Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
File:                     83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft (raw, json)
Hash identifier:          ZpXBuqd4NVsUux6Nvz3+JfJNQiHtgrHtJTfWRwk54qI=
Subject key identifier:   92:44:6D:0D:43:82:CE:EF:1D:5D:21:0E:68:0C:98:3A:81:C5:E7:5A
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       18B39C4F378A508CE9C992222967976E17EE0FD8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
Manifest number:          04A0
Signing time:             Thu 21 Nov 2024 04:52:29 +0000
Manifest this update:     Thu 21 Nov 2024 04:47:29 +0000
Manifest next update:     Sun 24 Nov 2024 08:54:29 +0000
Files and hashes:         1: 83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl (hash: s9dCyaf+BdMU6JRETU4FIBhzDYT+WP98ZpWhYxQyoy4=)
                          2: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: N2T7DBYjNznj0B0Gx8wABa3A4sF8W5Eo0nd66DsyVr4=)
                          3: 3135302e3130372e3130342e302f32332d3234203d3e203338353035.roa (hash: OD3JiPGHDiL7kIqgNDTr6d3lXB+Vqj+hZ7qDs1qxRC4=)
                          4: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: DY+I8fOVqUjezx/DmSAGLnloSubkgTLcYKo00TtWhVE=)
                          5: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: 4vp0Qpf0MLP4khTVs9MQwOQui0ZXjUZqWXi8G+NFZc8=)
                          6: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: E2PhZYIW23U+utUpZwqULcvTt6KlzYJl4T2mdMuJpvU=)
                          7: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: 0uFyEk4kSz2+PTofQStkvWY/ZflHglwyBx+4DydiuOs=)
                          8: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: gMz09JidDcRWBTwU6ryArFJQlq35y7FUrFAp/Wy4yQg=)
                          9: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: T4+pJPmCfgNNh91fQe+cFh2S1JfH4wE9FS6aSJjDE44=)
                          10: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: T6zBCDYCBei1sIwoPeFlZke8e/0x59ASpBVpgvqvRNg=)
                          11: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: Ni8K6MxuczEixPJW7FrAgC5kkezA9a+/a/29Cb7hSuw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
                          rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b3:9c:4f:37:8a:50:8c:e9:c9:92:22:29:67:97:6e:17:ee:0f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Nov 21 04:47:29 2024 GMT
            Not After : Nov 24 08:54:29 2024 GMT
        Subject: CN=92446D0D4382CEEF1D5D210E680C983A81C5E75A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:9b:1a:e4:55:d1:cd:c6:8a:5c:3a:4c:3e:
                    2a:e6:bf:2e:bf:4f:25:58:b3:b1:6b:a6:04:a6:1f:
                    a8:0e:c7:d3:b6:be:7c:1e:1e:48:74:e0:f7:23:4d:
                    ed:3c:40:52:d8:97:b2:0f:05:b9:c2:6c:22:55:a1:
                    40:fc:39:36:eb:56:c7:af:d4:39:cd:08:8f:de:a1:
                    52:4c:c5:5c:fd:39:ea:23:39:64:4d:13:1d:91:c1:
                    93:d4:ae:98:9f:63:d9:1d:92:52:37:b9:fd:4f:3b:
                    69:52:0e:19:c2:5b:4c:fe:cb:0d:69:9c:f6:19:20:
                    d4:98:3a:e7:e5:d0:eb:21:4f:01:25:8d:82:23:13:
                    4b:9a:d4:5d:f4:c2:1b:31:5e:d7:d5:12:72:f5:fb:
                    6c:95:de:70:28:b4:b2:d1:ea:9c:c2:01:f8:6f:78:
                    09:86:5b:e6:8a:de:73:35:06:75:8b:6f:0c:6a:ec:
                    65:4b:ee:95:fc:00:cc:00:15:f3:3a:d5:3a:fc:c1:
                    1c:ad:eb:42:5c:50:3d:2f:e3:8e:c9:a7:81:71:4f:
                    b8:9b:12:3d:5d:1a:f6:d6:8a:4d:f8:e6:78:ad:c0:
                    4f:b3:30:0b:51:25:d1:9d:a4:4a:78:12:f3:55:d3:
                    db:24:37:60:6e:40:b3:26:3a:86:11:c7:a0:a9:93:
                    c0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:44:6D:0D:43:82:CE:EF:1D:5D:21:0E:68:0C:98:3A:81:C5:E7:5A
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:e2:38:c3:de:90:c3:bf:c8:cf:c9:b4:49:2c:24:91:6e:a7:
         11:19:a5:19:e0:be:16:50:73:7d:16:a6:e9:7f:69:a9:c7:78:
         55:39:17:1c:f5:0d:bf:f1:3e:59:93:b6:68:47:cc:af:e2:48:
         d8:35:a0:f8:42:2f:5e:5d:ab:78:78:35:af:e2:cf:39:64:2b:
         ab:b4:9e:e9:10:de:75:11:54:33:ef:89:04:bb:cd:0b:00:3a:
         c2:3d:a9:89:0f:76:eb:da:29:9a:9f:44:39:e3:2e:e2:c5:22:
         2e:96:5b:4a:2a:a2:39:54:4c:b8:e5:ee:ee:26:5d:65:22:18:
         f6:f4:33:e4:9e:52:ed:d0:2b:95:6d:c3:fd:ea:ce:f9:67:8a:
         30:fc:e6:fd:a8:a2:39:70:e7:09:14:05:84:b5:b6:08:c4:21:
         e7:51:d6:a3:47:c9:61:fb:29:92:14:ea:91:22:47:8f:bb:c3:
         cf:16:b9:98:10:92:bc:63:af:a2:6a:18:5c:df:e9:71:72:19:
         96:47:a8:58:68:b7:0e:4c:2d:53:c1:93:fd:23:21:52:a6:90:
         5d:35:a3:a0:64:96:d8:47:dc:37:72:3d:b1:86:5d:a2:4f:87:
         7d:4c:8d:46:62:36:5f:e0:e7:30:4f:08:b5:6d:f8:2e:73:65:
         38:5b:79:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org