Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft
File:                     DD68C98D519CC8D624F664B026AEB9B289EE819C.mft (raw, json)
Hash identifier:          uZwz9Psniw/mQMmshJKkzdIm+d0GcaB0qEBR+Kdmo9c=
Subject key identifier:   92:C5:83:0B:D8:A4:09:F2:D6:DC:31:4B:3F:ED:F6:26:8F:8D:89:27
Authority key identifier: DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C
Certificate issuer:       /CN=DD68C98D519CC8D624F664B026AEB9B289EE819C
Certificate serial:       08386F7330E78B7150DE58CF0DAEE5F44DA1FCF7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft
Manifest number:          014F
Signing time:             Sun 24 Nov 2024 19:11:52 +0000
Manifest this update:     Sun 24 Nov 2024 19:06:52 +0000
Manifest next update:     Wed 27 Nov 2024 22:46:52 +0000
Files and hashes:         1: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: n7fDyeuU1HQZdFIYr/m3ZztFKIf2iIRMeVjsry1/EpQ=)
                          2: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: nSaffT2loCbCY4DbpP8GpLCrFZYYKh3bE+jC1cyDP9Y=)
                          3: DD68C98D519CC8D624F664B026AEB9B289EE819C.crl (hash: BiKDpaGrGyGrnvqvVE+YgsCzHSRLYNVw4xBeD2UT/4M=)
                          4: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: fGeQBiKX+xxqfH1XXT4otHk8nTCoBgbZ9CMCkIFVfP8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl
                          rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:38:6f:73:30:e7:8b:71:50:de:58:cf:0d:ae:e5:f4:4d:a1:fc:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD68C98D519CC8D624F664B026AEB9B289EE819C
        Validity
            Not Before: Nov 24 19:06:52 2024 GMT
            Not After : Nov 27 22:46:52 2024 GMT
        Subject: CN=92C5830BD8A409F2D6DC314B3FEDF6268F8D8927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:dd:79:bc:73:0d:05:38:ee:d0:04:15:21:
                    ca:3e:ca:75:ce:59:e9:65:3f:8d:cd:12:1d:60:de:
                    a5:18:40:c0:6a:7a:50:92:69:77:55:2f:8a:d2:77:
                    aa:08:1a:44:ab:83:ef:3c:39:66:cb:c6:2c:2b:ae:
                    1b:c1:d1:9d:ec:af:ca:1f:f5:d3:2b:75:fb:40:6f:
                    a0:cf:e2:f9:db:fb:22:33:28:b6:31:58:06:84:02:
                    78:f9:d8:37:8a:96:be:3c:a2:e0:56:64:25:c0:82:
                    39:74:9b:84:30:97:f7:23:95:9d:8e:3e:4f:3a:68:
                    46:02:f3:c0:0a:8f:80:ea:71:a9:2d:43:70:94:34:
                    55:82:bd:70:60:05:45:35:cb:0f:8b:f7:f4:da:e7:
                    4c:a2:b2:7f:66:49:9b:8e:c7:3c:71:2c:66:20:45:
                    f8:6b:2b:66:04:0d:d9:58:2f:aa:b6:a0:94:c1:aa:
                    1e:ec:90:cc:c7:fd:20:d9:9c:8f:27:79:cf:38:38:
                    49:34:5c:6c:a7:2c:26:c2:6e:59:9e:ab:37:e0:57:
                    7a:70:c3:90:c0:08:87:33:04:bb:b5:46:b9:96:4b:
                    55:5e:eb:00:16:43:9a:f6:d2:06:46:cc:25:67:76:
                    48:09:78:04:82:d2:78:4b:58:07:3c:a5:71:29:d1:
                    c3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C5:83:0B:D8:A4:09:F2:D6:DC:31:4B:3F:ED:F6:26:8F:8D:89:27
            X509v3 Authority Key Identifier:
                keyid:DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4d:f9:a6:38:0f:57:8e:de:81:a6:8d:eb:40:d5:44:91:4f:
         29:e5:15:2a:84:34:3f:7a:c5:80:2f:10:ce:33:85:21:2c:b4:
         76:47:50:5b:c7:0d:d7:4a:dc:37:3b:bd:ba:0e:37:d7:79:0b:
         1a:76:54:f7:56:95:c4:22:07:ff:0f:8d:60:b4:a2:ba:7e:14:
         2b:e8:e3:d0:b4:5f:bb:36:37:8e:81:1c:a2:0e:7b:cb:3a:b5:
         31:bb:23:93:fc:7a:a7:69:6b:94:31:bb:74:29:77:86:ea:27:
         95:71:ad:a5:e7:d9:72:21:4a:a9:24:14:d4:c1:0b:bd:10:68:
         89:a0:02:60:b8:7c:5b:9a:40:d7:28:ce:c4:b2:f3:75:7a:15:
         12:d4:f2:10:ee:d4:fe:8e:44:61:ea:98:e6:83:75:15:80:28:
         d6:eb:e3:46:c4:da:0d:81:40:5b:c9:7f:4a:c5:01:54:db:30:
         c1:c1:b1:cc:bc:f5:d9:46:5d:90:95:81:81:f3:4b:64:48:6e:
         77:49:84:81:7d:92:46:bd:f0:84:98:54:fd:52:a5:d5:be:47:
         76:28:8d:f9:31:f7:2f:48:3d:07:63:7b:4e:f4:d1:f1:85:f6:
         45:f9:78:e2:0f:f6:46:ab:49:81:f7:fe:b5:5f:c7:da:a0:5b:
         56:84:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:40 2024 by rpki-client on console-ams.rpki-client.org