Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
File:                     38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json)
Hash identifier:          HVyRpVZQ5i94/SMWF7W3PZ5wpZB0akqI0QQ+WJIPrS0=
Subject key identifier:   DB:9B:A9:8B:B8:EE:2C:8F:35:E1:0A:12:C6:E0:CD:49:FF:6F:9D:AC
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       086EEB057DA111C4F9C3FFF85E0AD4CF343C20F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
Manifest number:          FE
Signing time:             Sun 24 Nov 2024 16:30:59 +0000
Manifest this update:     Sun 24 Nov 2024 16:25:59 +0000
Manifest next update:     Thu 28 Nov 2024 00:20:59 +0000
Files and hashes:         1: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: Ed7pH/ueYfl2Ip2315Md9wHfR5SEM+o1hAaq3jrP0/w=)
                          2: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: PNswnDB59dy0WIKijBxTcNq2tOLHRD7Xyj3sC7yk3sw=)
                          3: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: y4CphY2Eja4IBmaWSAMBzGabm9Rl4RkxNrghgS2laKY=)
                          4: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: StKm/EBjyCtOBBqyOJASJhUXfaj5Ik+i6XQwhkj3F9Y=)
                          5: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: GkqP1tBJ/9agxHYe5ncZgwuG8VITyEYL/kjDUwj5Bhk=)
                          6: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: iTOGXrpbMeNc55/3DoD+VDgZo5uJSgIixPQ4Fa5DV8c=)
                          7: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: Aee1Gbvr0vnI5GFSyf+LnZ8/t7rv6DOLKw6Sm7B4cvg=)
                          8: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: q1fdKnTRqStAT3YE15vq79E+QpTxFHgvWmiz6yZ6fcY=)
                          9: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: mY9nGHKi7YFpk7+fwd7/qH+h6ARI4z2zuLTwZFPNXjI=)
                          10: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: rMCEoNf1wNtL9Xq0GiwFXvxNeoAWHkOBKr6mSPuhUTo=)
                          11: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: 8F7fiU7vGe9Vc51zIc4bJZmRh9Cp4cIynPTyrqXxjiA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
                          rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6e:eb:05:7d:a1:11:c4:f9:c3:ff:f8:5e:0a:d4:cf:34:3c:20:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: Nov 24 16:25:59 2024 GMT
            Not After : Nov 28 00:20:59 2024 GMT
        Subject: CN=DB9BA98BB8EE2C8F35E10A12C6E0CD49FF6F9DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:a8:2f:ac:ff:8b:b0:f5:d2:c5:eb:8b:4b:
                    f2:4c:2f:57:c7:c4:ac:c6:96:d2:21:62:e7:58:d8:
                    98:30:fa:35:dd:5c:2a:4a:f2:f3:73:ef:55:68:62:
                    f8:df:99:88:f4:53:ae:b5:7c:02:62:da:a5:66:79:
                    ed:14:1c:79:a0:71:7c:1a:14:9c:25:81:5d:98:ce:
                    70:46:54:f9:13:68:a5:d0:8b:b8:ae:77:b9:8a:9c:
                    58:a2:54:2f:48:9f:4a:fd:78:f8:20:6d:87:99:d0:
                    f5:2f:9f:77:d5:dd:8c:49:53:6d:7e:92:15:6b:e7:
                    8b:6e:80:2f:39:1d:56:c7:18:09:1a:33:a2:ce:4b:
                    3e:cf:11:e2:23:e8:92:11:27:26:1c:6e:4a:0f:52:
                    c2:c3:67:48:0d:6b:3f:fa:9b:9d:40:ec:14:e3:04:
                    be:68:6d:1c:99:d3:82:f8:e6:34:db:c9:97:7e:01:
                    06:71:0a:7b:e0:48:d0:b3:d4:fb:79:4e:bc:6e:a8:
                    f0:e9:6d:af:c3:1c:e0:2c:94:23:2d:26:18:7f:09:
                    cd:84:c7:4a:d3:aa:bb:15:bc:5e:51:5b:4c:69:e3:
                    7d:05:73:54:85:57:5d:71:5c:87:a4:c1:50:65:fa:
                    b5:80:15:a1:b7:87:1e:39:13:32:a3:11:bd:b3:7f:
                    06:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9B:A9:8B:B8:EE:2C:8F:35:E1:0A:12:C6:E0:CD:49:FF:6F:9D:AC
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:38:fd:3c:e7:6f:85:ec:ff:08:02:1b:5f:82:13:4f:a8:86:
         cf:14:9e:fb:11:f3:13:e7:da:1c:c1:9c:b4:be:a2:12:36:7f:
         b8:6c:47:48:b4:f3:b6:73:44:a6:a3:23:46:35:6e:19:47:4b:
         76:20:8f:d5:09:3e:ea:94:bd:6a:aa:3c:76:47:59:ce:e8:62:
         71:5a:db:f2:da:89:97:b4:a7:1b:53:74:13:35:26:20:41:71:
         e3:51:41:86:d9:8b:9f:61:ec:a3:ac:10:53:ce:81:73:29:df:
         bb:8e:0c:8a:e2:30:25:81:59:15:78:98:ca:43:8e:71:4f:dc:
         cb:35:1c:af:4c:bd:7a:55:74:2f:14:b3:d3:8b:60:e5:ca:d3:
         e7:32:d2:30:11:dc:10:ab:e8:76:7a:b8:e6:bc:2d:14:78:4b:
         0b:15:e4:67:ca:14:3c:bf:b7:ee:84:02:4d:a1:05:b1:8a:f4:
         88:d5:d1:c7:ae:27:68:66:ab:8f:80:47:9d:46:24:1b:c7:7b:
         fa:96:60:7a:b0:71:85:b9:91:95:aa:10:26:3f:7a:81:88:0c:
         25:5e:57:94:45:4c:c8:6d:3e:c8:92:d0:6a:59:0a:85:00:35:
         f7:0f:0c:fe:b4:fe:0f:6f:c3:d8:91:02:74:b5:da:6d:24:7e:
         6c:a7:81:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org