Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
File:                     2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json)
Hash identifier:          my9qIrsrwr8EvSe8PEAR3oJl1UJ761tKrfefcRquuSo=
Subject key identifier:   3E:FE:8E:20:DA:8A:94:45:B7:47:49:FE:E4:E3:AF:C6:78:E9:0C:C1
Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D
Certificate issuer:       /CN=2370B87417B78EB4410F4394F29FB327D1401F0D
Certificate serial:       0592FAD62080842A5B97588DCF473FD67E594304
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
Manifest number:          0147
Signing time:             Thu 21 Nov 2024 07:51:55 +0000
Manifest this update:     Thu 21 Nov 2024 07:46:55 +0000
Manifest next update:     Sun 24 Nov 2024 08:59:55 +0000
Files and hashes:         1: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: EuZkuHIlSaj82xE0GWoz4GAtuFIhoF+l9vRSJspBJV0=)
                          2: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: pWX6st2R0SdkrPZ5N6aXjR3cpWBzfglitpW1xQhugXc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl
                          rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:92:fa:d6:20:80:84:2a:5b:97:58:8d:cf:47:3f:d6:7e:59:43:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D
        Validity
            Not Before: Nov 21 07:46:55 2024 GMT
            Not After : Nov 24 08:59:55 2024 GMT
        Subject: CN=3EFE8E20DA8A9445B74749FEE4E3AFC678E90CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:51:58:da:33:b4:89:4c:7a:96:fd:89:29:
                    4b:45:23:7b:2b:36:f9:67:c6:60:2a:36:de:e4:2a:
                    d0:2b:6b:cc:d1:1a:2b:9d:fb:79:fb:f6:4f:bb:1d:
                    82:33:ae:a3:17:c5:dc:ab:ac:d7:8c:21:99:28:4a:
                    a4:36:8b:52:1c:c2:eb:64:9c:8e:4c:3e:b0:59:b0:
                    79:24:7f:4b:eb:0e:c4:22:59:63:0b:69:ae:bf:0a:
                    78:34:84:86:d8:f1:04:d4:8e:d2:ac:2a:64:3b:11:
                    ff:a5:15:90:63:88:36:f0:e4:6a:d3:e7:33:7c:ea:
                    c4:71:55:fb:47:a6:5a:af:84:d9:5b:d1:fc:d4:5a:
                    81:8e:11:05:fb:e2:cd:7f:5a:f7:44:c3:d0:d2:3c:
                    71:ef:f8:2c:8c:18:0e:37:be:24:0e:49:7b:3c:3b:
                    90:ef:9a:47:e6:d6:0e:90:cf:09:95:d8:73:e8:0d:
                    1b:9c:73:98:38:fb:70:50:63:5c:cb:32:09:2d:bd:
                    db:ff:9a:08:a4:63:df:64:1d:72:5c:8d:f5:c4:de:
                    08:11:75:12:56:6c:d8:ab:c6:24:a6:ab:ff:57:f2:
                    e0:4e:86:1b:61:b7:3e:b9:90:23:d7:01:07:1a:1b:
                    6e:c2:9d:cc:65:9f:4d:21:43:46:25:52:ca:6e:65:
                    9a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FE:8E:20:DA:8A:94:45:B7:47:49:FE:E4:E3:AF:C6:78:E9:0C:C1
            X509v3 Authority Key Identifier:
                keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:54:11:7c:84:32:5f:24:3b:af:09:9d:e8:20:86:0d:f6:4d:
         74:8a:67:71:73:73:59:ab:91:4b:f7:6e:47:76:5e:ed:1e:e1:
         0e:2f:10:08:d9:76:06:8d:f5:03:35:83:ca:95:2d:bc:9c:81:
         4d:a3:ae:3f:f6:f1:67:fe:4f:0d:de:9b:f3:d8:02:30:67:32:
         c3:28:9c:59:17:be:a4:c5:36:a7:69:68:0c:fe:e3:ac:f6:24:
         25:68:1a:63:7e:30:e2:2a:bd:d5:e3:68:e4:4d:d2:93:cb:b5:
         89:c2:e3:6d:65:3d:0b:3b:36:5a:22:22:1f:82:79:89:ec:5c:
         b6:5e:f8:1b:d0:fb:a2:8e:a0:72:de:34:d3:d5:fd:01:cf:e2:
         ac:53:f8:5d:62:21:e4:6a:3e:c6:24:7b:96:1d:43:8a:92:13:
         67:d1:24:b3:32:03:31:ee:af:5a:71:a3:f7:55:77:43:2e:14:
         ef:7e:1a:58:43:f2:03:02:96:0b:72:8e:41:1b:83:16:6e:a2:
         e0:f0:77:3f:90:46:36:67:c0:67:16:59:c3:cc:0a:b4:a8:aa:
         2d:43:68:c9:32:68:95:b3:59:07:e5:0c:27:5b:07:5d:9c:ba:
         78:41:65:05:0b:c3:d3:f5:ac:80:cb:05:3f:6a:22:0d:47:fe:
         82:b4:0f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:39 2024 by rpki-client on console-fra.rpki-client.org