Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
File:                     2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json)
Hash identifier:          d3opiaWVKo21jln50C6ZOHycs613oL/NgB7dGw7xUs4=
Subject key identifier:   93:47:A4:EF:01:E0:04:72:C1:90:C6:B0:08:0D:9C:72:ED:1E:A3:9D
Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
Certificate issuer:       /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Certificate serial:       507CACC7719CB82E65CB30DE56FDD902C4240E9D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
Manifest number:          02D9
Signing time:             Sun 24 Nov 2024 04:41:06 +0000
Manifest this update:     Sun 24 Nov 2024 04:36:06 +0000
Manifest next update:     Wed 27 Nov 2024 06:14:06 +0000
Files and hashes:         1: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: IG6t7nYlULhsMgBABVk9BSJ2moXKjUg9u7BBivZ69qI=)
                          2: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: BAj6wGXRStOevsKAAs4sF+Q+V6U6g9tECkAMCeQYV7c=)
                          3: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: dr9xu7CIi6+ik1UpGLg3wt8yFQdd1RVO43AbherDW7g=)
                          4: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: y7lpT8S1ji+a1FFuqDUcuez7FIlHE6fK0qrQE1WKvDU=)
                          5: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: fhHYRVOyLx3EWvXLGXFYvmq/vgj8Oa201e8XUizUgAA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl
                          rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7c:ac:c7:71:9c:b8:2e:65:cb:30:de:56:fd:d9:02:c4:24:0e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
        Validity
            Not Before: Nov 24 04:36:06 2024 GMT
            Not After : Nov 27 06:14:06 2024 GMT
        Subject: CN=9347A4EF01E00472C190C6B0080D9C72ED1EA39D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:34:ac:db:d4:8a:27:68:e7:ae:d0:cd:7d:
                    cc:6f:de:b9:30:10:21:d5:8f:c3:bc:cb:5f:53:43:
                    28:a8:1f:3b:df:bd:1c:64:a0:b3:e8:8a:7d:f3:85:
                    ee:0c:49:a4:c4:76:88:29:be:ea:39:9f:98:0c:60:
                    5c:a3:93:a2:3b:16:9d:19:24:05:ad:d8:51:83:a1:
                    89:e1:8a:3e:cc:5b:f2:16:78:8c:89:74:ac:00:a0:
                    6f:55:b0:79:4e:f4:60:4d:43:76:3e:38:1c:b1:bd:
                    ec:a7:a5:54:d9:12:73:90:95:59:12:73:63:a9:eb:
                    a8:f6:aa:04:08:8f:89:c5:48:0d:b3:3a:d8:f1:47:
                    b0:fe:83:a1:bf:c1:d3:1d:51:56:aa:71:0a:f3:23:
                    e2:6f:36:73:8d:01:43:b4:91:71:0e:fd:68:5c:43:
                    f4:a0:1d:ba:53:a1:54:c3:a1:ff:81:e7:07:e7:bb:
                    73:54:19:bc:45:00:30:30:b1:d0:10:eb:d0:51:87:
                    60:27:69:87:16:64:60:98:22:d1:ba:01:7c:e4:25:
                    16:5c:0c:9f:65:b0:d0:8a:c9:86:fb:16:07:ff:36:
                    6e:ef:ab:f4:b8:f1:af:86:26:e2:01:a6:ee:9f:17:
                    30:c0:2f:b2:23:7f:1f:08:8a:bb:95:17:35:67:c1:
                    0b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:47:A4:EF:01:E0:04:72:C1:90:C6:B0:08:0D:9C:72:ED:1E:A3:9D
            X509v3 Authority Key Identifier:
                keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e4:8b:b1:4a:8e:f0:a0:0b:83:8e:f7:da:c6:29:02:ea:aa:
         50:fc:07:53:d4:54:e2:5e:90:cd:4a:05:95:9f:02:4e:34:d0:
         cb:da:f7:4b:c6:bf:30:8b:2b:62:00:0b:95:53:2f:0b:94:d7:
         ec:b6:ec:e7:6e:70:ae:98:78:21:f5:95:2b:bd:5a:bc:1c:ea:
         bd:08:a6:70:54:a3:ae:13:7f:15:90:bf:06:dd:f7:ed:30:50:
         db:6d:05:b5:5e:f6:5f:13:0b:a2:2f:52:2b:18:ba:31:92:27:
         6d:7a:71:5e:ea:5f:ca:67:da:b6:ba:cb:54:42:fd:33:5b:7c:
         95:7d:f2:1d:8a:f9:54:c5:d0:fd:86:6a:7b:ba:ac:c1:30:59:
         92:b1:db:68:fa:a5:3f:06:37:2c:09:f8:2f:4e:7f:47:b4:98:
         cb:30:af:8e:09:32:d9:75:2f:f5:03:f4:55:d0:31:5c:24:e7:
         bf:aa:14:01:05:3c:33:c4:bf:bf:73:91:38:93:41:3b:78:1d:
         2a:a4:c3:a2:91:dc:82:a6:60:33:32:80:b4:d7:13:3f:93:bc:
         9b:1f:88:ee:d4:50:cb:3e:c3:49:68:22:56:c0:55:64:23:15:
         42:12:f8:f1:9c:2c:c1:1e:6c:f0:94:3a:b6:1c:6e:ef:6f:6f:
         fd:33:99:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org