Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft
File:                     C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json)
Hash identifier:          sAncruk1GFVmg93d1rYIRFL3RenDcpZ9jiKyv79GGzs=
Subject key identifier:   C9:5A:6C:74:D5:75:63:FE:F4:5F:7A:F0:C9:E1:D8:5C:C5:C6:61:81
Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28
Certificate issuer:       /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728
Certificate serial:       26BDC2E3BF8B2A35AA4D3FA41130D6B99F4CDE5D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft
Manifest number:          0192
Signing time:             Fri 22 Nov 2024 01:02:35 +0000
Manifest this update:     Fri 22 Nov 2024 00:57:35 +0000
Manifest next update:     Mon 25 Nov 2024 10:31:35 +0000
Files and hashes:         1: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: XoL0ZPngBP0byGwDlhB4lXxaaXcnR74YfmodJijlChw=)
                          2: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: 2/5TZckWubTXUzgrmTNs3NUAJzLDFQn+wpvO5LjzFTI=)
                          3: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: YyEVJrT0CgKe9IZLzK8D0+XOXQwKdrh5lJYAX9wX/xk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl
                          rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bd:c2:e3:bf:8b:2a:35:aa:4d:3f:a4:11:30:d6:b9:9f:4c:de:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728
        Validity
            Not Before: Nov 22 00:57:35 2024 GMT
            Not After : Nov 25 10:31:35 2024 GMT
        Subject: CN=C95A6C74D57563FEF45F7AF0C9E1D85CC5C66181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:14:b7:7a:de:5c:1d:87:86:ec:dc:50:c6:
                    8d:9e:ba:f6:13:3c:15:f0:eb:77:aa:34:9b:82:67:
                    bc:5f:ef:48:56:22:08:a3:27:c9:f2:77:3d:ea:87:
                    17:01:f1:d7:3d:65:75:ce:b6:50:01:8b:81:32:6c:
                    28:ec:82:54:b1:92:aa:ca:af:31:fb:71:ae:e4:bc:
                    30:27:c6:8e:3b:5a:e4:e1:37:f0:a2:b8:22:47:73:
                    a2:d9:8f:22:e2:5d:b6:cd:a7:ce:ff:f4:3a:f2:b7:
                    e7:da:67:2f:52:30:06:a0:a3:b4:9a:66:a2:1c:81:
                    97:c5:13:08:b1:af:d3:b6:01:84:4d:e2:43:bd:26:
                    51:8f:58:83:ff:92:da:62:f3:40:af:7e:36:9b:52:
                    3f:90:28:f5:78:f9:8e:19:aa:f2:67:8b:a6:9c:80:
                    81:9c:7b:09:02:ae:94:ae:9c:1e:52:58:d1:f3:58:
                    2e:72:7c:25:83:2d:ba:45:03:b5:3d:75:4c:a0:11:
                    c8:73:db:e1:bc:a9:ba:d2:36:46:87:b9:0e:d5:45:
                    b6:3f:c8:2e:f2:3c:75:2b:96:1b:8a:8f:12:3d:b6:
                    10:87:fc:01:4f:4a:84:76:9f:c0:9a:02:f4:1d:ff:
                    b1:5b:18:30:59:d1:aa:38:09:25:cc:2a:85:11:a5:
                    bc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5A:6C:74:D5:75:63:FE:F4:5F:7A:F0:C9:E1:D8:5C:C5:C6:61:81
            X509v3 Authority Key Identifier:
                keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5c:48:88:d1:8e:c4:3a:84:a9:8a:88:e3:60:80:ab:40:59:
         4a:24:16:c2:a3:08:bc:08:6a:30:98:73:77:55:d9:68:d9:3c:
         b2:c8:88:e0:07:56:c1:01:d1:ca:07:7e:4e:6a:c1:51:92:8d:
         f9:0c:7d:ef:75:6f:5a:aa:d2:b6:21:d6:dd:cc:bd:3c:d3:49:
         31:75:e1:52:ef:cd:58:93:08:99:57:9d:b8:2c:f2:11:9e:d9:
         45:95:64:4f:a4:e1:17:fc:03:42:e7:45:06:f0:3c:ae:0b:2e:
         2b:b9:5c:f8:23:46:70:6c:52:dd:78:81:41:b4:a3:82:da:79:
         24:a9:aa:17:09:05:d9:94:36:bc:43:b8:ea:9a:f6:04:6e:e7:
         64:41:1c:1c:64:b4:03:80:1e:18:2e:8c:b7:bd:e5:4d:79:9c:
         07:c0:ec:c5:24:97:92:26:6a:2b:46:1f:02:c9:91:ba:4a:62:
         ee:58:56:b4:43:d9:bc:44:74:4a:7f:c6:65:a1:25:5f:78:84:
         ae:d2:78:61:31:0b:12:9c:8e:c0:ec:2a:96:5d:93:43:96:ba:
         13:f0:8c:cc:93:71:fb:6c:a5:3a:3e:a6:a2:cb:f9:9a:df:17:
         3d:81:22:bb:df:1d:e4:ad:f0:e8:34:4d:40:ac:56:97:27:cf:
         36:97:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:56 2024 by rpki-client on console-fra.rpki-client.org