Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
File:                     284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft (raw, json)
Hash identifier:          FxYPwgLAePV9VR/T1cBzA54Zjux934ibp6W18gNxHPw=
Subject key identifier:   DF:E2:AA:DD:18:C2:3D:F0:3C:58:80:6D:6A:53:35:82:CC:44:CD:80
Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA
Certificate issuer:       /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
Certificate serial:       5687C34F1F171869F5DEDF95FA413484FBA17F2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
Manifest number:          01CC
Signing time:             Fri 22 Nov 2024 10:11:47 +0000
Manifest this update:     Fri 22 Nov 2024 10:06:47 +0000
Manifest next update:     Mon 25 Nov 2024 18:33:47 +0000
Files and hashes:         1: 323430343a356434303a313a3a2f34382d3438203d3e20313338353938.roa (hash: XDEGp8lWijrl4t6mUpWpRG/6LTKurJQjMuROjmEiZ6Q=)
                          2: 323430343a356434303a333a3a2f34382d3438203d3e20313338353938.roa (hash: oldOLTzbZdnxuKb1GFFk/KT+RuyBaJzPj+vjKkTBhf4=)
                          3: 284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl (hash: Hgg+ztXA3R8bHronpwGZM0A8WVOiNMrBhD9lbgb7Nh4=)
                          4: 323430343a356434303a363a3a2f34382d3438203d3e20313338353938.roa (hash: N4ska4jT8GyC3wJ6UeRa470yDVKPeDBNuPa3uDDzMig=)
                          5: 323430343a356434303a393a3a2f34382d3438203d3e20313338353938.roa (hash: Y7lmNtoprlRJly9WgGsWn6qQ0ew2imeiy62+KuKF1lw=)
                          6: 3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (hash: G4QnXReaEgQqWo3299blKd818TsAy9ZESDNBdTmiSCI=)
                          7: 3130332e3133342e34382e302f32342d3234203d3e20313338353938.roa (hash: Aybn7R6DKZgLNsyzOnIC5OzvxsaaE/Jkwzj5+uIo0ZA=)
                          8: 3130332e3133342e35312e302f32342d3234203d3e20313338353938.roa (hash: 01GhR87m6uISdoaVmw5/Uom42dMtA6W3HSfDP759MWE=)
                          9: 323430343a356434303a343a3a2f34382d3438203d3e20313338353938.roa (hash: xtD4NorzIKyUJeEfNgVo0ESCO/9jj+bjHUWQd0PWTDA=)
                          10: 323430343a356434303a3a2f34382d3438203d3e20313338353938.roa (hash: UK4y8U5FoaH31XYzSF1KACuxC0U7L5WzRWdPY69Zp1w=)
                          11: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (hash: Q3P+SORmjSYUFWgFOxdx+KlxGjY858iSOT5wN8UZTKY=)
                          12: 323430343a356434303a353a3a2f34382d3438203d3e20313338353938.roa (hash: GJY1uBn3hVszaq39dLLaSk2stRsKkoqme7WPjFA16js=)
                          13: 323430343a356434303a373a3a2f34382d3438203d3e20313338353938.roa (hash: DFRzEWprrOiMSjx8SdHUt/uuD1K0oSG6/Rb0USOR/B8=)
                          14: 323430343a356434303a383a3a2f34382d3438203d3e20313338353938.roa (hash: BLOc4k1k/6kYVTD4owYMmHx5OOK/8Y7LoDi9RBV5ZS8=)
                          15: 323430343a356434303a323a3a2f34382d3438203d3e20313338353938.roa (hash: TGXfQuq1RmcYG5/rcQ5+kCiPWG3n75g2FUN2iHTafgE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl
                          rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:87:c3:4f:1f:17:18:69:f5:de:df:95:fa:41:34:84:fb:a1:7f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
        Validity
            Not Before: Nov 22 10:06:47 2024 GMT
            Not After : Nov 25 18:33:47 2024 GMT
        Subject: CN=DFE2AADD18C23DF03C58806D6A533582CC44CD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:20:63:1c:70:b1:35:00:d2:30:72:81:ec:
                    33:88:b3:61:c1:f9:7b:6a:3a:ed:51:cd:7e:8d:b9:
                    a2:04:f1:03:df:3e:3c:19:d9:2c:c2:9f:f8:2a:24:
