Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft
File:                     2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json)
Hash identifier:          dKwPHXThMImD0zYdMeOej7iHKZk91E2p/5nHqosoKZk=
Subject key identifier:   C0:36:84:BA:2A:43:D7:C6:54:C3:A4:CB:63:BE:9C:B2:BC:6B:CA:60
Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D
Certificate issuer:       /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D
Certificate serial:       1E9D0933ED24F49AE6006427A63861886A87933A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft
Manifest number:          0129
Signing time:             Fri 22 Nov 2024 08:02:12 +0000
Manifest this update:     Fri 22 Nov 2024 07:57:12 +0000
Manifest next update:     Mon 25 Nov 2024 16:57:12 +0000
Files and hashes:         1: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: 9w02S+yZ2+v6nu2GMhR1DX0lNt4SbsJLsylYuy1bjEY=)
                          2: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: adUaJiOdfrlkk51xQGfK8FvmPzxdh+lSSvGJ8Gg6n4o=)
                          3: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: VVbnG15nYQznOtaegyIF7xC39ey/Ndl2h6I1ShPKpVA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl
                          rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9d:09:33:ed:24:f4:9a:e6:00:64:27:a6:38:61:88:6a:87:93:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D
        Validity
            Not Before: Nov 22 07:57:12 2024 GMT
            Not After : Nov 25 16:57:12 2024 GMT
        Subject: CN=C03684BA2A43D7C654C3A4CB63BE9CB2BC6BCA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:86:da:63:17:96:d7:e8:28:ec:34:61:e1:
                    16:81:a4:7d:4c:57:7f:ce:86:16:3d:57:4d:bd:a8:
                    91:f2:91:37:5d:22:eb:f4:c4:e3:e6:64:00:20:13:
                    e1:55:69:ed:9a:cd:22:2f:e5:68:ef:1a:84:59:4d:
                    29:36:6b:b0:3b:ca:c0:42:45:f1:0e:0c:6e:ac:65:
                    6c:ef:be:52:23:bb:80:53:ec:36:24:7a:c1:59:5d:
                    fd:bd:f8:f3:f7:f8:8a:de:05:a3:c5:c7:97:50:5e:
                    bd:ae:d5:49:79:9e:93:36:75:68:de:ba:6d:f4:28:
                    b9:2b:f9:2b:d1:56:0d:c4:e7:14:dc:8b:c8:e5:fb:
                    de:67:2e:69:bf:90:cf:95:05:a4:5c:2b:1b:dc:fa:
                    9f:00:ab:90:c9:96:07:8e:8f:12:4c:cb:7f:1b:40:
                    ee:5c:14:fb:03:4c:46:0c:e2:1f:09:f3:ab:d4:2d:
                    81:c8:30:d5:22:30:c4:ed:56:4a:c3:bb:41:d8:59:
                    09:24:bb:e1:f7:42:82:7d:d9:d4:30:bf:75:31:a0:
                    70:ce:6b:6d:f0:68:a3:4b:7c:e0:8f:84:35:d2:07:
                    17:18:a9:fa:8b:b4:5a:8c:c9:30:4e:1c:d2:6f:f6:
                    2a:92:f9:e6:d9:88:3b:db:5d:6a:b0:92:3a:8b:75:
                    90:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:36:84:BA:2A:43:D7:C6:54:C3:A4:CB:63:BE:9C:B2:BC:6B:CA:60
            X509v3 Authority Key Identifier:
                keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0a:d7:8c:9b:50:32:16:94:57:24:1b:00:0e:22:82:01:ec:
         68:93:1a:da:66:09:28:3d:61:c0:a4:72:96:24:63:3b:73:de:
         d3:87:48:e0:31:cb:53:dc:84:bc:19:8b:96:44:12:d4:dd:50:
         ac:8a:38:ab:53:a8:e4:72:70:bd:93:ae:8f:70:ea:44:ae:6f:
         51:8a:c2:bb:10:79:8e:29:cd:aa:e4:5b:a7:cb:2b:d0:00:12:
         84:3c:c3:fd:cf:ee:e6:d0:8f:8f:50:dc:e0:8f:9c:7d:0a:46:
         bc:f7:81:8a:fe:88:47:0a:6e:ec:d0:55:e9:29:73:43:39:7a:
         9b:d7:4a:35:d5:cc:19:69:33:9e:b8:fa:70:c8:9b:9b:39:d6:
         ec:d1:29:e3:44:b3:60:33:68:98:37:d7:a3:d3:51:1e:46:39:
         88:49:cc:51:56:9c:10:44:2d:c4:55:e2:12:1c:00:9f:7e:62:
         a7:be:9f:94:bf:62:d4:4c:47:51:f2:04:34:1d:93:07:bb:e8:
         c5:eb:79:a4:81:ce:30:f2:a8:53:5d:17:1a:77:db:aa:59:f1:
         c5:f2:c0:81:38:ea:28:6c:ee:42:f9:69:2c:81:5d:09:fc:9a:
         3f:2f:0d:ac:7a:bb:8c:62:7a:08:6a:34:40:6a:8c:ce:ed:e3:
         f2:be:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:29:43 2024 by rpki-client on console-fra.rpki-client.org