Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft
File:                     CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json)
Hash identifier:          J518dIBpxFKTAp1JlL5wF5qkmqXP+bcgybnvfdnwrNE=
Subject key identifier:   28:8D:A1:5E:D5:B5:14:7E:3F:25:5F:46:14:B9:70:DD:30:90:2A:E9
Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8
Certificate issuer:       /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8
Certificate serial:       642AA13C26F1575261182F84EDF62FF1FD4EE2FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft
Manifest number:          C1
Signing time:             Sun 19 May 2024 01:10:03 +0000
Manifest this update:     Sun 19 May 2024 01:05:03 +0000
Manifest next update:     Wed 22 May 2024 06:49:03 +0000
Files and hashes:         1: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: rfABDI7khJrin4GTn8JOViFcwoo1DUsOkWVjecK1aGg=)
                          2: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: l4ma8hVqU2pmHhRCLeKyMsA8otLYSMbunfnVvrmccos=)
                          3: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: sXlYGi/ybZJBZ2Ofl9tPVdNbe5g2QNpZi22GjsRkZnA=)
                          4: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: LFjbc//lFqvoLouAwEFdpErXDeX8QgGxDcIzoMK2QLo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl
                          rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 23:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2a:a1:3c:26:f1:57:52:61:18:2f:84:ed:f6:2f:f1:fd:4e:e2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8
        Validity
            Not Before: May 19 01:05:03 2024 GMT
            Not After : May 22 06:49:03 2024 GMT
        Subject: CN=288DA15ED5B5147E3F255F4614B970DD30902AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:08:56:99:f9:e1:6a:ad:92:69:4a:8a:cf:
                    77:5c:97:69:0d:7f:0c:37:9b:27:cb:53:9d:28:2c:
                    46:28:b1:39:bc:d9:b2:f5:b7:5d:50:4c:0a:90:2e:
                    e1:4f:11:2c:4d:69:e7:04:e2:6f:07:35:ad:31:19:
                    fa:b7:10:be:95:82:4e:10:93:d4:de:91:8f:58:17:
                    fa:f6:52:8d:4d:f3:88:33:ee:2c:0a:92:72:e3:93:
                    92:de:b9:35:fb:21:ea:47:bb:bd:71:40:22:f5:69:
                    10:6d:82:a2:0d:70:d1:af:f4:de:64:7b:57:ef:9b:
                    64:0a:fb:cc:9c:ac:9d:8d:8b:80:22:84:0a:88:fd:
                    27:e3:73:f1:e2:0f:0b:7c:28:c5:07:ee:22:2b:71:
                    ae:8a:33:a6:25:bb:19:82:d2:72:80:54:0c:b2:9d:
                    f8:bc:84:1e:3b:18:04:45:29:a3:41:79:ce:9e:7e:
                    f2:73:73:23:88:e0:fd:ee:a8:5b:67:94:b3:2b:d5:
                    6f:bb:3e:c0:12:e1:ef:67:50:7a:95:18:3e:c0:35:
                    62:49:23:ba:5d:ab:d8:f1:48:76:9c:89:8a:a5:1a:
                    cc:3f:0f:c6:1d:3b:e8:a5:32:d6:fb:50:df:73:71:
                    6d:fa:4f:a2:2e:d6:ed:ab:67:c6:e9:32:43:79:1c:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8D:A1:5E:D5:B5:14:7E:3F:25:5F:46:14:B9:70:DD:30:90:2A:E9
            X509v3 Authority Key Identifier:
                keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f7:69:01:8b:9c:10:f1:21:8c:1a:2d:f9:3e:a6:21:71:f4:
         39:bf:66:9a:15:10:70:a7:8b:c6:48:8a:b4:26:38:6b:6c:cc:
         06:90:fe:d5:a4:d4:32:8b:2d:0f:26:a4:24:75:d8:4d:5b:f2:
         91:d1:78:d4:7c:75:d2:9b:d3:96:f5:87:b9:79:df:5c:a3:76:
         4c:51:a9:ab:59:49:84:38:ec:4e:95:f8:2e:f0:22:84:8e:48:
         1c:c0:49:b4:6c:2b:69:45:05:47:c6:85:57:56:34:20:8f:6d:
         c4:50:d4:fb:1c:d5:1e:b1:55:54:cf:99:96:98:e5:5b:9a:1c:
         9a:f2:05:ff:fc:c0:01:51:82:c9:4e:f5:b1:c0:d5:ca:ee:2b:
         4f:6a:dd:20:5d:18:b6:27:ae:69:77:8a:1a:b0:9b:d9:81:c0:
         b4:64:03:0c:72:e3:93:ec:38:f6:29:62:cf:1b:e0:b6:cf:88:
         4f:0e:85:21:3f:4a:f9:8f:9b:8d:3a:8b:65:4c:94:26:d8:a8:
         ab:70:30:a9:85:23:e7:c7:de:e6:47:75:5d:a1:14:5a:32:64:
         96:07:9e:ff:c1:7e:97:4b:cc:a3:85:e5:5f:47:22:a7:1c:86:
         0f:d5:d7:33:a9:bd:ba:8c:44:5b:e2:3a:5b:ee:b8:ab:dc:63:
         7f:ab:b3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:44:54 2024 by rpki-client on console-ams.rpki-client.org