Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft
File:                     25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json)
Hash identifier:          aCez/OmV6MBSXdMgLr4qnBvl93/oEu9/mutlmbgNKHg=
Subject key identifier:   B8:E0:90:EA:FF:34:87:89:4B:6E:8C:98:58:11:79:DE:17:5F:C7:4A
Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE
Certificate issuer:       /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE
Certificate serial:       42F31EF32D1702B400A58C083021277DE12790F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft
Manifest number:          024D
Signing time:             Wed 20 Nov 2024 08:52:29 +0000
Manifest this update:     Wed 20 Nov 2024 08:47:29 +0000
Manifest next update:     Sat 23 Nov 2024 20:16:29 +0000
Files and hashes:         1: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: 8X7MnhcrGXRrLaiC6p6nb/f9+Sxh0EM3kk42oSlJDeM=)
                          2: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: iM9qqk1rOvF+ttwfbuzs3NFrgteclozJ+eE6XMEqX1g=)
                          3: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: mIROvhV/B52jTv+b7xbtzNIsRy0qMHCKGHbEvF+jS6o=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl
                          rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 10:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f3:1e:f3:2d:17:02:b4:00:a5:8c:08:30:21:27:7d:e1:27:90:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE
        Validity
            Not Before: Nov 20 08:47:29 2024 GMT
            Not After : Nov 23 20:16:29 2024 GMT
        Subject: CN=B8E090EAFF3487894B6E8C98581179DE175FC74A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:fa:8c:6d:85:60:fa:f4:c2:d9:c1:e8:34:
                    5c:4e:a5:13:cf:c9:f1:29:13:5b:82:a4:99:cb:18:
                    a6:01:19:7e:2a:3b:89:d7:77:8d:ab:64:cc:a9:10:
                    15:81:cf:06:b5:de:8d:f3:79:fc:33:bb:c5:12:f1:
                    2f:de:bf:70:51:e6:67:31:70:9b:bd:84:be:20:33:
                    8b:ec:b1:ef:85:f4:42:bc:2d:a4:8f:83:07:c8:72:
                    25:16:7e:bc:1d:fa:40:48:2e:2a:d6:d3:3e:60:10:
                    b6:20:4a:22:92:cd:2b:56:e3:1e:e3:a4:d2:a6:e7:
                    5c:c3:21:e9:ae:73:bf:70:1e:6b:4c:9e:07:50:9f:
                    14:78:56:f5:cd:7b:9d:4f:9f:8c:1b:93:ab:d1:84:
                    4b:4a:e3:d3:0b:ef:a2:54:1b:f2:0e:19:ac:fa:fb:
                    e5:88:79:62:99:bf:60:4d:a2:a8:83:d0:8a:7e:e9:
                    60:74:69:9c:ec:a3:0a:a5:91:7a:fa:98:ed:f7:0a:
                    73:29:03:53:77:68:e0:2a:85:cc:79:a8:42:9d:bc:
                    60:44:35:ef:29:93:00:a4:59:76:29:da:01:ea:7d:
                    7a:be:41:92:e4:c0:55:b9:19:4c:ca:a0:1e:48:22:
                    21:74:aa:eb:bc:9f:a8:f2:4f:56:03:fa:0b:28:06:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E0:90:EA:FF:34:87:89:4B:6E:8C:98:58:11:79:DE:17:5F:C7:4A
            X509v3 Authority Key Identifier:
                keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:44:5a:23:83:87:61:31:2a:a4:ea:6d:8f:1f:ad:63:81:64:
         f0:af:a5:41:e7:9d:92:7b:e7:62:3a:24:f5:d6:da:99:80:48:
         73:69:cb:95:57:ac:97:52:9c:d4:89:a3:f6:24:3f:c6:d8:9a:
         79:a2:93:6e:49:94:21:41:36:73:22:a2:0a:9b:fc:35:73:d5:
         7f:af:00:f2:40:b8:b2:2a:23:6b:36:6d:8c:9c:2d:ab:5f:95:
         5d:95:45:dd:e8:95:b1:f2:12:7d:cb:bb:87:0c:af:8a:4c:aa:
         2b:77:7b:2e:7c:c0:f6:99:3f:90:ad:ec:f2:df:9f:ba:a6:b8:
         8d:6a:b3:46:06:fc:1c:c3:ab:54:7b:c6:76:22:f5:25:f2:33:
         c5:11:4d:86:34:f7:b9:80:6e:e1:b1:3e:47:99:b8:af:99:3c:
         17:34:b1:48:47:bf:ac:7d:c2:be:37:b5:1d:9e:7a:94:af:19:
         fb:9b:4c:d5:c5:cc:73:0f:79:d4:37:78:8e:03:07:49:ef:20:
         2e:00:9d:13:14:4c:a7:38:a6:2b:b6:bb:db:0f:3e:52:e7:aa:
         38:19:3a:c5:6f:f4:4d:e3:f1:07:9f:d6:e9:aa:a5:6d:0f:6a:
         75:ac:e6:23:36:68:fc:7e:4e:df:01:5a:61:ae:e0:e8:5e:4f:
         a2:b9:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:13 2024 by rpki-client on console-fra.rpki-client.org