Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
File:                     B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft (raw, json)
Hash identifier:          VeOTyDWOcifwL2SbQZszlTKKi2DpuIkE9WJKuZJbM40=
Subject key identifier:   73:D4:55:20:34:F2:B9:11:94:9E:0F:5B:C2:16:93:B9:4F:7D:94:FF
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       400A832EBC21EF75658535F8C3FB9BD8FC476CE5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
Manifest number:          049A
Signing time:             Fri 22 Nov 2024 07:22:02 +0000
Manifest this update:     Fri 22 Nov 2024 07:17:02 +0000
Manifest next update:     Mon 25 Nov 2024 18:16:02 +0000
Files and hashes:         1: 323430323a666463303a633830323a3a2f34382d3438203d3e20313337333633.roa (hash: OqPNts/R4WNZNbG6dENNnPAh4ln7S5k7kvsYkIg7/SQ=)
                          2: 323430323a666463303a633830303a3a2f34382d3438203d3e20313337333633.roa (hash: CicuutfGBOZwxeKedG/gAQ0s0WJUS9kFF32f9KFWSqU=)
                          3: 3230322e31302e35312e302f32342d3234203d3e20313332363334.roa (hash: zi8rRm5oIKEKnE8kP9VKx6LXAH8MoDxhh7gkXXwnmE4=)
                          4: 323430323a666463303a633830333a3a2f34382d3438203d3e20313337333633.roa (hash: jjYZ4eJUFFJPhThhvnf4AN9X0vH92RIvKoxNmwQOaeQ=)
                          5: 3230322e31302e35322e302f32322d3234203d3e20313337333633.roa (hash: 76i6JqRPOwnHfz2nalB/Pr/llZmjsHVWEK8YM+4BlfI=)
                          6: 323430323a666463303a3a2f33322d3438203d3e20313337333633.roa (hash: +1yC/o4yQ8yrAQnRrwpftPa4hg69QOS7fiqYPyjTIbI=)
                          7: 3230322e31302e33322e302f32332d3234203d3e20313337333633.roa (hash: HYX5VvbCXY9bcDF70c4upSy8Mrtc/ergqC8Mb9XpE7I=)
                          8: 323430323a666463303a633830313a3a2f34382d3438203d3e20313337333633.roa (hash: 5ZcibTabKO6oo8h37eajZx/JPR9G0YVZwJ8TaG55hAA=)
                          9: B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl (hash: LRN3fBN5SxVLNACvzSrmeOzJhm7S3CYqsGghjdPQAwU=)
                          10: 323430323a666463303a313337333a3a2f34382d3438203d3e20313337333633.roa (hash: ZqY1pOoBMxtHwJgpKYIYXH9Etbpxlko/adYLvVWUcXQ=)
                          11: 3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa (hash: 8fXa1f7300/W5Av08Qun2AqlD/GOx9dx833zFohML8Q=)
                          12: 3230322e31302e36322e302f32342d3234203d3e20313337333633.roa (hash: BWBkvGKJVEUR6qigx4mSlNse0k2gPu0zhVhYn27u/5c=)
                          13: 3230322e31302e35302e302f32342d3234203d3e20313332363334.roa (hash: V4x45qixtJTbxuX+QWYZaifYD0Nguh/nlMuK1R/uiCY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
                          rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0a:83:2e:bc:21:ef:75:65:85:35:f8:c3:fb:9b:d8:fc:47:6c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: Nov 22 07:17:02 2024 GMT
            Not After : Nov 25 18:16:02 2024 GMT
        Subject: CN=73D4552034F2B911949E0F5BC21693B94F7D94FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:e9:a2:b8:89:70:52:d4:bc:d6:a9:cf:47:
                    ec:61:bd:99:1a:79:94:24:45:73:9c:08:68:13:c0:
                    7a:5b:1c:33:96:e1:1b:5c:a7:77:cf:d1:cb:f1:28:
                    e5:bd:02:8a:8b:c4:b7:fd:88:79:1c:af:cf:d7:a2:
                    ef:41:1d:a3:e3:95:7f:9e:b1:de:07:c3:35:77:23:
                    f6:48:83:1f:a1:a7:50:28:59:e6:80:fb:1d:64:40:
                    f8:5c:5b:fb:40:22:fd:06:8d:e6:ec:e7:97:c5:55:
                    86:b3:7f:76:32:66:79:38:73:e9:ab:89:e1:91:56:
                    02:95:c3:38:a1:22:a6:a8:ae:50:4a:19:56:5c:06:
                    e9:56:ea:51:1b:87:8b:d5:94:f0:54:25:d7:ee:a6:
                    d5:09:c7:d6:9f:74:8f:ed:c3:2c:05:e5:bd:b4:dc:
                    42:43:07:9d:73:2e:51:eb:a4:93:dc:71:3c:15:f0:
                    3f:1a:38:b9:69:c4:be:90:b4:b2:1e:e5:64:26:80:
                    e5:d0:c4:20:23:61:ca:12:a6:93:83:65:25:de:87:
                    3a:60:50:1b:62:92:e9:ce:7a:d5:5d:2b:7d:59:7d:
                    f0:86:5b:c4:90:34:f2:c6:48:aa:86:da:e0:69:7c:
                    8f:4d:8c:ec:85:fd:44:57:5f:e0:db:2b:bb:55:e3:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D4:55:20:34:F2:B9:11:94:9E:0F:5B:C2:16:93:B9:4F:7D:94:FF
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e5:5c:e9:ea:77:f7:ac:0a:95:99:00:67:3d:4e:90:6f:e8:
         cb:68:d0:9a:85:23:af:06:78:36:02:ee:7a:38:67:52:5d:c0:
         40:c7:ef:cb:7b:76:99:4a:f3:5a:65:99:0f:fa:71:75:dc:02:
         65:5e:75:1e:e9:6a:c8:3b:0e:0e:2f:16:c5:85:95:ba:c1:ca:
         57:62:79:d3:44:70:d7:ea:61:d3:2b:52:92:9e:50:01:28:87:
         5c:93:d1:5b:24:1f:4b:f0:25:85:3c:d3:b9:4d:5c:49:91:3d:
         39:b5:d8:cd:17:00:dc:a4:6f:d5:0c:7c:28:99:86:ac:cb:1d:
         fa:a7:cb:48:68:59:6f:76:74:df:ee:f8:ef:2a:a2:af:82:dd:
         d1:94:bd:35:b7:56:e7:7a:c7:77:aa:3f:af:e5:fb:3d:37:aa:
         3b:59:45:73:63:db:ff:3c:09:c6:59:06:9b:24:3e:07:70:c7:
         5f:24:9a:52:64:ec:85:ef:33:e7:06:e4:4e:30:06:ee:1b:85:
         e2:13:6a:40:95:15:55:d4:43:37:7b:a8:66:47:a6:7f:87:e5:
         f9:d6:2b:d9:b0:9a:6f:49:e8:23:e7:fa:12:ed:36:21:65:48:
         b9:01:9b:04:82:55:7c:8a:04:d9:7b:e0:a1:5a:e9:8a:5c:dd:
         0b:63:89:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org