Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft
File:                     2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft (raw, json)
Hash identifier:          OxQZMVm2n5Wza9M9f3Iae6K8eLSG05npW8j8IhipHLg=
Subject key identifier:   BE:78:D4:65:C8:3D:25:BE:A3:26:16:54:4A:22:24:05:9C:AD:F3:DA
Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9
Certificate issuer:       /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9
Certificate serial:       423778A7B10626F5AD7556CBDFBF5FD3DB65E550
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft
Manifest number:          0414
Signing time:             Thu 21 Nov 2024 22:41:10 +0000
Manifest this update:     Thu 21 Nov 2024 22:36:10 +0000
Manifest next update:     Mon 25 Nov 2024 03:31:10 +0000
Files and hashes:         1: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: cbP7WHAXyG0TWfAW6rQSYBQEqYCmWK7UJ25vzFsky7g=)
                          2: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl (hash: P7CLBHkafHQYKtfwhrHzYumjg6bs7KOiqfTIN9ohnnA=)
                          3: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: 3JdVRKPzu9yTBFIl95w9qsQ9IgBVgcqYpN67jfM6hwA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl
                          rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:37:78:a7:b1:06:26:f5:ad:75:56:cb:df:bf:5f:d3:db:65:e5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9
        Validity
            Not Before: Nov 21 22:36:10 2024 GMT
            Not After : Nov 25 03:31:10 2024 GMT
        Subject: CN=BE78D465C83D25BEA32616544A2224059CADF3DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:74:c5:d2:db:19:5a:b6:0b:e1:68:bc:80:
                    03:d9:30:86:d1:56:bb:b9:e4:40:e7:c1:d6:76:71:
                    c7:d7:30:95:f4:a9:6d:e8:ce:45:b6:ef:4c:7c:7f:
                    de:c1:f1:1f:13:3a:08:32:84:fc:44:88:dd:0a:73:
                    a1:fe:39:5d:0d:92:b2:ad:f1:9c:4e:dd:63:70:05:
                    b0:a3:c3:a5:9c:7a:8f:98:3d:92:12:8f:d2:12:8b:
                    a2:71:83:55:0a:a9:68:d0:0f:e6:29:fc:39:d5:d1:
                    6e:8b:ad:8b:d6:bd:31:99:de:b6:1f:37:27:85:04:
                    01:df:e8:25:f5:99:cf:6c:04:76:45:6b:30:82:ab:
                    35:2c:61:75:72:93:20:40:a3:13:12:ec:7d:4b:46:
                    13:cb:d0:25:3f:b0:01:35:01:09:77:08:06:85:e4:
                    1b:da:17:8a:40:55:c5:3e:ad:6c:09:af:4a:1d:a3:
                    51:28:14:c8:d8:81:21:51:e9:52:d6:ee:c1:83:8b:
                    44:08:b4:55:36:62:c2:61:8a:0a:c5:65:ea:ea:bb:
                    3f:6d:7e:d2:fa:42:98:9f:c2:0b:41:76:09:84:5d:
                    fb:b4:f4:7d:9a:b6:73:6d:39:a9:61:b4:db:18:44:
                    4f:33:c1:0d:be:56:88:44:79:60:a8:ea:df:a4:0f:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:D4:65:C8:3D:25:BE:A3:26:16:54:4A:22:24:05:9C:AD:F3:DA
            X509v3 Authority Key Identifier:
                keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:c1:33:6c:50:ed:50:79:3c:ba:6b:a7:8c:a4:ab:73:81:
         dd:91:5a:67:c9:80:35:58:33:85:f6:f5:22:5e:6a:d9:10:08:
         7a:a3:1b:8d:40:8b:67:c6:a5:c6:5d:c4:a9:b0:b4:62:33:d5:
         29:6f:67:9b:51:73:b8:fa:32:3c:e5:cf:86:f0:bd:fd:a3:31:
         6e:9b:8c:6a:98:32:e5:ea:aa:69:24:f7:ac:9e:4d:16:ba:65:
         c5:93:cb:e1:16:94:5f:e9:22:28:36:64:66:15:29:e8:13:a3:
         c3:3d:da:87:5b:36:10:e6:7d:46:e7:6b:44:72:f1:a4:de:f1:
         7a:e7:15:5d:b7:38:19:01:c4:83:0a:6f:c9:18:24:8f:a0:8d:
         a0:16:84:a2:75:f8:77:83:1a:ad:00:1f:be:16:3b:56:26:d0:
         16:6a:c0:f4:b7:1f:fb:cd:2c:56:03:d7:37:0b:fd:4b:14:94:
         79:c4:80:1e:4e:f7:da:bd:cc:bc:78:56:ca:9b:ec:4b:ce:cc:
         91:07:c1:06:ea:1e:5f:07:8b:d0:e7:d0:47:02:02:64:39:3a:
         16:f0:8e:09:3d:fa:ca:46:74:52:dd:b5:3d:bd:2b:98:55:b8:
         b9:be:41:b6:02:0e:88:e8:0a:a8:87:f2:43:4d:6b:f0:ed:93:
         9c:9f:3a:de
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQjd4p7EGJvWtdVbL379f09tl5VAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3
RUMyRDJGOTAeFw0yNDExMjEyMjM2MTBaFw0yNDExMjUwMzMxMTBaMDMxMTAvBgNV
BAMTKEJFNzhENDY1QzgzRDI1QkVBMzI2MTY1NDRBMjIyNDA1OUNBREYzREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtHTF0tsZWrYL4Wi8gAPZMIbR
Vru55EDnwdZ2ccfXMJX0qW3ozkW270x8f97B8R8TOggyhPxEiN0Kc6H+OV0NkrKt
8ZxO3WNwBbCjw6Wceo+YPZISj9ISi6Jxg1UKqWjQD+Yp/DnV0W6LrYvWvTGZ3rYf
NyeFBAHf6CX1mc9sBHZFazCCqzUsYXVykyBAoxMS7H1LRhPL0CU/sAE1AQl3CAaF
5BvaF4pAVcU+rWwJr0odo1EoFMjYgSFR6VLW7sGDi0QItFU2YsJhigrFZerquz9t
ftL6QpifwgtBdgmEXfu09H2atnNtOalhtNsYRE8zwQ2+VohEeWCo6t+kDzjNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUvnjUZcg9Jb6jJhZUSiIkBZyt89owHwYDVR0j
BBgwFoAULu94RFNir098rrJB+ua5dH7C0vkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NzI0ZTQ1Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC8yRUVGNzg0NDUz
NjJBRjRGN0NBRUIyNDFGQUU2Qjk3NDdFQzJEMkY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3RUMy
RDJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm
OGUtN2JmMTIwOTEyYWY3LzAvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5
NzQ3RUMyRDJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHtkwTNsUO1QeTy6a6eMpKtzgd2RWmfJgDVY
M4X29SJeatkQCHqjG41Ai2fGpcZdxKmwtGIz1SlvZ5tRc7j6Mjzlz4bwvf2jMW6b
jGqYMuXqqmkk96yeTRa6ZcWTy+EWlF/pIig2ZGYVKegTo8M92odbNhDmfUbna0Ry
8aTe8XrnFV23OBkBxIMKb8kYJI+gjaAWhKJ1+HeDGq0AH74WO1Ym0BZqwPS3H/vN
LFYD1zcL/UsUlHnEgB5O99q9zLx4Vsqb7EvOzJEHwQbqHl8Hi9Dn0EcCAmQ5Ohbw
jgk9+spGdFLdtT29K5hVuLm+QbYCDojoCqiH8kNNa/Dtk5yfOt4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org