Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
File:                     E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft (raw, json)
Hash identifier:          RYKLj8c8ACvyDpY4RAU62N2YcPMPdKzscGtdb8YWdT0=
Subject key identifier:   3F:BC:67:C4:09:CE:5F:65:5A:3E:67:D3:A6:2B:8D:31:6F:7A:67:12
Authority key identifier: E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42
Certificate issuer:       /CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42
Certificate serial:       2D4C53FB475992128D04D27BDBE376E6A75900EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
Manifest number:          048C
Signing time:             Fri 22 Nov 2024 00:30:05 +0000
Manifest this update:     Fri 22 Nov 2024 00:25:05 +0000
Manifest next update:     Mon 25 Nov 2024 04:28:05 +0000
Files and hashes:         1: 3130332e3232392e3230302e302f32332d3233203d3e203539323835.roa (hash: kpAMD2rxnApepzs7FgZNPvkRpA934QN2K0t+R1c+J0M=)
                          2: 35392e3135332e32342e302f32332d3233203d3e203539323835.roa (hash: Xz6SlFll/6iO1NEW4d3L0Zbxfk3HKgTbGTZOaZmaxK0=)
                          3: E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl (hash: w0mpWkvRIjvzOVIksgdBPYO+1yPM4ep96ShaZ4Pmg74=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl
                          rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4c:53:fb:47:59:92:12:8d:04:d2:7b:db:e3:76:e6:a7:59:00:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42
        Validity
            Not Before: Nov 22 00:25:05 2024 GMT
            Not After : Nov 25 04:28:05 2024 GMT
        Subject: CN=3FBC67C409CE5F655A3E67D3A62B8D316F7A6712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:6f:b1:95:3e:2c:de:1e:d3:67:48:5b:c6:
                    22:72:19:bc:73:bf:bd:20:18:9e:ea:d9:d5:cb:26:
                    c7:d6:c5:3d:f8:3f:7d:e9:61:97:eb:3f:a8:b1:e2:
                    0c:57:f0:8f:2d:8b:b7:03:a2:1e:bf:91:a4:c5:cd:
                    1b:a6:67:36:26:b0:80:48:52:fd:33:b4:79:39:10:
                    b8:0a:49:52:9e:3c:62:e0:a4:dc:23:be:7e:a9:3f:
                    4e:c7:95:fb:25:f5:8d:06:32:d0:3b:ab:45:39:cc:
                    6d:b6:5c:c8:dc:24:a1:b3:30:a2:93:0c:21:b7:26:
                    79:a4:4d:b6:44:50:21:79:02:a1:7c:a7:97:f8:a0:
                    54:bb:11:00:12:ea:24:ae:37:c1:2e:99:0d:73:56:
                    35:40:b3:4a:be:f8:db:63:82:f7:f6:0b:c0:ae:c2:
                    90:37:45:2c:dc:19:a2:fd:7e:27:77:b5:19:74:ae:
                    3b:99:55:d8:4c:d0:2b:43:30:fa:e5:ca:8d:71:fc:
                    b4:19:10:a0:a2:6f:37:e6:f4:7f:e3:5b:6e:97:87:
                    34:1f:ad:1c:60:81:4b:1f:75:fd:8d:90:37:28:5d:
                    f3:b8:7b:a1:34:56:14:12:b1:87:4a:a3:ca:b1:51:
                    cf:cd:b1:18:f3:59:f7:d7:2e:93:35:32:fc:4e:bc:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BC:67:C4:09:CE:5F:65:5A:3E:67:D3:A6:2B:8D:31:6F:7A:67:12
            X509v3 Authority Key Identifier:
                keyid:E0:FB:A0:3D:6B:68:95:CE:B5:37:22:CE:FD:B9:4C:56:01:BD:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca1f3b37-bd54-4911-905b-365496687c8d/0/E0FBA03D6B6895CEB53722CEFDB94C5601BDEA42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5c:4e:38:de:e2:50:71:13:7a:79:f5:51:8d:ac:57:2f:e1:
         33:b4:1d:8f:1c:be:30:b7:0b:f6:98:07:32:73:4c:87:27:fa:
         71:eb:d5:4d:7d:0a:52:2c:29:b7:72:64:34:5c:74:0b:9b:a6:
         c7:89:13:59:bd:92:85:d8:db:8e:76:4a:a3:07:76:ac:f7:ac:
         0d:0b:d5:06:df:42:ed:c8:bc:98:2c:c3:85:36:90:b0:f8:fd:
         6f:c9:70:48:ba:37:58:6a:1f:23:83:6f:fe:c3:60:85:17:dc:
         05:34:37:58:05:51:85:ce:4e:bb:d3:5e:0e:01:f2:f5:79:62:
         55:af:fa:47:0a:8d:3f:59:c4:8a:42:4c:40:cd:ca:d2:73:e1:
         7f:ca:59:30:d8:06:e3:a5:54:5e:52:31:56:ab:0f:a6:36:e2:
         cd:a0:27:d4:1e:13:ba:b2:ce:11:83:a2:d1:d4:ea:a1:e7:1f:
         01:ac:cd:3a:24:59:6a:49:b6:e8:36:5d:e8:f6:51:36:18:95:
         48:8c:cb:f3:74:b6:68:36:6a:d2:e2:01:8d:17:72:e9:e9:a1:
         f5:a3:ca:b1:a7:fd:c5:ed:e8:b0:47:51:22:0b:08:a4:7a:c4:
         0c:fd:ae:32:11:9d:1c:bd:f6:3c:16:fb:0f:5f:73:9d:c9:f2:
         78:85:4e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:01 2024 by rpki-client on console-ams.rpki-client.org