Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft
File:                     023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft (raw, json)
Hash identifier:          YsrbkzaDGKFO+4GInLS6XHiPBRd6XqSCZ1K/9s814YE=
Subject key identifier:   69:BF:2C:48:9E:25:F7:62:B5:CB:B9:E0:63:AD:9B:46:37:73:A3:18
Authority key identifier: 02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61
Certificate issuer:       /CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661
Certificate serial:       30E46D83B46F11B7E62D93433F013B20E69EF357
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft
Manifest number:          01DE
Signing time:             Fri 22 Nov 2024 10:03:07 +0000
Manifest this update:     Fri 22 Nov 2024 09:58:07 +0000
Manifest next update:     Mon 25 Nov 2024 18:24:07 +0000
Files and hashes:         1: 023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl (hash: InbLtMo7l8nH7NPgFz8BG5/RkLcAKz5rlimLdYvUsdY=)
                          2: 3130332e3134392e3132302e302f32342d3234203d3e20313339393532.roa (hash: AYBtTQuHOA+ch+67peyD8zd3htKDD7q8jH/gyQs5OE8=)
                          3: 3130332e3134392e3132312e302f32342d3234203d3e2037373133.roa (hash: 2sCJDv/VLB2+ZucXetRLmjAhwhdmhXnQZHqNCIpfyJU=)
                          4: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (hash: 2gVCxg+hDmKkdBfr1IN+Jz7t1loTVbupLhThyLDp4zk=)
                          5: 3130332e3134392e3132312e302f32342d3234203d3e20313339393532.roa (hash: /Yf2UlWt9gQIJc10zBIWfHMTRjWsBAQPZb2JGJfsgWo=)
                          6: 3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (hash: 364DCypCEYdKqCpyIMrYrwGZTcF7KG8HCkuLG3/yju4=)
                          7: 3130332e3134392e3132302e302f32332d3233203d3e20313339393532.roa (hash: rnYczgK048JTwJb3PR1P+SoB4ImO3Se1+0bmbOU7hi4=)
                          8: 3130332e3134392e3132302e302f32332d3233203d3e20313430303233.roa (hash: ff8Ni5SxOrZ4/wG1CzwykgK0m08tV+LMZ7XDB4fPtpM=)
                          9: 3130332e3134392e3132302e302f32332d3234203d3e20313430303233.roa (hash: RZP1u67IkDY1VxYw8axwNJaL5jYZcoL8kOhW1c7O+Eg=)
                          10: 3130332e3134392e3132302e302f32342d3234203d3e2037373133.roa (hash: ainzYOWFmRuYIwOjzy7qOOprxvfaT81WL+OFK0r0rV4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl
                          rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e4:6d:83:b4:6f:11:b7:e6:2d:93:43:3f:01:3b:20:e6:9e:f3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661
        Validity
            Not Before: Nov 22 09:58:07 2024 GMT
            Not After : Nov 25 18:24:07 2024 GMT
        Subject: CN=69BF2C489E25F762B5CBB9E063AD9B463773A318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:b3:29:15:ee:5c:f9:cf:66:cf:a6:15:5e:
                    4d:1d:3e:c9:c1:10:c2:c0:03:6e:ef:d3:a0:01:4a:
                    46:4c:ef:9c:6b:94:e7:0d:4b:1f:48:d6:eb:c9:63:
                    58:48:94:40:41:24:19:d9:3c:08:bd:00:cf:6e:2d:
                    29:ad:78:37:f4:7d:78:3a:3b:66:79:a6:a9:c4:21:
                    97:e2:70:ae:0d:1e:f5:70:0d:8e:f7:06:06:ed:5d:
                    09:4d:90:d5:62:fd:b4:ac:55:f5:5a:fc:73:23:99:
                    9a:a7:5e:16:c4:f1:14:5c:4d:2e:cc:86:49:86:25:
                    48:12:78:23:7f:d7:56:66:b2:e2:00:66:6d:5c:82:
                    01:04:c6:91:90:d3:f1:22:cd:40:6d:89:ee:a6:ce:
                    ab:b2:f7:14:c9:5e:38:96:de:6b:be:a9:7a:73:e3:
                    cc:f1:de:5a:84:c5:81:9d:14:92:53:b0:7b:46:9d:
                    8a:99:1a:a2:01:5c:72:50:9d:4f:df:b8:7a:85:49:
                    48:d2:b8:b5:f6:97:53:59:d8:54:6c:6d:61:fc:e5:
                    e6:e5:d9:24:25:19:ef:66:78:70:9d:ed:b1:f5:00:
                    b4:b2:ac:79:f0:78:82:62:cb:b5:f9:ac:61:a5:a6:
                    88:75:91:53:c0:b4:71:03:65:d4:92:7e:00:f7:02:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BF:2C:48:9E:25:F7:62:B5:CB:B9:E0:63:AD:9B:46:37:73:A3:18
            X509v3 Authority Key Identifier:
                keyid:02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ff:cf:51:f4:05:4b:36:55:00:bf:d2:f3:b2:7d:24:ac:ca:
         06:89:5e:54:73:63:d2:7a:56:71:17:fe:9f:26:ba:7b:cc:70:
         fb:24:3e:89:a3:f8:dd:69:3c:6d:7e:74:36:2c:2d:43:e3:08:
         45:74:f6:c2:11:68:ae:33:f1:59:bc:6a:e5:e1:ca:13:68:02:
         bb:0d:02:6c:9d:52:a2:e9:8c:97:8b:9a:ae:7c:e3:22:a4:00:
         37:b3:0c:43:94:10:c0:52:b0:27:6a:78:66:53:d3:29:d3:41:
         e4:b2:b7:4d:ad:96:4e:49:28:5d:30:87:4a:0f:89:a5:80:28:
         bf:28:d2:ab:b1:f3:6c:4b:49:b9:de:26:ec:99:01:40:8e:bb:
         e8:55:4e:2a:15:38:c2:7d:13:93:dd:06:8b:ea:dc:36:68:d4:
         66:d6:8a:92:6a:c7:b6:f4:ba:7f:0d:aa:e6:19:c4:c4:07:30:
         0d:86:c0:32:68:e8:06:5b:14:9a:fa:a0:db:e6:c2:c7:83:67:
         68:ed:28:a7:2a:0b:88:2e:68:97:cd:a9:ff:63:2d:a0:24:86:
         eb:ce:b5:a8:fd:da:27:c6:19:6f:3b:1c:3d:cc:b2:bf:4e:69:
         cd:69:db:92:3f:5a:ee:b8:56:62:17:c7:fc:5a:66:03:bb:27:
         92:fa:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:33 2024 by rpki-client on console-fra.rpki-client.org