Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
File:                     C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json)
Hash identifier:          fulZ1XKu93Z+ym8NhJ8793YI7o6HmnzMPKt6CGHGqeo=
Subject key identifier:   DC:C2:56:59:F6:3E:58:4B:03:13:2C:45:AF:78:91:B9:88:75:04:5B
Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E
Certificate issuer:       /CN=C33BE6D76C1444B4695CC56D706802967A2A404E
Certificate serial:       4F2422A88830E3A40571AA7AEA3CC10FEA10FEF8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
Manifest number:          B9
Signing time:             Thu 21 Nov 2024 22:11:43 +0000
Manifest this update:     Thu 21 Nov 2024 22:06:43 +0000
Manifest next update:     Mon 25 Nov 2024 04:27:43 +0000
Files and hashes:         1: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: hJMRzuFAspptn4AlzH4LAwOhzmHjNIsN+aWqgtRAR7g=)
                          2: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: Vy1WXfRVoaco1i9g0rlgCBYNCSdI50Y1sxWO96U5Kog=)
                          3: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: OtOEM9hN2sUtg5PPyRh1Q7mjJEcZiGpLADwE5Kv9CoM=)
                          4: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: i9hzv6Lh5XhsF06igSnWbdzwnT3e+2hyiqqtyUqGr60=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl
                          rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:24:22:a8:88:30:e3:a4:05:71:aa:7a:ea:3c:c1:0f:ea:10:fe:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E
        Validity
            Not Before: Nov 21 22:06:43 2024 GMT
            Not After : Nov 25 04:27:43 2024 GMT
        Subject: CN=DCC25659F63E584B03132C45AF7891B98875045B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:22:b1:b9:7b:fe:e6:31:a4:ae:2d:6f:59:79:
                    83:2d:44:51:92:95:20:f2:78:51:7d:79:5c:f1:d7:
                    1d:9c:23:99:1b:0b:d2:05:b3:df:e5:23:c0:57:90:
                    21:0b:fa:0f:e1:5f:83:c1:5c:b1:29:e1:59:37:b4:
                    ab:31:e9:ac:82:4c:f9:66:4d:07:28:bd:21:07:9f:
                    22:89:51:62:53:20:46:56:6d:14:e0:32:fc:07:be:
                    2e:1b:aa:86:14:5c:52:04:f3:cc:85:67:85:ea:cc:
                    76:b1:46:d1:d1:c8:6d:7a:19:a6:1d:b2:a5:c8:e6:
                    b7:0f:0c:2b:78:cc:ef:20:ae:a9:57:ca:53:d5:98:
                    02:99:55:4d:95:24:b7:22:6a:e0:19:ba:8e:23:e9:
                    2c:e1:9e:29:ac:5b:a5:20:7b:da:5b:1d:78:2b:1a:
                    b9:16:6c:b1:6e:06:9b:16:bc:30:93:69:29:e1:e6:
                    75:cb:8e:00:cc:46:8b:d1:3c:98:0d:5a:23:2c:fe:
                    36:39:0e:f7:ae:5e:55:b3:3b:68:5f:7a:cd:2e:81:
                    18:a1:09:1c:48:82:91:7e:c1:26:38:a3:18:54:04:
                    bb:bc:70:e0:43:72:95:78:13:13:7f:f6:93:b4:e8:
                    d0:18:5f:fe:08:a2:2c:e9:75:c3:00:3f:00:b4:6d:
                    9d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C2:56:59:F6:3E:58:4B:03:13:2C:45:AF:78:91:B9:88:75:04:5B
            X509v3 Authority Key Identifier:
                keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3c:d9:5c:64:6c:ce:fb:67:c6:46:a9:34:8e:ae:2e:1e:a4:
         95:fe:7c:57:d1:ae:9f:aa:1c:ef:13:4a:be:a0:ea:af:87:bf:
         ab:b2:2c:fd:5d:2b:ac:36:ec:06:aa:e0:f6:e0:a7:92:70:93:
         c2:7f:6a:73:c9:91:60:0f:9a:e2:2c:6a:43:87:7c:9b:7e:3b:
         51:1a:73:78:21:a3:d4:69:93:3a:29:61:33:15:e7:3a:18:7a:
         7a:5d:e6:b0:19:98:30:62:a6:9f:11:7c:c0:a9:d5:98:28:c9:
         98:37:10:25:98:09:95:64:8c:1a:af:ec:7c:61:02:85:39:a7:
         8c:c7:b7:fa:7f:e3:b3:61:f7:38:5b:1d:4f:28:c1:9b:45:f3:
         c9:53:88:4d:69:ac:a9:6d:c1:dd:d6:e0:70:f4:74:d2:e1:7e:
         87:5b:2e:8e:6c:41:5a:da:12:60:50:a1:6c:15:03:b6:27:c4:
         43:4a:9a:c7:bf:2d:0a:5f:31:28:80:f5:cb:63:7d:44:47:db:
         48:2e:76:d1:54:42:e1:01:64:6d:b2:11:b2:53:20:d8:8d:8b:
         c1:6e:40:d9:a4:61:0e:65:35:ab:9a:c9:1d:3c:c5:a7:42:79:
         59:e0:6c:59:92:59:56:35:94:f1:87:44:ab:8c:24:6e:60:d3:
         d6:ad:3e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org