Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
File:                     3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json)
Hash identifier:          33VBaxNi0DNWYGn4UbYRiOmxTp8iTD9Yf+KEQK/MO/w=
Subject key identifier:   51:70:A2:67:D0:FB:E6:70:0D:BA:B2:29:C3:8E:79:F4:87:EA:10:90
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       420DEEC4EAA43BC4D115390153653A94D82AFEC7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
Manifest number:          01A4
Signing time:             Thu 21 Nov 2024 17:02:26 +0000
Manifest this update:     Thu 21 Nov 2024 16:57:26 +0000
Manifest next update:     Mon 25 Nov 2024 04:24:26 +0000
Files and hashes:         1: 3230322e35312e35392e302f32342d3234203d3e203437363932.roa (hash: 3QSWapYp9HOZ0lMVobww0XUkxzG54UBbtwZnrfbLHzY=)
                          2: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: 9JhEsf7Rfj1/1sGwyn9vXBFLhDThBdCundD/yJmVoGk=)
                          3: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: bYBSmiXHENZ5+D4aLwRMCseg/Jz198HvpjZSlRQRk/A=)
                          4: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: oLCY8cbJvmvo7uscgaRp9SbbXEuyt2/Iw9KWFr47rqY=)
                          5: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: N1py/UmfH5qu4YQZhj2saYLPpWLMYrpOtfBIgfSfLLE=)
                          6: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: tTjtOKY8yjArzXbGhB1oeW+9WISeqtj3QSBeBi3CWWU=)
                          7: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: 11MC5FJV81eDF0hmXmIGlCvYBfxe8/B4DDfC+bAnVcc=)
                          8: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: ZFZXeihhDtU9k6tut8B1YVi1rve9EUj2x0+wMaAyKco=)
                          9: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: sYwxxrs+ant0TIjouWA1d0UxBBez3RXDFXjayUc8GiQ=)
                          10: 3230322e35312e35382e302f32332d3233203d3e203437363932.roa (hash: n2AhFYkS9w5mTdj0uj26bwREB9kdObgD0xOA841RqYU=)
                          11: 3230322e35312e35372e302f32342d3234203d3e203437363932.roa (hash: dN5tEfqiDd9XPSNdGuiguzIx1jTeWlC+AqlHtokXIBc=)
                          12: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: etaBPciFEwBhaJvis2tVUGBI+EfK6LR3Mmz7DfvWUkY=)
                          13: 3230322e35312e35382e302f32342d3234203d3e203437363932.roa (hash: q94p84SUE9W83+ijo7S8vKqGsIfQETpVKfrRavdqvcw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0d:ee:c4:ea:a4:3b:c4:d1:15:39:01:53:65:3a:94:d8:2a:fe:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: Nov 21 16:57:26 2024 GMT
            Not After : Nov 25 04:24:26 2024 GMT
        Subject: CN=5170A267D0FBE6700DBAB229C38E79F487EA1090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:d4:14:ff:71:d9:dd:b0:9b:18:e5:f3:0f:
                    0f:b2:15:ea:e6:36:ca:79:b0:14:f5:36:3f:9c:f0:
                    62:5a:37:b8:8e:a8:14:d9:aa:bd:df:78:73:f0:66:
                    a6:10:4f:da:98:d5:4a:22:45:7f:f2:3e:b4:59:d0:
                    af:cf:46:97:f2:84:be:b7:14:19:88:bd:8f:17:4b:
                    51:44:d1:45:a5:15:17:8b:a8:03:64:5c:8d:a0:bf:
                    ea:f1:d6:59:46:c1:3b:c8:ee:7b:11:36:c1:75:cc:
                    05:f5:df:f9:c1:82:6d:84:df:7d:15:cc:87:a1:98:
                    7e:8b:77:d0:89:5b:e6:b3:85:37:aa:8b:b6:14:8b:
                    c0:72:b9:26:7b:83:ab:c8:dc:8c:f2:7c:0a:a0:c7:
                    5a:cf:cd:2f:37:48:b0:0b:28:89:13:c2:74:cd:e5:
                    d3:64:a8:57:d2:8a:dc:48:d8:b6:33:4d:db:10:8d:
                    00:dc:ed:e2:7f:bb:8a:5b:af:1f:ac:cc:70:bb:6d:
                    19:0b:89:02:2c:c0:da:87:be:51:fd:ec:0b:c9:2c:
                    e3:33:1c:c6:39:fe:70:22:28:80:4f:4d:3e:8f:cd:
                    53:92:df:4b:fd:a7:6e:76:c1:7b:bb:39:93:a7:59:
                    1c:c8:cd:12:9f:e8:b7:a8:40:71:f0:f5:e9:49:b1:
                    4e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:70:A2:67:D0:FB:E6:70:0D:BA:B2:29:C3:8E:79:F4:87:EA:10:90
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f8:19:4f:cf:56:b4:e0:7a:52:d2:d0:e6:1d:ed:6f:3d:20:
         6d:30:88:1c:13:00:81:ba:d7:45:df:ce:6e:52:67:f5:6d:43:
         f9:d3:d1:11:42:2d:1c:7c:32:d8:a0:b8:6f:ff:3b:9f:9e:f5:
         5b:a0:57:fd:cc:b2:b5:57:3d:73:d0:8c:a8:66:9d:f1:b0:34:
         8e:85:9e:03:0d:ce:73:c2:c2:cc:f0:0f:8d:28:aa:ef:5f:b4:
         cc:c8:a9:ef:0a:45:8e:14:d7:93:02:c0:6e:3e:7e:f5:36:f0:
         ee:5a:41:4d:0c:4a:78:fd:fe:74:86:d2:4b:76:1e:8f:a8:48:
         49:e9:d3:b6:ad:c5:30:60:33:f5:09:19:b7:21:1a:c4:5e:a9:
         0a:7e:46:b0:a0:c7:35:f2:52:45:d7:03:e8:6e:6c:56:8b:15:
         92:57:19:bb:27:36:93:e9:b1:7e:6e:09:b7:5d:a0:df:52:1f:
         3b:2f:12:5e:8b:26:44:19:8c:dd:f9:4c:f8:46:91:32:11:fa:
         9b:58:21:0a:34:d1:c5:8d:cb:72:5c:13:62:77:b4:c4:42:39:
         3f:d7:51:ce:28:27:95:6e:e2:46:c4:f8:9d:76:c5:76:2b:7d:
         0a:1b:23:81:a2:0b:7c:93:a8:d9:f5:3d:59:ce:f8:4c:b5:10:
         f9:a3:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org