Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
File:                     4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json)
Hash identifier:          qmeBqfONlNjy1nTM/3eO2MhNlmvpn/zM5wqgLgurFMo=
Subject key identifier:   68:62:09:EC:0D:C7:3E:21:35:46:13:85:4F:2E:BA:97:F3:7D:BD:AA
Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2
Certificate issuer:       /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
Certificate serial:       26BD799673AB6DC22CCD6FB144EFD71908660920
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
Manifest number:          0487
Signing time:             Mon 25 Nov 2024 04:11:12 +0000
Manifest this update:     Mon 25 Nov 2024 04:06:12 +0000
Manifest next update:     Thu 28 Nov 2024 12:10:12 +0000
Files and hashes:         1: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: vqZW4br5X3C/ArTk/DRfufjeFkrTmf1Omf6ogku2C1s=)
                          2: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: h6RVxpLnAMaDIfRa4gc3qjSTKqM6GqzTQIycSjUOXA8=)
                          3: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: mMt8TohptJaTB3iEAIHl/vZT9ocBsY0iZQRajhpLuKo=)
                          4: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: TKlrYYxdW4d0W7hA0lV/DSzBaApabiKYJpgjro7Ns1Y=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl
                          rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bd:79:96:73:ab:6d:c2:2c:cd:6f:b1:44:ef:d7:19:08:66:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
        Validity
            Not Before: Nov 25 04:06:12 2024 GMT
            Not After : Nov 28 12:10:12 2024 GMT
        Subject: CN=686209EC0DC73E21354613854F2EBA97F37DBDAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:42:be:54:15:27:98:2f:0a:76:f9:91:02:
                    40:68:79:d4:a0:02:d7:12:5c:18:13:60:cd:89:7b:
                    4b:79:7c:31:07:6e:d3:a5:8c:c2:60:0f:fa:e9:18:
                    2c:5d:50:0c:f3:4a:b6:76:fb:21:7b:90:00:3d:06:
                    df:8e:24:6f:bf:21:ac:52:be:9b:19:ee:ea:12:76:
                    40:d4:cf:88:51:d2:a2:53:0b:c7:bb:1d:94:b5:35:
                    a0:20:bf:af:08:3c:5f:28:ff:cf:a3:98:5f:79:d2:
                    43:1b:ab:0d:cf:24:db:18:c6:55:ea:90:9d:be:ca:
                    71:10:f6:20:e0:97:36:aa:b3:c7:ab:48:f3:45:65:
                    c6:c5:03:f9:c7:34:27:9d:6a:6c:cb:52:c6:87:66:
                    7f:c4:d3:59:87:e1:40:82:70:20:f5:10:55:70:7f:
                    64:aa:e8:2a:2c:c3:56:e9:60:bd:2e:8c:4f:27:11:
                    2e:72:1e:8b:ce:6f:06:ca:dc:1e:1e:fe:d6:e0:6a:
                    38:0a:e8:66:a3:b8:2a:0e:0a:61:5e:09:03:71:69:
                    8d:41:5f:a6:bb:01:10:1a:d9:a2:1d:b6:e3:75:e0:
                    a8:6c:fb:3b:f1:24:de:fb:98:eb:14:42:a3:38:d2:
                    3e:0f:1c:01:8a:e8:70:d9:e5:35:ad:99:14:56:4e:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:62:09:EC:0D:C7:3E:21:35:46:13:85:4F:2E:BA:97:F3:7D:BD:AA
            X509v3 Authority Key Identifier:
                keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a1:23:40:8f:f5:45:7f:cd:c2:fe:e6:d9:b3:20:3e:76:b0:
         5d:a3:76:d9:29:aa:32:6d:ae:74:24:ce:6a:45:cf:4a:f5:8a:
         11:35:76:07:26:15:4f:a0:72:43:9d:d4:18:79:96:35:ed:72:
         57:f9:3e:61:1a:75:ae:e2:b1:ae:c0:18:e3:32:3e:75:f2:21:
         21:f0:ef:b1:44:8c:61:0f:bb:73:77:f9:52:6e:ed:7b:06:5e:
         95:05:8c:bc:f7:e9:f5:8e:37:72:57:05:3c:50:e3:74:b5:01:
         c5:15:be:f3:cb:86:11:f7:15:6f:05:23:78:49:9f:8b:d8:13:
         ed:7b:5e:0b:07:c6:f2:46:f3:d7:99:94:62:5d:46:f7:d6:dc:
         1f:f5:59:bd:38:41:73:83:b2:e0:61:8a:c2:0d:98:81:fd:c1:
         c4:44:74:e0:0d:dd:d2:fe:00:6d:67:72:ed:f4:4c:b1:5d:c4:
         89:64:c5:75:9b:46:e0:cd:ab:7d:0a:f9:1b:e9:5b:69:11:62:
         7f:46:85:7e:86:ab:37:8d:5f:37:5a:c8:8c:47:29:b5:67:8d:
         eb:c8:78:49:0a:c5:6a:bc:c8:28:3d:47:45:1d:9d:6a:5f:08:
         ba:84:87:27:ee:eb:b0:93:d2:99:00:8b:2c:e6:9a:05:52:92:
         47:aa:4d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:42:07 2024 by rpki-client on console-ams.rpki-client.org