Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft
File:                     1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json)
Hash identifier:          DQHfQouqMIN5emlumz/Snm9ysI9SROxSMq81nTuH2RI=
Subject key identifier:   DD:B5:3A:75:80:92:3D:65:0D:67:E0:A5:10:DD:8D:79:1D:3E:BA:2A
Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B
Certificate issuer:       /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B
Certificate serial:       02253478CDBC0E4A7ABB1052A58BB5944EFE4F86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft
Manifest number:          42
Signing time:             Thu 26 Sep 2024 20:22:16 +0000
Manifest this update:     Thu 26 Sep 2024 20:17:16 +0000
Manifest next update:     Mon 30 Sep 2024 08:18:16 +0000
Files and hashes:         1: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: g6SAQJJHWXzFVQgYOk15xgdtJmREERi+slGLqoyw75U=)
                          2: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: 3jA9f0ppafr8vZBbgunoMJIT5jw/2ee+NqURzJmhs3E=)
                          3: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: v5lBmLNfumKb0/F7VkrkXYTUXNtGWxlmjRD6SGE0KOA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl
                          rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Sep 2024 23:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:25:34:78:cd:bc:0e:4a:7a:bb:10:52:a5:8b:b5:94:4e:fe:4f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B
        Validity
            Not Before: Sep 26 20:17:16 2024 GMT
            Not After : Sep 30 08:18:16 2024 GMT
        Subject: CN=DDB53A7580923D650D67E0A510DD8D791D3EBA2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:9d:a1:9a:96:ad:77:7a:e1:0d:d6:0f:c3:
                    85:ae:72:f3:16:f3:f1:3a:c6:17:88:ca:7e:fa:dd:
                    80:d2:f5:c0:26:90:81:c8:9f:6c:82:09:95:7c:f7:
                    40:37:02:1e:1f:c9:d8:a5:01:35:7e:88:c8:d4:74:
                    e1:55:38:3a:7c:d6:e1:ea:b0:1f:25:10:47:74:f4:
                    86:47:81:50:19:8d:8c:57:5b:08:eb:ca:26:25:d5:
                    c1:df:17:75:51:ff:30:9e:01:f7:b3:f5:47:04:b4:
                    0a:7f:e8:e8:eb:0b:3a:ca:82:31:5b:a8:0a:3e:fb:
                    c5:30:b1:69:da:15:56:a5:c4:c2:d2:1b:f6:22:77:
                    99:de:f7:05:fa:10:7e:41:30:a3:49:a2:20:30:3b:
                    73:e0:bf:b2:84:8b:4d:0d:a7:f2:01:d6:a6:a6:05:
                    92:e3:4f:2a:d7:70:4a:c1:ec:1b:b4:22:b5:38:29:
                    57:f3:fe:68:2e:52:8a:98:ac:e7:6b:60:d9:6e:e0:
                    1a:d5:99:69:14:42:3c:cb:a2:af:d7:47:8e:7f:6c:
                    39:25:e8:74:7e:d4:4c:b2:42:06:09:0d:a3:e8:69:
                    63:f7:d0:e7:13:ca:cb:78:de:f1:4b:32:1a:66:47:
                    b8:78:d5:01:cc:fe:9e:e7:7d:aa:8c:ec:c4:6d:4f:
                    c3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B5:3A:75:80:92:3D:65:0D:67:E0:A5:10:DD:8D:79:1D:3E:BA:2A
            X509v3 Authority Key Identifier:
                keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:36:42:51:27:7e:25:9d:d6:af:8b:2a:8e:35:cb:2e:47:44:
         75:05:be:d7:a2:a6:bd:4c:f1:05:fc:aa:07:d8:3c:e2:da:ce:
         8e:6a:4a:c6:b9:19:31:c5:da:1a:7e:14:9e:7d:ff:e2:5b:a0:
         47:19:c0:c2:e5:8d:48:7e:de:ab:5e:88:43:71:bf:67:28:26:
         2e:0e:ad:eb:46:ce:48:60:4d:28:79:dd:01:79:07:cf:c7:45:
         10:8f:0c:7a:92:09:1e:63:0f:79:be:37:4e:fc:b2:44:13:86:
         e7:bf:0c:ed:4f:7d:2e:8f:66:03:17:ce:90:0a:c0:04:de:d9:
         78:64:c9:b4:fd:19:0a:12:ac:c5:4c:17:4b:42:92:56:90:7a:
         d8:2e:52:4d:ae:31:d9:46:9d:09:0d:d6:a1:bf:a4:37:6a:63:
         b5:1d:3a:22:3d:a0:33:6e:4f:37:97:b9:15:11:3c:25:b3:9a:
         a4:ad:06:37:e5:be:14:5c:12:39:3c:43:01:96:a6:4f:72:28:
         b7:15:bc:84:ee:e0:15:43:87:9a:da:fa:41:eb:20:2e:9a:b2:
         9a:fe:a9:ad:1e:e4:7f:47:d7:8d:6e:f1:54:9f:f0:c0:78:69:
         f6:9f:f5:80:c5:29:d5:f3:43:3b:93:8a:16:ea:c4:32:33:f0:
         a3:d5:ef:b9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAiU0eM28Dkp6uxBSpYu1lE7+T4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF
OEU4M0E3QjAeFw0yNDA5MjYyMDE3MTZaFw0yNDA5MzAwODE4MTZaMDMxMTAvBgNV
BAMTKEREQjUzQTc1ODA5MjNENjUwRDY3RTBBNTEwREQ4RDc5MUQzRUJBMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCed52hmpatd3rhDdYPw4WucvMW
8/E6xheIyn763YDS9cAmkIHIn2yCCZV890A3Ah4fydilATV+iMjUdOFVODp81uHq
sB8lEEd09IZHgVAZjYxXWwjryiYl1cHfF3VR/zCeAfez9UcEtAp/6OjrCzrKgjFb
qAo++8UwsWnaFValxMLSG/Yid5ne9wX6EH5BMKNJoiAwO3Pgv7KEi00Np/IB1qam
BZLjTyrXcErB7Bu0IrU4KVfz/mguUoqYrOdrYNlu4BrVmWkUQjzLoq/XR45/bDkl
6HR+1EyyQgYJDaPoaWP30OcTyst43vFLMhpmR7h41QHM/p7nfaqM7MRtT8OPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3bU6dYCSPWUNZ+ClEN2NeR0+uiowHwYDVR0j
BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1
QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4
M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj
MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy
N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALw2QlEnfiWd1q+LKo41yy5HRHUFvteipr1M
8QX8qgfYPOLazo5qSsa5GTHF2hp+FJ59/+JboEcZwMLljUh+3qteiENxv2coJi4O
retGzkhgTSh53QF5B8/HRRCPDHqSCR5jD3m+N078skQThue/DO1PfS6PZgMXzpAK
wATe2XhkybT9GQoSrMVMF0tCklaQetguUk2uMdlGnQkN1qG/pDdqY7UdOiI9oDNu
TzeXuRURPCWzmqStBjflvhRcEjk8QwGWpk9yKLcVvITu4BVDh5ra+kHrIC6aspr+
qa0e5H9H141u8VSf8MB4afaf9YDFKdXzQzuTihbqxDIz8KPV77k=
-----END CERTIFICATE-----
Generated at Thu Sep 26 21:29:54 2024 by rpki-client on console-fra.rpki-client.org