Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft
File:                     8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json)
Hash identifier:          JBbFHxVFfZ/R6A3NOU7nm88EXK7X6jr8VZc3/ES7IEI=
Subject key identifier:   D9:D7:4B:85:73:8B:C1:B6:0B:A4:AC:2C:30:A6:C4:EA:4B:BA:6B:05
Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E
Certificate issuer:       /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E
Certificate serial:       4359323F6C265761CB8C557531630977569C99D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft
Manifest number:          01DF
Signing time:             Sun 24 Nov 2024 05:10:48 +0000
Manifest this update:     Sun 24 Nov 2024 05:05:48 +0000
Manifest next update:     Wed 27 Nov 2024 07:26:48 +0000
Files and hashes:         1: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: QNLqD+NWgCvAtRZtWIp0zmGShScedJ49/iCnsFahzOY=)
                          2: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: CcBFwGpASAvXeD5i1IQiNWPfNj9jmof+ADOKkYxnqW8=)
                          3: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: Y9XARniDJgg4OUqj6GjFvuZ0EXuuYtQJNDhXyplaxBY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl
                          rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:59:32:3f:6c:26:57:61:cb:8c:55:75:31:63:09:77:56:9c:99:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E
        Validity
            Not Before: Nov 24 05:05:48 2024 GMT
            Not After : Nov 27 07:26:48 2024 GMT
        Subject: CN=D9D74B85738BC1B60BA4AC2C30A6C4EA4BBA6B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:a6:12:49:cc:a2:9c:77:ea:2b:69:97:99:
                    52:6e:25:75:5b:76:51:18:53:74:d1:71:b6:8b:84:
                    c3:09:c8:32:96:0e:6f:26:36:0a:52:0c:31:f0:ac:
                    49:da:eb:1c:54:88:a7:79:24:57:28:75:13:14:fd:
                    61:76:2d:ed:af:de:02:be:23:d3:fd:fa:e4:05:1c:
                    76:8e:be:e4:6a:e1:b7:78:d0:79:90:dd:a0:1f:e9:
                    b2:19:8c:24:0a:38:c7:45:16:33:e5:e5:29:a4:83:
                    b6:06:78:36:8a:f7:c2:e5:7b:c5:78:9e:7c:2f:49:
                    01:56:33:8c:62:f0:b3:c5:07:f1:55:ad:87:72:b2:
                    89:e7:60:88:64:d3:24:35:dc:a2:b1:bf:4e:24:f2:
                    ba:ed:1f:29:cc:2f:e7:a7:18:5c:4e:42:82:a3:d9:
                    0b:89:a5:a1:c4:12:15:d3:b2:f5:1c:c4:a5:30:c7:
                    62:e7:98:12:00:ae:25:cf:76:03:9d:56:ce:ab:c4:
                    7d:7e:47:ee:f8:75:32:c4:99:29:d5:c5:b7:e6:36:
                    a5:37:61:b0:1b:f9:95:88:d0:22:e6:5b:fb:0a:6b:
                    f5:07:d5:a2:d5:e3:75:a1:2d:83:38:e3:6a:5e:ad:
                    6c:bd:55:c9:3a:5d:c7:b4:7d:58:5f:d2:9d:a9:35:
                    2d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D7:4B:85:73:8B:C1:B6:0B:A4:AC:2C:30:A6:C4:EA:4B:BA:6B:05
            X509v3 Authority Key Identifier:
                keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:86:f8:17:7e:f6:e2:b8:3f:a6:2e:b6:30:b3:b2:b9:8c:ba:
         3b:50:6e:04:81:2a:d5:4f:d9:bd:10:ea:7c:f3:35:6a:47:56:
         b0:20:01:39:0d:7e:7a:b2:36:00:d1:c9:fe:62:8f:c4:58:00:
         bf:7e:37:9e:c2:8a:40:ea:17:2f:02:35:62:dd:b1:52:0e:6f:
         3f:55:df:dc:ae:e1:52:32:5f:37:47:f1:2e:df:46:c4:4a:2f:
         c9:a5:19:16:1d:9c:20:06:67:c0:ce:03:c8:2e:38:a1:51:64:
         a5:7f:b4:84:f7:a4:75:51:5b:19:34:9d:bd:f9:17:04:e7:37:
         d6:68:bf:da:8e:fb:64:83:5c:bf:ee:5b:ce:50:80:ed:e2:a6:
         55:54:80:ab:21:16:32:19:69:b3:86:b0:1b:fe:ac:16:d5:07:
         d8:4f:6b:92:82:0c:6a:34:0e:1f:8c:c7:e2:91:ab:cb:98:49:
         70:1a:34:ce:bf:48:55:2d:fb:7c:b7:7d:7c:dc:38:59:bf:10:
         d0:9c:f0:a8:74:8e:f6:93:81:2b:35:f8:e3:e5:11:e7:ad:d0:
         19:c3:5c:1a:04:d4:7d:e6:00:c7:57:d7:30:64:b3:92:db:7b:
         e0:02:ac:45:1b:8d:3a:fd:95:7f:2f:d9:f3:0f:ce:31:8f:3b:
         df:64:e0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:23 2024 by rpki-client on console-fra.rpki-client.org