Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft
File:                     95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json)
Hash identifier:          A8SEvmKmyrmHaKCKx+H9YSPR2vEKGunN36A9OdbC2O0=
Subject key identifier:   CC:45:85:DF:61:A5:56:DC:E1:83:C3:A1:8C:18:1F:2F:E5:57:94:0C
Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3
Certificate issuer:       /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3
Certificate serial:       1E1E5EA75D4B0196C494AA950EB09F989E2CF2A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft
Manifest number:          0481
Signing time:             Wed 20 Nov 2024 12:02:19 +0000
Manifest this update:     Wed 20 Nov 2024 11:57:19 +0000
Manifest next update:     Sat 23 Nov 2024 17:17:19 +0000
Files and hashes:         1: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: 13BZZGez00+LUIyTx+ZwpCt/BEy8rtR8zU/43gX10+4=)
                          2: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: bRRSscYjeY2YxaSN5983EHi4JM8B0mDZlHR23US7qhc=)
                          3: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: XLazE5Vn7z334jOwYoK8rFCOURJrA8ecY+QUwxwWDNY=)
                          4: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: mbd96T1qjcx6vOLRtnO9TtSCsUkd+wp8GLRG0dz5cHQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl
                          rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1e:5e:a7:5d:4b:01:96:c4:94:aa:95:0e:b0:9f:98:9e:2c:f2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3
        Validity
            Not Before: Nov 20 11:57:19 2024 GMT
            Not After : Nov 23 17:17:19 2024 GMT
        Subject: CN=CC4585DF61A556DCE183C3A18C181F2FE557940C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6a:30:a5:b5:a2:eb:5a:26:6a:4a:10:f3:ae:
                    e1:3c:f0:67:f2:14:af:b9:d9:9c:b9:05:30:3e:06:
                    a5:5d:05:ca:05:d8:87:33:9f:da:ae:b4:f1:58:43:
                    e6:83:d8:4b:18:4f:49:5b:a9:e0:54:ce:e4:b2:db:
                    a5:d1:45:ce:37:e6:1f:dd:52:f1:85:f6:fe:39:48:
                    65:61:5a:b4:e1:b0:66:f1:39:1c:7c:cc:73:5e:92:
                    00:fe:b1:20:9a:d8:6b:f2:10:ec:17:bf:d2:ca:f1:
                    d4:5b:8d:9b:aa:dd:3c:ad:95:5f:0c:c3:86:8b:36:
                    5c:0d:81:00:9c:85:db:7b:35:9a:46:0a:0f:52:99:
                    44:1b:22:97:59:19:40:a4:44:32:6b:d7:16:59:e5:
                    54:d4:a4:c0:12:15:d5:dc:b4:e3:4b:a7:f2:ab:80:
                    84:cc:a3:9c:3d:93:cb:7c:5e:05:d2:11:94:18:d8:
                    18:a8:51:60:fa:f8:31:da:cb:49:09:c0:67:0c:10:
                    1c:21:a0:12:b6:88:fa:46:12:d1:a0:d1:c6:6a:23:
                    dd:d8:1e:c1:d0:15:7a:99:37:b1:dd:42:ce:d8:06:
                    a8:fd:5b:40:53:4e:65:7f:80:44:d3:1e:a8:3a:07:
                    a9:1d:1f:bc:9b:6f:77:e8:6b:b6:4d:4c:e2:71:5f:
                    cc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:45:85:DF:61:A5:56:DC:E1:83:C3:A1:8C:18:1F:2F:E5:57:94:0C
            X509v3 Authority Key Identifier:
                keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:69:24:5a:78:3a:68:42:bf:89:eb:4f:77:ef:09:ab:82:4b:
         88:51:15:fe:e7:9f:6a:0c:9e:bf:d5:95:b0:4d:b2:aa:a4:98:
         8a:c0:00:df:5c:25:56:bf:e6:49:1c:39:22:ba:b2:c3:a8:7b:
         f0:85:5a:f3:2a:76:a8:98:d8:e5:e2:d9:d5:56:6c:44:19:8b:
         9e:97:17:fe:50:49:af:4c:df:fe:7a:5f:54:ef:44:d1:e8:56:
         1c:81:43:c1:b8:33:50:96:55:82:50:80:92:41:52:3e:ce:a7:
         53:19:c6:8f:67:80:5a:27:06:7f:c7:c6:1d:f0:9d:78:51:9e:
         bb:25:36:eb:e0:7b:50:b9:04:e1:54:ce:e5:51:a2:e8:e4:89:
         40:fa:73:5a:2c:06:82:a1:f5:36:7e:12:c5:74:3a:88:8f:a2:
         80:c1:ef:41:c5:b2:42:67:fe:fd:82:84:d9:8b:d4:3c:17:a8:
         64:1b:63:15:63:78:5c:db:ed:95:71:05:6e:81:f6:4a:9e:90:
         6a:40:64:60:77:0c:29:48:a2:f5:a5:35:5f:a3:a7:09:f0:9e:
         b8:b0:c7:60:f9:86:9a:2c:51:12:1c:03:ed:2a:cd:cb:d8:42:
         f6:f8:6b:df:cb:a5:18:85:40:97:4b:12:46:45:83:22:54:23:
         fe:92:63:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:33 2024 by rpki-client on console-ams.rpki-client.org