Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft
File:                     CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json)
Hash identifier:          3JZp9iZf834cyvxT4vwKObQAExRzGsLdpdcKmLLJdEA=
Subject key identifier:   03:B0:5A:1F:11:8D:CD:9A:36:15:57:A7:36:14:5B:FA:48:C0:60:90
Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33
Certificate issuer:       /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233
Certificate serial:       25359B43119DC449651B71505E0DB561443FDAF8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft
Manifest number:          0221
Signing time:             Sat 23 Nov 2024 11:22:19 +0000
Manifest this update:     Sat 23 Nov 2024 11:17:19 +0000
Manifest next update:     Tue 26 Nov 2024 21:20:19 +0000
Files and hashes:         1: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: iJSB4Tl2dCbFuiTRh7IWs9g86a1v/pjGccwQNvmJqM4=)
                          2: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: smRQTHuEirOr9v57KTEVETZNRdmH7PyRLrMEBgvwhSM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl
                          rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:35:9b:43:11:9d:c4:49:65:1b:71:50:5e:0d:b5:61:44:3f:da:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233
        Validity
            Not Before: Nov 23 11:17:19 2024 GMT
            Not After : Nov 26 21:20:19 2024 GMT
        Subject: CN=03B05A1F118DCD9A361557A736145BFA48C06090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:cb:2d:0f:3b:52:16:69:36:87:34:0f:f6:
                    81:ce:5a:30:d9:bc:85:42:08:78:25:6c:75:e3:63:
                    3f:cd:7e:8a:fe:5b:52:31:e6:61:bd:f3:08:26:0c:
                    ca:35:e3:8e:e9:2a:41:66:3b:b8:54:48:40:f3:a8:
                    6f:18:b1:d5:eb:1d:2e:a7:4c:dd:42:52:26:9f:47:
                    f5:8a:f8:c0:b7:cd:09:9b:6b:e4:39:93:58:01:85:
                    75:a1:54:05:90:43:cc:78:fe:76:bb:60:23:28:83:
                    b8:48:31:01:e4:5a:4a:15:34:11:f8:74:d1:d3:a6:
                    48:43:0e:b1:e0:62:e4:63:c5:b3:b2:96:f2:54:29:
                    8a:55:44:ef:ef:7a:a1:a9:65:63:de:f8:30:06:57:
                    c3:ac:8a:41:6a:08:0b:5a:7a:3b:e5:8e:72:e1:da:
                    58:f1:24:94:f7:22:e4:c0:78:bd:e9:27:76:5a:4f:
                    dc:e4:6b:06:04:73:15:10:63:c6:0d:46:6b:10:6c:
                    4f:f2:5a:d4:af:3e:c1:e9:72:9b:6a:74:92:df:96:
                    93:48:95:32:73:05:30:7d:e3:82:c1:33:fa:92:a1:
                    b9:26:c5:7f:e1:72:88:8d:99:2f:29:e9:46:78:69:
                    9b:e6:76:12:af:b1:6e:27:15:b0:a3:da:23:b0:e6:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B0:5A:1F:11:8D:CD:9A:36:15:57:A7:36:14:5B:FA:48:C0:60:90
            X509v3 Authority Key Identifier:
                keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:28:67:37:3d:94:41:ce:7d:0f:d8:90:c0:17:68:14:ab:cc:
         16:83:a4:25:5b:09:6f:92:1d:1f:a6:9f:47:b7:8f:9d:a2:f2:
         71:4b:a0:56:25:48:f2:81:2b:ca:67:f5:dd:17:95:a7:52:84:
         d8:7a:28:5b:f5:84:71:05:c9:b5:bf:1e:80:bd:ab:e8:bc:3d:
         18:52:9f:ec:ed:3a:b2:6b:8a:b5:90:8a:97:03:c0:76:a7:13:
         4d:cb:d9:e3:66:5b:ad:3c:01:cd:76:3a:67:f8:96:0d:db:2e:
         85:da:7f:51:2e:05:c1:47:61:60:e8:a7:2b:30:3e:64:eb:4f:
         0f:b1:4d:df:ec:25:18:50:7f:81:43:37:2b:32:0b:af:38:36:
         f8:9d:73:d8:b8:89:1f:73:a4:fc:b7:59:12:0c:eb:d1:0d:9f:
         d1:12:c1:75:00:76:18:af:fe:f0:fd:ba:95:f3:a0:c6:8f:71:
         e5:c1:61:3e:bb:10:f1:a9:34:24:51:62:bf:f9:f3:b5:8e:a4:
         79:4e:85:ab:df:3e:c8:1e:d6:c1:ae:6b:8d:1b:3d:21:c1:62:
         9e:54:2c:18:c4:5c:55:b7:f0:5b:4d:e9:5a:c9:1d:cc:fa:96:
         5e:3a:a4:3c:ae:42:5f:71:c6:37:21:b8:48:19:8c:7b:7a:e4:
         57:cf:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:26 2024 by rpki-client on console-ams.rpki-client.org