Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
File:                     2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json)
Hash identifier:          BpSLweZJFXUXoy6s5f+IwS6f5Fzk1FNSGdA8dn/KfAQ=
Subject key identifier:   3E:DD:D4:BA:B2:E8:EC:74:F2:BB:4C:89:3F:45:A8:9C:6C:60:CE:90
Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA
Certificate issuer:       /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA
Certificate serial:       678A698A336D2304EA6131C7AF65C524DBCAF119
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
Manifest number:          88
Signing time:             Mon 25 Nov 2024 15:31:26 +0000
Manifest this update:     Mon 25 Nov 2024 15:26:26 +0000
Manifest next update:     Thu 28 Nov 2024 21:07:26 +0000
Files and hashes:         1: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: gSF5iRVsd1tsl+Yoo9EVRaRpliqh6+X1yJJiKLsVes4=)
                          2: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: PSAU8f5G32aYzho3/YC/zPNtnDnnChT5ccPutoOzr3I=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl
                          rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 21:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8a:69:8a:33:6d:23:04:ea:61:31:c7:af:65:c5:24:db:ca:f1:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA
        Validity
            Not Before: Nov 25 15:26:26 2024 GMT
            Not After : Nov 28 21:07:26 2024 GMT
        Subject: CN=3EDDD4BAB2E8EC74F2BB4C893F45A89C6C60CE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:5e:68:88:48:9f:c2:9f:4e:59:1e:b0:c4:
                    53:c9:cb:ef:61:1f:10:72:a6:6f:c6:cc:f5:3b:86:
                    a5:36:8c:ef:4d:91:83:22:cb:c2:32:e6:1b:c7:b7:
                    35:fa:85:4e:52:99:81:e9:f8:a8:05:72:cd:4d:8a:
                    3e:b1:cd:4e:77:21:93:2f:c2:b9:62:82:c8:a4:7a:
                    f0:39:cc:61:eb:d4:3a:b7:2f:e8:3a:53:ec:8f:f1:
                    bb:b9:97:8e:7b:68:b7:c7:75:8a:b9:a8:5b:de:3b:
                    98:ff:76:c6:83:4d:58:cd:b4:3b:a8:c2:91:6a:5f:
                    e9:39:e4:2f:66:a2:4a:e7:75:f0:07:17:0b:c3:a4:
                    b8:46:65:6b:f2:10:03:5e:7a:42:84:08:eb:9d:d2:
                    6d:33:e6:d1:8d:b2:71:ca:7d:7b:1f:e5:6b:56:19:
                    c2:66:86:a6:1d:e0:a7:0e:0f:f1:ae:a3:56:26:e9:
                    d4:d0:06:8d:b1:46:2d:a9:74:09:f5:9c:72:9c:6d:
                    0f:06:63:7d:dc:05:87:12:86:5c:44:e7:ab:f7:83:
                    f9:84:f4:33:65:38:d0:64:8a:b0:f7:cf:d8:f6:02:
                    b6:1f:c8:6d:84:fc:7a:10:43:9d:f3:f5:c4:a5:0c:
                    11:4d:67:68:d5:d9:73:22:30:21:cf:79:3e:e4:ff:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DD:D4:BA:B2:E8:EC:74:F2:BB:4C:89:3F:45:A8:9C:6C:60:CE:90
            X509v3 Authority Key Identifier:
                keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:34:3b:4a:58:0c:b7:13:a5:7a:9e:34:6d:57:c9:c1:15:21:
         99:38:dc:5b:1f:35:e9:11:1b:82:1a:7c:76:ba:b9:06:74:16:
         c4:69:e4:7b:dc:7e:8f:d3:4c:95:58:f2:a2:be:6f:d2:7d:b0:
         2a:21:df:4c:10:4f:b5:e7:5b:a8:b7:0b:f2:a7:ba:7f:53:c9:
         18:c4:ea:f4:8a:a2:5a:23:20:fa:a5:6e:b3:8e:e3:ac:fb:95:
         df:66:e5:6f:40:db:2b:47:e2:1c:91:be:93:60:ac:b2:b0:8c:
         f5:ed:b0:fa:c9:d9:5b:50:9b:ce:39:3f:ed:46:55:aa:9a:1e:
         9f:0a:33:21:b5:78:71:29:d8:45:66:90:2a:f6:84:b8:23:c6:
         4f:1e:2a:3b:f1:14:d3:aa:a5:c2:2b:5c:40:17:18:1f:6c:3a:
         ed:e6:12:97:11:fb:de:05:80:4d:f8:b8:0f:b9:6d:59:55:53:
         df:35:e8:0a:d3:d0:0d:47:a3:a7:1b:2a:ef:60:d0:9a:19:41:
         1a:44:9c:0f:21:bb:57:75:8b:13:c0:33:4b:41:8c:4d:06:73:
         7d:16:73:90:7f:26:df:68:b6:08:55:78:b0:e4:64:3c:c4:1e:
         3c:5f:f2:67:b4:c4:8e:e8:8b:88:f8:9f:63:f0:f3:62:4f:33:
         ac:b7:c2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:29 2024 by rpki-client on console-fra.rpki-client.org