                    da:7b:98:51:96:cd:c4:fd:1f:22:fa:4b:95:c2:0a:
                    01:2c:9a:d5:82:3d:66:ec:22:04:3d:c0:d3:14:54:
                    d5:99:fe:66:90:d2:63:bf:71:dd:fc:a3:5a:70:3e:
                    15:1a:ee:97:20:23:b4:b0:c1:83:48:8f:34:18:1e:
                    60:51:b3:0b:4c:d1:e3:00:39:f2:52:74:d5:fe:0a:
                    22:cd:c5:37:51:97:d0:40:4d:5a:77:05:6d:7b:ba:
                    2a:cd:44:4a:d1:1a:54:65:7b:cc:48:14:40:b9:bb:
                    9c:04:6c:e9:6b:13:23:9d:fb:04:5e:26:20:f7:d4:
                    18:08:84:c8:c7:c9:fe:ce:15:49:a9:61:ba:21:39:
                    2c:6e:c8:6d:ef:4d:7e:62:cc:1b:b6:cf:b1:9b:f9:
                    e2:b6:ec:b2:a4:3a:38:9b:65:e1:0c:44:49:89:62:
                    9d:10:0c:c8:5c:2a:e1:e8:83:34:0f:6f:1d:bc:23:
                    0b:c8:9f:de:e9:46:8b:59:cc:82:0d:78:f7:f3:dc:
                    f7:00:3b:a6:b3:7e:59:08:99:c7:d8:5e:ca:14:29:
                    22:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E2:AA:DD:18:C2:3D:F0:3C:58:80:6D:6A:53:35:82:CC:44:CD:80
            X509v3 Authority Key Identifier:
                keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:77:50:83:1b:6d:2f:7f:03:68:29:20:c9:e2:2b:49:45:8b:
         87:97:60:ff:bb:90:7c:75:18:05:f5:c7:2e:24:29:d0:3e:23:
         9b:34:ec:22:16:be:d6:e9:f1:46:fa:16:38:d9:ce:b2:b7:23:
         6b:c8:e1:d5:10:2e:80:f7:c3:a4:01:fc:ab:64:13:7d:9a:48:
         2b:bc:e5:a5:57:20:6c:bb:96:7a:db:2a:55:4a:d7:66:50:65:
         12:c1:ab:a3:98:a3:ae:d7:4d:64:f6:8f:9a:d9:2d:45:0e:8b:
         8a:a3:d9:41:40:bf:0a:02:e1:01:d2:36:cb:f8:d6:53:2b:09:
         aa:7b:d0:05:88:73:5b:f8:35:43:cc:03:b3:98:15:07:34:0f:
         9d:41:1e:a4:fb:09:f2:85:fa:ac:4f:95:f2:c3:c5:d2:1e:58:
         59:f2:f0:63:b0:9c:1a:af:ce:99:0c:4b:a5:67:83:02:e6:b0:
         9c:76:69:35:78:c3:3d:81:07:fb:ab:39:ad:b5:a9:60:b9:34:
         7b:4a:0d:3e:7c:46:09:16:2b:56:6b:d2:f4:04:65:0f:2b:d7:
         fd:ce:e9:e9:83:f2:29:6a:8b:6f:e2:7d:af:9f:88:72:d9:10:
         a6:5e:c8:56:84:3d:22:60:d8:39:69:5e:a7:b9:36:0e:b9:60:
         41:1a:c7:04
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVofDTx8XGGn13t+V+kE0hPuhfy0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0
NDRERjJFQTAeFw0yNDExMjIxMDA2NDdaFw0yNDExMjUxODMzNDdaMDMxMTAvBgNV
BAMTKERGRTJBQUREMThDMjNERjAzQzU4ODA2RDZBNTMzNTgyQ0M0NENEODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmCBjHHCxNQDSMHKB7DOIs2HB
+XtqOu1RzX6NuaIE8QPfPjwZ2SzCn/gqJNp7mFGWzcT9HyL6S5XCCgEsmtWCPWbs
IgQ9wNMUVNWZ/maQ0mO/cd38o1pwPhUa7pcgI7SwwYNIjzQYHmBRswtM0eMAOfJS
dNX+CiLNxTdRl9BATVp3BW17uirNRErRGlRle8xIFEC5u5wEbOlrEyOd+wReJiD3
1BgIhMjHyf7OFUmpYbohOSxuyG3vTX5izBu2z7Gb+eK27LKkOjibZeEMREmJYp0Q
DMhcKuHogzQPbx28IwvIn97pRotZzIINePfz3PcAO6azflkImcfYXsoUKSJ7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3+Kq3RjCPfA8WIBtalM1gsxEzYAwHwYDVR0j
BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz
RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE
RjJFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4NWM2YjktMzRmOS00YTg1LTlj
ZWEtYzE2ZTk4YThiNWUwLzAvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVG
QTY0NDRERjJFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHR3UIMbbS9/A2gpIMniK0lFi4eXYP+7kHx1
GAX1xy4kKdA+I5s07CIWvtbp8Ub6FjjZzrK3I2vI4dUQLoD3w6QB/KtkE32aSCu8
5aVXIGy7lnrbKlVK12ZQZRLBq6OYo67XTWT2j5rZLUUOi4qj2UFAvwoC4QHSNsv4
1lMrCap70AWIc1v4NUPMA7OYFQc0D51BHqT7CfKF+qxPlfLDxdIeWFny8GOwnBqv
zpkMS6VngwLmsJx2aTV4wz2BB/urOa21qWC5NHtKDT58RgkWK1Zr0vQEZQ8r1/3O
6emD8ilqi2/ifa+fiHLZEKZeyFaEPSJg2DlpXqe5Ng65YEEaxwQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org