Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
File:                     A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json)
Hash identifier:          i7oRgVkPw8NrstGwYKGv2rWFSsne3nFDSGa237Ky3Hg=
Subject key identifier:   4D:5B:DF:B8:4D:FB:A8:05:22:3C:F7:C3:77:F2:54:8E:BC:2C:58:51
Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46
Certificate issuer:       /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246
Certificate serial:       5DE9630C4E3D5540A06ED0E6D2C33AAFC02F5F8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
Manifest number:          A3
Signing time:             Sun 24 Nov 2024 08:21:28 +0000
Manifest this update:     Sun 24 Nov 2024 08:16:28 +0000
Manifest next update:     Wed 27 Nov 2024 14:12:28 +0000
Files and hashes:         1: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: sTUyYGrM371rpQca7Vh2IlGHvUGMNi07cJZ3U4rfWPI=)
                          2: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: Sh2ahHo2vx0VefU0fIGxJdD6J9/Blbf3sv24iCZWiw4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl
                          rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e9:63:0c:4e:3d:55:40:a0:6e:d0:e6:d2:c3:3a:af:c0:2f:5f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246
        Validity
            Not Before: Nov 24 08:16:28 2024 GMT
            Not After : Nov 27 14:12:28 2024 GMT
        Subject: CN=4D5BDFB84DFBA805223CF7C377F2548EBC2C5851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d0:8e:fe:4f:83:f7:e5:cd:22:49:0c:d3:04:
                    8e:cd:9b:4e:81:5c:71:28:31:ad:5d:dc:b8:7b:ad:
                    3f:f5:96:4f:79:cb:61:a5:af:45:bb:59:42:35:ff:
                    fc:f7:e8:af:d0:d3:20:be:3d:78:cb:ff:38:27:ef:
                    c6:a6:7d:9b:f7:c7:25:ac:0a:31:aa:06:84:e4:96:
                    46:91:8d:68:24:6d:e4:71:65:80:6a:17:a2:b1:3c:
                    ef:e5:f3:21:ab:f3:dd:52:bc:47:3b:c0:53:74:96:
                    6a:de:39:38:cb:9d:9c:dd:af:06:3d:ed:58:79:6d:
                    39:63:19:79:2e:19:38:c2:c2:1e:87:7b:6d:bc:2b:
                    12:d7:27:13:f6:a6:80:f7:12:d3:06:40:90:a0:f6:
                    60:20:a1:ae:fc:10:4e:4f:8d:12:f5:2b:73:af:aa:
                    ba:2b:f9:e3:e0:9b:51:25:a8:27:c5:ac:85:0a:eb:
                    2b:a2:c4:43:75:98:9b:ee:b1:44:a4:67:ad:28:5b:
                    47:25:a8:a6:94:51:2c:d2:41:a7:fe:98:2f:12:95:
                    56:30:be:ed:b5:a9:e5:34:c1:6d:02:e5:ce:23:1d:
                    e3:2c:f5:b7:cd:bd:d7:f9:0c:62:95:0e:08:33:cc:
                    76:17:6d:d9:16:bd:ba:24:fa:73:88:d0:f5:fd:88:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5B:DF:B8:4D:FB:A8:05:22:3C:F7:C3:77:F2:54:8E:BC:2C:58:51
            X509v3 Authority Key Identifier:
                keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d0:f6:a1:d3:43:ce:c7:19:35:03:51:86:bd:03:6d:d0:14:
         e6:af:de:c1:f0:80:e5:0c:9a:a2:4c:40:5a:87:b3:29:11:57:
         7f:f9:09:5e:b9:7c:ff:b8:e5:79:90:57:dd:c2:3b:d6:8b:8f:
         29:15:af:0d:38:ac:fd:4f:7f:b3:c9:60:c7:22:8d:49:72:ee:
         7d:58:52:1d:78:7f:7d:fd:6d:c9:2e:09:c2:85:dd:91:a8:32:
         40:31:c0:a1:ef:3a:8e:2e:0d:b6:9e:74:89:82:5b:0c:28:c1:
         77:78:e7:f6:65:8d:dd:c2:0f:43:76:84:d2:88:77:31:5e:d2:
         3a:b7:f3:b6:49:62:f2:e3:38:f1:89:a4:ef:02:18:43:ba:6f:
         3c:0d:9c:51:a5:26:4c:3a:d3:71:e7:d8:d6:89:f9:67:1a:55:
         96:16:28:30:2b:a4:b9:5a:a0:ed:30:65:46:98:21:0c:56:24:
         39:f9:b5:c0:a0:7a:c6:fb:24:b2:e0:82:fe:a8:c8:7b:77:ec:
         5a:64:ba:b1:6f:3d:30:37:a6:ce:0e:61:4b:0c:d8:5d:e0:01:
         0c:bd:fb:c1:6b:4f:0e:bb:a7:1c:9c:4a:8d:8f:4a:58:38:57:
         85:d1:e4:e4:41:5e:42:4c:43:bf:57:b4:66:93:3d:88:7e:68:
         53:b1:f8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:08:48 2024 by rpki-client on console-fra.rpki-client.org