Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
File:                     798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json)
Hash identifier:          /21+3nVqpRg1iF0g9EnO3Ph0poGefRI72YxUTP/BJI8=
Subject key identifier:   BF:86:2E:97:46:00:DF:BC:67:B5:31:CD:6D:5B:E4:A5:15:68:0B:3F
Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19
Certificate issuer:       /CN=798A229C42DA54D0690064D264AA7AA2375D0419
Certificate serial:       38E868F3CA522E986FA51F2EFC6112C9E84B1A20
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
Manifest number:          49
Signing time:             Fri 22 Nov 2024 07:02:16 +0000
Manifest this update:     Fri 22 Nov 2024 06:57:16 +0000
Manifest next update:     Mon 25 Nov 2024 10:37:16 +0000
Files and hashes:         1: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: 9iJWmOBZqNHSTjfzj2T4cXH47vgfnZxx4122BtzuDY4=)
                          2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: shl5hzE7A/Tc3LxB68K5+LeHHHNimXXsrSJroYt9mi4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl
                          rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e8:68:f3:ca:52:2e:98:6f:a5:1f:2e:fc:61:12:c9:e8:4b:1a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419
        Validity
            Not Before: Nov 22 06:57:16 2024 GMT
            Not After : Nov 25 10:37:16 2024 GMT
        Subject: CN=BF862E974600DFBC67B531CD6D5BE4A515680B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:df:e3:ee:43:57:91:1a:08:1c:8b:4a:10:d1:
                    25:6f:0f:b8:93:ff:d5:2c:6b:8b:0b:eb:b5:a5:2e:
                    cc:4c:4a:39:5c:5e:14:f1:6d:fa:44:81:97:b5:d9:
                    51:68:38:c9:66:34:fd:a7:d3:20:d1:a2:14:1d:32:
                    0c:e4:00:48:30:01:f7:f7:b7:be:ff:18:55:5d:b7:
                    2a:70:98:d3:af:04:e6:a6:22:4f:93:89:2d:05:4b:
                    ab:ba:f4:0a:59:fd:a2:b5:29:25:91:9b:3d:6c:82:
                    8f:95:77:b1:a3:da:eb:fa:aa:d3:5c:9d:60:cf:c6:
                    d7:18:be:6f:cf:4e:33:11:50:4b:b2:aa:37:46:95:
                    2a:d9:33:21:81:6b:f3:90:1e:d3:a4:6a:60:9e:6d:
                    88:62:80:c9:ee:3a:87:68:e5:4c:9d:ee:7b:61:c0:
                    50:70:56:07:50:64:47:1d:68:ed:d5:0a:30:77:6f:
                    75:05:8c:c3:aa:3e:8d:ec:07:43:af:b5:83:9a:c2:
                    16:bf:c9:7b:6c:94:2d:04:95:73:0d:87:35:c5:b8:
                    96:59:a8:8d:7d:19:65:67:20:c3:35:36:63:73:89:
                    f4:8c:2f:4a:3c:01:b0:b3:af:19:34:09:b0:2d:d2:
                    b5:fd:49:a2:19:27:55:67:58:36:9d:0f:32:33:50:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:86:2E:97:46:00:DF:BC:67:B5:31:CD:6D:5B:E4:A5:15:68:0B:3F
            X509v3 Authority Key Identifier:
                keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:46:37:dc:18:29:6d:80:83:f6:e0:4c:0f:63:20:c6:d7:34:
         7d:6d:82:76:e1:4f:df:75:20:06:73:7b:0a:ee:3f:c1:8a:76:
         26:8b:e3:e2:ef:30:ed:37:11:bb:aa:a0:b1:01:a5:47:cf:83:
         74:f3:af:76:b8:bf:dd:79:34:5f:42:74:b4:aa:ee:ed:48:1f:
         44:a7:8f:51:9d:56:29:6d:4f:2f:6e:34:33:de:6c:c2:94:50:
         3b:3a:b2:fd:99:56:48:44:5c:ba:67:7d:86:bf:f6:07:10:c7:
         5b:a6:e8:6c:fd:04:64:73:9d:02:d1:e6:3f:43:3c:0d:07:30:
         9b:e9:ea:e1:24:39:d9:f4:da:9f:49:d3:a2:19:db:ac:f3:e6:
         87:8a:bb:39:34:2a:d0:c1:86:21:2d:16:8f:4a:27:01:6c:2e:
         ff:88:47:ca:4f:7c:58:39:8e:b1:bb:41:09:07:58:f3:63:c0:
         92:47:f0:53:c4:23:42:05:51:aa:3f:89:bf:29:65:e8:97:ce:
         cb:55:b5:6c:40:3b:9f:c6:bf:ae:c0:9d:7f:85:3a:d0:e2:79:
         21:c1:f0:b5:1e:75:f1:64:d1:ac:9e:1b:af:b0:46:58:53:a0:
         00:bc:5f:a4:3d:bf:07:f6:95:17:2c:67:ce:d2:8d:5f:52:3f:
         d2:3e:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:03 2024 by rpki-client on console-fra.rpki-client.org