Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft
File:                     0BB3D1874063172B5374865233070332233FB7B3.mft (raw, json)
Hash identifier:          3IcQUKCiOzINMHVcPssW8KDxUIdxGf7EH6G6bnulE9A=
Subject key identifier:   1F:C6:29:32:07:2D:C4:B5:43:FB:43:07:2B:4E:9D:30:50:F0:67:4A
Authority key identifier: 0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3
Certificate issuer:       /CN=0BB3D1874063172B5374865233070332233FB7B3
Certificate serial:       6ACEE61608DA7B272572D4746696F47DE5E121D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft
Manifest number:          0481
Signing time:             Thu 21 Nov 2024 21:01:34 +0000
Manifest this update:     Thu 21 Nov 2024 20:56:34 +0000
Manifest next update:     Mon 25 Nov 2024 06:50:34 +0000
Files and hashes:         1: 3230322e3135332e31362e302f32302d3234203d3e203233363636.roa (hash: lIHJiBrhgAwGzmgzYvKE6r/2yrga6HsryWNAwmBg8SQ=)
                          2: 3131372e3130342e3139322e302f31392d3234203d3e203233363636.roa (hash: deuwaG7mQV3WigL7u2AYxi8J4Q7QOGG4WxOsWxSJZyY=)
                          3: 0BB3D1874063172B5374865233070332233FB7B3.crl (hash: S9miwoVquKWdq7sRxdumuFNmvn1mA/6c8Q7YcG99wYY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl
                          rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ce:e6:16:08:da:7b:27:25:72:d4:74:66:96:f4:7d:e5:e1:21:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BB3D1874063172B5374865233070332233FB7B3
        Validity
            Not Before: Nov 21 20:56:34 2024 GMT
            Not After : Nov 25 06:50:34 2024 GMT
        Subject: CN=1FC62932072DC4B543FB43072B4E9D3050F0674A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:2a:65:fd:90:51:78:77:74:0a:a4:e1:5d:
                    a1:94:30:29:b2:4b:82:3f:d1:f5:e4:3c:9d:46:6c:
                    17:8f:ce:95:9d:0a:27:65:e4:af:ef:34:40:0b:13:
                    49:06:34:1c:68:ba:48:ea:43:00:89:92:cf:8e:10:
                    e6:f1:32:eb:5f:4f:be:6b:ca:b3:c2:9b:58:28:3e:
                    58:7c:6a:51:21:2c:9e:1c:8d:5e:e9:f1:45:aa:78:
                    81:18:bd:23:09:83:c3:47:36:95:c1:33:d9:73:63:
                    40:3f:b5:23:d0:22:fc:78:0f:a4:08:c3:ad:93:f8:
                    57:1c:ad:95:2e:6b:3b:a6:c3:d4:76:6e:ff:fc:a1:
                    98:31:38:2b:9a:8b:17:67:0f:b8:56:00:e2:01:10:
                    87:89:40:39:a1:cf:10:2d:8f:19:32:00:9b:04:89:
                    78:bf:c7:73:a8:1d:55:aa:cd:df:d6:d9:1f:e3:49:
                    df:f9:4b:e1:0c:12:84:c3:02:7c:df:a3:31:d0:1f:
                    c9:d5:66:36:24:9a:99:98:95:22:04:fc:8a:53:89:
                    2d:90:b7:23:68:35:a3:bd:0b:3b:b3:fa:f1:97:bd:
                    37:0a:9f:fc:5e:89:97:94:12:76:48:e6:eb:0e:b9:
                    5e:3c:f8:7a:2c:0d:2a:64:95:a1:79:b5:3a:02:63:
                    c9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C6:29:32:07:2D:C4:B5:43:FB:43:07:2B:4E:9D:30:50:F0:67:4A
            X509v3 Authority Key Identifier:
                keyid:0B:B3:D1:87:40:63:17:2B:53:74:86:52:33:07:03:32:23:3F:B7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BB3D1874063172B5374865233070332233FB7B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d5908b83-7f44-46e0-8535-6fb84b59d58a/0/0BB3D1874063172B5374865233070332233FB7B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:1b:0d:21:d6:cb:20:2f:ac:24:a4:26:c4:20:25:c7:14:1a:
         7f:a8:d1:24:3c:d3:0e:53:df:6f:07:17:dc:e4:53:e1:8e:4f:
         4e:30:fb:82:eb:3f:cb:9a:b3:bd:ed:f0:53:83:af:e6:a6:e8:
         30:e9:08:a1:3f:c0:61:9f:94:2e:1c:0b:68:1a:a6:8a:1d:cd:
         11:c6:c5:b8:2e:6c:6f:49:5b:7f:56:19:75:90:50:00:3d:82:
         d8:62:88:39:b8:5d:bc:77:db:77:aa:ea:88:30:8d:a1:58:54:
         43:de:33:a3:4a:d2:6b:9f:38:91:6e:94:e3:3d:bc:f9:40:11:
         fc:0c:7e:33:13:9a:29:65:7b:de:a2:66:09:fe:ad:07:25:66:
         63:73:16:ef:e1:6d:bc:3d:70:f0:dd:c5:3c:2c:b9:4b:39:31:
         d3:95:4d:14:db:d6:e1:d5:1b:83:73:f8:7f:8a:e5:b1:1c:b8:
         3e:96:f0:40:29:60:57:73:64:a1:2f:81:db:68:35:97:60:38:
         ca:3c:ef:d3:57:be:f5:7e:44:a0:e3:7b:2f:88:3b:74:92:13:
         db:73:5d:79:76:c6:33:0e:59:93:4a:6e:ca:88:5a:8b:d4:cb:
         48:7a:8d:cd:64:a1:b0:26:f4:3d:49:e4:66:03:34:35:ec:7e:
         00:d4:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org