Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft
File:                     3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft (raw, json)
Hash identifier:          TNtJRq7dxxMei8xicIhyHiCZe9u3GO8rX9p3SaZQaws=
Subject key identifier:   48:26:CD:55:73:76:61:C8:5F:6C:B5:BD:7E:EA:89:46:D2:6D:B7:7D
Authority key identifier: 3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA
Certificate issuer:       /CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA
Certificate serial:       485ACEAE925B3BBB36FE40D4B8B11078271E6531
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft
Manifest number:          02D1
Signing time:             Sat 23 Nov 2024 04:41:58 +0000
Manifest this update:     Sat 23 Nov 2024 04:36:58 +0000
Manifest next update:     Tue 26 Nov 2024 05:55:58 +0000
Files and hashes:         1: 3130332e3137312e3138322e302f32332d3233203d3e20313432333735.roa (hash: 4eyGQzbDfR8YSCjXgShhm8vCsUJZCrVFODEnBrRJhv8=)
                          2: 3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (hash: 7VSc9Gcvnpfn7ZPPafV+FSx6VsyDCdcR7tm8J+oVFFo=)
                          3: 3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl (hash: EsibrBhHlVu9kvU9GZpiKf49l2659OSLI4usHNmhpLA=)
                          4: 3130332e3137312e3138332e302f32342d3234203d3e20313432333735.roa (hash: KwtUaoClH3kiNpvEIWalSEf5bxo2cymUbkAJRaf/ygM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl
                          rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5a:ce:ae:92:5b:3b:bb:36:fe:40:d4:b8:b1:10:78:27:1e:65:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA
        Validity
            Not Before: Nov 23 04:36:58 2024 GMT
            Not After : Nov 26 05:55:58 2024 GMT
        Subject: CN=4826CD55737661C85F6CB5BD7EEA8946D26DB77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:51:b6:db:19:b7:f8:d1:5d:88:eb:73:d6:
                    c5:44:86:5f:66:42:58:a5:18:1e:d5:79:95:c5:f8:
                    7d:b4:27:03:37:0d:d0:47:35:fa:e8:ff:b5:08:07:
                    b9:6d:6c:68:41:c4:05:91:3f:42:01:59:7e:67:49:
                    d6:bf:be:0b:54:84:22:1c:43:5a:ac:4b:1f:95:10:
                    13:7c:40:4d:e6:e6:cd:19:b8:94:16:bb:33:8c:0d:
                    3d:4c:94:03:36:eb:de:a6:39:3b:a6:38:9a:d2:93:
                    ef:b7:d8:7c:b7:f0:22:d0:64:4c:35:71:01:c0:3c:
                    1b:e8:b7:30:de:7e:6d:5e:c7:37:6f:19:ae:1e:35:
                    1c:fa:94:f6:c8:ec:da:01:ad:e4:6d:c0:34:39:45:
                    d9:1d:89:16:cb:df:7b:70:11:13:51:b8:de:5e:42:
                    9a:27:89:95:9e:c5:21:c1:27:7f:c9:c7:3a:d9:9a:
                    49:74:a1:71:a9:bb:74:68:39:92:a5:a8:45:8e:c6:
                    3c:0b:8f:08:0d:0d:15:9c:24:28:6d:68:07:f9:a4:
                    9e:45:2f:f8:73:42:0b:0b:a7:0d:d2:52:a5:5a:6e:
                    61:da:d6:cb:0b:78:74:34:5b:c6:0e:48:2e:44:88:
                    58:97:d2:a4:7c:06:9a:13:a4:46:0f:ae:3e:12:7e:
                    a9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:26:CD:55:73:76:61:C8:5F:6C:B5:BD:7E:EA:89:46:D2:6D:B7:7D
            X509v3 Authority Key Identifier:
                keyid:3E:CE:7D:2E:9C:2F:F3:D5:D3:0D:29:4D:74:92:C3:FE:F6:51:BA:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3ECE7D2E9C2FF3D5D30D294D7492C3FEF651BAAA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b5:3f:4f:92:1f:22:96:c3:07:2b:d1:5b:56:a6:0f:59:08:
         f9:17:18:74:fd:ab:f1:67:7f:a2:f6:d1:f5:4f:c7:0c:2f:ac:
         0e:8d:56:ec:67:e5:d5:89:4d:c5:95:48:e1:cc:43:30:f5:0e:
         dd:b4:32:b5:a0:10:fe:d3:e0:c7:45:4f:d0:ac:57:34:af:51:
         6d:39:dd:98:a2:73:77:09:2e:4c:0b:a0:b4:9c:86:e6:dd:8e:
         11:b5:b8:70:f4:eb:41:e8:0d:3a:74:af:fd:5a:fc:b1:45:43:
         ad:3d:00:3a:ee:d2:c9:6f:bf:dc:b6:b6:fe:7d:06:8f:01:b4:
         b2:9a:f9:ae:70:16:1c:57:cd:73:92:32:29:9d:08:52:81:f8:
         4e:9b:13:f5:ad:ae:df:33:c6:20:f9:f8:72:a6:45:86:ee:49:
         6f:b6:88:f5:62:49:1f:ad:52:9e:ca:ec:ad:2f:7f:1e:69:e9:
         72:c2:a1:6e:fc:e2:dc:30:cc:31:0b:ed:99:24:c4:b7:fd:38:
         83:c9:27:51:f5:0d:00:ab:20:3f:8b:cc:e4:cb:1b:c6:1d:1b:
         ac:3d:eb:f7:16:7f:76:f2:84:d7:bf:7d:66:7f:d9:b2:a2:c4:
         ce:32:38:30:b1:c8:ab:a2:5b:20:c6:87:e9:8a:06:98:47:f5:
         51:9a:f5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:01 2024 by rpki-client on console-ams.rpki-client.org