Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
File:                     347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft (raw, json)
Hash identifier:          MH+C3tUwE5m1bKcKiFXnb7Ee/wdQAUA05pjjR6TnVxM=
Subject key identifier:   FD:58:55:6A:7E:79:EA:99:98:98:00:77:F6:B8:7F:47:FA:63:51:B7
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       5BB92D4ABB7D643E6E30CFBC433C471899996894
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
Manifest number:          0407
Signing time:             Thu 21 Nov 2024 10:11:04 +0000
Manifest this update:     Thu 21 Nov 2024 10:06:04 +0000
Manifest next update:     Sun 24 Nov 2024 13:02:04 +0000
Files and hashes:         1: 3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa (hash: +9y8ic4PiXaKoNlsv54wawj8Wj1LaThm23gyC3GJiXk=)
                          2: 3230332e3132382e3235302e302f32342d3234203d3e20313333373938.roa (hash: E3Hwgk+WDOBggw5DXTuanMD7N+9GDg2Ihdu2LPOfxvw=)
                          3: 3130332e34342e33372e302f32342d3234203d3e20313333373938.roa (hash: b5ftLw9xEMtrh+vKwYVudlNRVFP5Vf43boXnMev2I78=)
                          4: 347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl (hash: 0O8TF4gQIiMyaIdKKp7J7uHjfzBauZZSMG5TNya60Jc=)
                          5: 3230332e3132382e3234392e302f32342d3234203d3e20313333373938.roa (hash: y7Ck52euZ4Y5URIT5H2H8vK8yOp7jwg7hoUeRG3JP8g=)
                          6: 3230332e3132382e3234382e302f32342d3234203d3e20313333373938.roa (hash: ZH05yKaYsnHthjTbmEdpxQkI/jnSx+O6FpjlXE6KVV8=)
                          7: 3130332e34342e33382e302f32342d3234203d3e20313333373938.roa (hash: k4BfMkrkR1Xe/B3g7lq1YTofjpm7e/XEsup9Nlx3MOQ=)
                          8: 3130332e34342e33362e302f32322d3232203d3e20313333373938.roa (hash: PFXCS8rL+1zYTYERR01jD5Xuf6IpBc+ddZMkj/TSGrI=)
                          9: 3130332e34342e33362e302f32342d3234203d3e20313333373938.roa (hash: 3PZ6pRisZaU22vgYfmEVHCpGAOvxOd5CcJ/C56qR0E8=)
                          10: 3230332e3137342e352e302f32342d3234203d3e20313333373938.roa (hash: mmQK03ocxy8797xqpr22KOIMqU5FVbNjMEGAFbS4EZw=)
                          11: 3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa (hash: ptmfU7grOlX26fr32YtkbKR95YzRCTnK8Wejx3g9qm0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b9:2d:4a:bb:7d:64:3e:6e:30:cf:bc:43:3c:47:18:99:99:68:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Nov 21 10:06:04 2024 GMT
            Not After : Nov 24 13:02:04 2024 GMT
        Subject: CN=FD58556A7E79EA9998980077F6B87F47FA6351B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:74:bc:76:37:4e:bb:a7:4e:9c:f9:50:4b:
                    d7:bc:e2:79:8a:fd:dc:5c:3a:d6:d3:06:d1:dd:ee:
                    09:ea:e9:70:48:53:d5:56:e5:93:b2:ce:f3:72:f7:
                    c5:4b:b0:e4:15:cb:6d:34:40:20:4e:65:01:54:d4:
                    ed:79:d0:4f:fe:5c:3b:03:16:56:60:9e:54:49:11:
                    97:19:c2:ee:56:e6:8c:5a:9c:1c:50:5d:1c:bc:b1:
                    12:a8:44:b4:e6:57:7a:eb:80:8f:3c:8b:2e:c9:7f:
                    4d:f0:1f:35:02:75:0c:74:25:51:7b:38:d5:19:1a:
                    73:d2:d8:f6:a9:70:07:c9:b6:54:5c:e4:90:f8:e3:
                    6b:28:5c:8a:17:f3:4d:f9:93:64:df:d5:b1:2a:8e:
                    9a:de:60:45:2a:54:0d:57:96:4d:1b:19:b2:30:34:
                    b3:fe:8c:69:b7:83:05:92:f0:05:0c:c7:cc:a6:64:
                    35:2c:65:65:ec:93:b9:a9:b6:42:fd:bf:e2:98:d9:
                    a0:02:ad:8c:b4:06:bf:da:56:66:ec:fc:2a:6d:e5:
                    a7:f8:0c:35:f7:a6:a7:85:e6:d2:f9:b9:4e:36:a4:
                    63:57:2a:b9:13:17:5c:e5:82:88:5d:15:16:b8:00:
                    b9:c7:77:23:90:84:93:c6:6a:89:ca:e0:8f:3d:1f:
                    a0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:58:55:6A:7E:79:EA:99:98:98:00:77:F6:B8:7F:47:FA:63:51:B7
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f1:28:8c:9a:f4:75:cc:1a:8d:7d:d3:d4:22:d4:26:2a:95:
         0c:0f:b1:f6:8b:ee:7a:d4:9f:8a:ba:2c:23:90:a9:56:4f:22:
         bd:79:0a:e4:46:1b:3d:39:55:94:8a:7c:8b:4c:d5:6f:d8:1d:
         62:5c:2d:f5:29:51:81:e9:88:80:17:08:be:96:fc:b4:e7:fd:
         23:b2:44:d1:7f:8d:a6:07:7f:a1:d2:cc:8f:bb:31:11:b2:1d:
         de:ac:95:53:1b:f3:00:50:46:39:b9:a3:7c:e4:92:5f:1a:66:
         c4:f8:5c:e3:99:66:b9:e6:2b:e6:8b:e5:07:44:65:f4:0f:c5:
         a5:e3:5c:0f:8e:a4:5d:35:dc:73:e3:88:bd:72:a5:c2:64:36:
         c8:70:46:f2:2a:58:c3:0b:65:b9:dc:a4:0c:62:03:2e:a3:41:
         39:cb:92:93:74:2b:7d:d7:6f:66:4b:68:03:08:5e:bf:8e:1f:
         46:45:82:ec:5d:e9:4e:6f:04:a5:5d:c9:24:6c:e1:12:70:97:
         15:a5:f4:fe:f3:1c:a6:09:80:a7:7f:bf:5c:ad:5d:18:f6:3d:
         60:15:58:db:35:e1:6e:dc:a0:8a:ee:68:af:83:96:01:fb:c4:
         ef:41:08:61:08:c9:f2:6d:bb:fe:da:53:1f:4c:3d:61:0e:ce:
         76:a2:3e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org