e302e302f32342d3234203d3e203535363937.roa (hash: C+N/4gRGIF8qJkkBp+BXWNuZwbO9GWK96z7S/WTB/J0=)
                          3: 3230322e302e3130372e302f32342d3234203d3e203535363937.roa (hash: bC+0Z62TsXox0BhLKEbD9PTYzVzwTZf1PzCwwCjZ6/s=)
                          4: 323030313a6466303a3261373a3a2f34382d3438203d3e203535363937.roa (hash: eJjCelSFgyjk+y+IHCyYFMftgYEJnsQUr4uQb3lyrQQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl
                          rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:40:ab:6e:4f:63:03:04:7e:f8:dd:7a:6d:85:c3:fe:d6:13:09:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14
        Validity
            Not Before: Nov 22 18:35:05 2024 GMT
            Not After : Nov 25 21:41:05 2024 GMT
        Subject: CN=959E94DD22DC8A4B3FDE1AF067F30F9EA9FC294C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:7f:c3:64:8a:49:04:e9:84:c0:6d:94:f8:
                    35:d1:df:a8:63:bb:4e:f1:aa:c8:b7:09:a1:37:32:
                    02:d7:4e:5f:35:50:25:fb:5b:9e:65:48:12:cd:f5:
                    e2:5f:0f:85:49:ae:02:86:61:1e:94:c4:38:b7:ac:
                    00:0b:03:1a:91:13:70:f3:a4:29:ac:0d:9d:ed:ba:
                    2b:a0:9f:29:c2:95:d5:07:5b:c4:b4:b8:3e:ee:ba:
                    7e:f4:69:59:79:0d:db:31:0d:12:30:7d:98:1a:e5:
                    10:97:a0:81:3a:61:7a:12:1f:27:75:63:76:b2:f2:
                    31:a1:da:a1:e4:91:d8:e8:80:07:03:c2:81:2a:2b:
                    74:f5:0d:f4:30:b1:76:28:4f:e8:50:89:ba:82:97:
                    f3:4c:3f:10:2d:df:40:3e:7d:ae:1d:40:56:24:ef:
                    b3:9f:ef:43:56:a1:8b:eb:64:83:d5:cd:74:8c:e8:
                    7b:8f:5b:63:19:88:d2:22:ca:0e:bc:22:4e:18:91:
                    e6:d4:ef:7e:08:bf:fa:77:bd:70:cc:d8:1e:35:3e:
                    3f:fe:cc:cc:1a:7a:64:d7:23:38:2f:1c:7e:aa:ac:
                    32:2a:86:05:2b:3e:cc:71:5b:df:5e:68:86:b8:6f:
                    ce:f9:df:87:c0:d9:4a:9f:4c:00:21:7b:23:85:66:
                    cb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9E:94:DD:22:DC:8A:4B:3F:DE:1A:F0:67:F3:0F:9E:A9:FC:29:4C
            X509v3 Authority Key Identifier:
                keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:3b:80:70:a2:48:f9:36:a5:54:e5:b3:af:ac:9b:10:b2:58:
         a8:8d:e6:08:07:c9:18:68:30:92:17:aa:49:bc:23:f9:d8:4c:
         32:1e:9e:0d:45:b3:de:87:94:72:60:e0:45:1f:03:2a:34:7a:
         0e:45:e4:c2:19:06:36:93:24:9c:39:05:74:94:08:44:58:f2:
         6d:bc:af:c8:98:a9:21:c5:30:f1:8f:7d:45:0e:63:ae:aa:d1:
         7e:5b:8a:18:79:d7:a5:56:ce:05:3f:c6:78:9a:71:d5:f0:a5:
         3b:9f:70:ba:39:21:4f:06:cc:45:c9:36:00:d4:3f:37:86:00:
         41:cd:22:90:95:79:de:66:ef:4b:d1:46:8a:6b:dc:09:47:9d:
         d4:c4:99:47:68:03:f1:96:31:8d:a1:27:25:16:61:9e:76:ab:
         70:98:a0:54:e5:dd:e9:4e:a7:a9:56:a0:94:97:b7:18:21:9c:
         2c:66:e5:bb:cd:b2:d9:59:07:55:1b:0b:79:0a:36:4f:f0:80:
         af:5b:5b:59:a1:0d:40:16:e5:3f:58:d4:a1:9f:08:74:f3:7e:
         bf:50:b7:ee:b3:7c:d6:ec:72:32:7b:6d:70:b4:6c:a2:9f:fa:
         b7:67:48:06:f3:07:e5:8b:36:82:8a:1e:d2:9b:a6:f3:68:ef:
         b5:c6:49:7c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSECrbk9jAwR++N16bYXD/tYTCVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAy
NDY5N0ExNDAeFw0yNDExMjIxODM1MDVaFw0yNDExMjUyMTQxMDVaMDMxMTAvBgNV
BAMTKDk1OUU5NEREMjJEQzhBNEIzRkRFMUFGMDY3RjMwRjlFQTlGQzI5NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqX/DZIpJBOmEwG2U+DXR36hj
u07xqsi3CaE3MgLXTl81UCX7W55lSBLN9eJfD4VJrgKGYR6UxDi3rAALAxqRE3Dz
pCmsDZ3tuiugnynCldUHW8S0uD7uun70aVl5DdsxDRIwfZga5RCXoIE6YXoSHyd1
Y3ay8jGh2qHkkdjogAcDwoEqK3T1DfQwsXYoT+hQibqCl/NMPxAt30A+fa4dQFYk
77Of70NWoYvrZIPVzXSM6HuPW2MZiNIiyg68Ik4YkebU734Iv/p3vXDM2B41Pj/+
zMwaemTXIzgvHH6qrDIqhgUrPsxxW99eaIa4b87534fA2UqfTAAheyOFZstFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUlZ6U3SLciks/3hrwZ/MPnqn8KUwwHwYDVR0j
BBgwFoAUH6WbzuQor8AyZCKRE6VTkCRpehQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MDQ0MjA0My0yNDRlLTRiODctYjAwYy1lNTdmNDg3MWQwZWYvMC8xRkE1OUJDRUU0
MjhBRkMwMzI2NDIyOTExM0E1NTM5MDI0Njk3QTE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUzOTAyNDY5
N0ExNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA0NDIwNDMtMjQ0ZS00Yjg3LWIw
MGMtZTU3ZjQ4NzFkMGVmLzAvMUZBNTlCQ0VFNDI4QUZDMDMyNjQyMjkxMTNBNTUz
OTAyNDY5N0ExNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADQ7gHCiSPk2pVTls6+smxCyWKiN5ggHyRho
MJIXqkm8I/nYTDIeng1Fs96HlHJg4EUfAyo0eg5F5MIZBjaTJJw5BXSUCERY8m28
r8iYqSHFMPGPfUUOY66q0X5bihh516VWzgU/xniacdXwpTufcLo5IU8GzEXJNgDU
PzeGAEHNIpCVed5m70vRRopr3AlHndTEmUdoA/GWMY2hJyUWYZ52q3CYoFTl3elO
p6lWoJSXtxghnCxm5bvNstlZB1UbC3kKNk/wgK9bW1mhDUAW5T9Y1KGfCHTzfr9Q
t+6zfNbscjJ7bXC0bKKf+rdnSAbzB+WLNoKKHtKbpvNo77XGSXw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org