Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft
File:                     2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json)
Hash identifier:          59UvhpG+Mozh34eX3o4hnCCHnADFg1ejFPOHFN0jA+8=
Subject key identifier:   CF:08:7B:EC:6E:AF:16:ED:1A:C8:A8:6D:D7:A1:65:B3:29:9A:9E:80
Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E
Certificate issuer:       /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E
Certificate serial:       17BF54C04E7A9734F10E39B853E89CB740763B3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft
Manifest number:          A9
Signing time:             Sun 24 Nov 2024 14:42:22 +0000
Manifest this update:     Sun 24 Nov 2024 14:37:22 +0000
Manifest next update:     Wed 27 Nov 2024 16:24:22 +0000
Files and hashes:         1: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: 3tho/NQEZ7clEuLXEou7D6b7IKWMhHVDrU5KgBLQwQM=)
                          2: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: cIX1Ycni4iOGrB0FBW0t4Y6pBwtJmF2zRyn9YAdPvaU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl
                          rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bf:54:c0:4e:7a:97:34:f1:0e:39:b8:53:e8:9c:b7:40:76:3b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E
        Validity
            Not Before: Nov 24 14:37:22 2024 GMT
            Not After : Nov 27 16:24:22 2024 GMT
        Subject: CN=CF087BEC6EAF16ED1AC8A86DD7A165B3299A9E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:27:1d:4c:b3:a0:04:e3:86:d3:96:70:c1:
                    06:d2:b1:44:f4:78:ce:d1:fb:56:2b:b3:c3:60:2d:
                    8c:a1:b3:f1:43:a2:b2:95:3f:aa:e4:69:61:cf:b5:
                    8f:b6:a7:38:62:19:50:20:c0:70:a7:ee:91:c6:f4:
                    4e:6b:57:f5:59:10:7b:9e:46:ba:c5:49:ff:98:0c:
                    b2:5e:bb:e7:8a:17:b2:50:b2:f5:ae:9c:1b:3e:b8:
                    80:0d:a2:f8:9b:21:25:31:aa:fe:2e:b7:14:64:18:
                    3b:67:0f:91:be:4b:a8:ba:41:40:67:4b:7a:e8:a3:
                    f5:92:40:e4:70:dd:3a:6e:54:e3:32:c5:6d:df:39:
                    fa:96:9b:8e:d3:c9:e1:6d:91:1c:95:d9:5d:fe:c1:
                    c0:a1:ec:88:45:a3:c7:72:dd:00:3c:1b:13:cc:07:
                    a1:28:da:ef:a5:1f:d8:26:b9:03:09:9b:50:98:e5:
                    f6:37:68:45:f8:d3:8d:4b:00:10:45:d9:5d:c6:8d:
                    43:0a:1b:42:e9:c3:5f:2a:4f:50:27:64:cd:c8:84:
                    f4:55:5c:93:f2:91:2e:e5:d2:88:16:56:e2:de:dd:
                    3f:d0:c2:5e:be:a5:2a:40:01:61:09:fa:b6:bc:e8:
                    59:6f:5d:06:04:c1:cf:c0:21:81:4a:92:0b:08:1c:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:08:7B:EC:6E:AF:16:ED:1A:C8:A8:6D:D7:A1:65:B3:29:9A:9E:80
            X509v3 Authority Key Identifier:
                keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f1:45:d0:08:be:00:46:26:29:7f:11:86:bc:f9:31:fd:c1:
         81:bc:9d:26:9a:ec:52:da:b4:68:9c:31:40:b5:cf:90:58:2b:
         7f:c1:1b:dd:27:6f:f8:fd:2f:64:ba:0a:db:47:49:78:e1:d0:
         31:d5:6a:49:a3:ad:dc:1b:e7:e3:37:b2:e9:e2:07:bb:90:e0:
         97:29:13:74:4e:43:21:65:08:8b:28:07:81:39:88:e0:5b:c7:
         ca:82:aa:5f:8b:ed:78:bb:d1:12:d8:64:2d:82:df:95:70:23:
         af:fb:2c:10:9e:ba:de:31:1e:3c:d2:67:0a:2a:23:d2:b8:c8:
         4c:da:6c:a2:ee:0d:0b:95:eb:0e:0e:43:db:8d:1f:2e:87:a7:
         e3:7e:b4:e9:ce:4b:5a:15:06:45:1f:92:9e:b6:5c:fd:06:b5:
         e9:ba:3c:74:e1:83:18:de:89:f3:87:61:5d:b9:cc:52:1a:94:
         2c:6c:a4:f5:42:b3:5d:a6:7f:67:52:80:c7:fd:eb:59:6d:28:
         ab:d8:36:7a:1f:30:f7:86:f4:25:65:dc:df:36:29:84:19:b7:
         4b:a7:a9:11:c6:90:3e:8f:09:aa:49:31:86:8f:7a:a0:20:21:
         d0:a4:6c:95:8a:28:79:d6:a2:cb:c0:8f:db:b7:fc:c3:fb:fb:
         ca:1a:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:09 2024 by rpki-client on console-ams.rpki-client.org