Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft
File:                     901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json)
Hash identifier:          3FiAx6tvHpf6MQZxeTPfF4YkDjK0LTKqaClOw4cJCok=
Subject key identifier:   2C:FC:2E:C0:5B:52:12:F3:AA:0E:3E:13:CC:EF:AB:17:B6:AC:CE:54
Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78
Certificate issuer:       /CN=901FA7FD9132963972C91517CDC7E5EE9077E078
Certificate serial:       1CB8C0496609B20822A4898BE8A5EBD5C24C8D32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft
Manifest number:          AB
Signing time:             Sun 24 Nov 2024 10:30:49 +0000
Manifest this update:     Sun 24 Nov 2024 10:25:49 +0000
Manifest next update:     Wed 27 Nov 2024 15:27:49 +0000
Files and hashes:         1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: fE0K6kemEjHQkXneF8c/2tLx2Q9GLlZizy631ppxEzs=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl
                          rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b8:c0:49:66:09:b2:08:22:a4:89:8b:e8:a5:eb:d5:c2:4c:8d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078
        Validity
            Not Before: Nov 24 10:25:49 2024 GMT
            Not After : Nov 27 15:27:49 2024 GMT
        Subject: CN=2CFC2EC05B5212F3AA0E3E13CCEFAB17B6ACCE54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9e:1a:3b:ed:f5:ea:3e:b8:06:d4:34:bf:9b:
                    a9:50:53:e8:26:d6:56:fc:60:8b:1c:5b:08:c9:96:
                    8a:89:d5:f8:8c:e5:8d:be:e9:b0:88:fe:3e:0c:45:
                    38:cb:88:aa:e4:f5:41:6a:c3:29:30:c8:a6:6e:e4:
                    c4:37:df:63:29:71:3d:6b:f7:fb:ca:43:da:ed:40:
                    92:78:ff:38:b6:ae:2d:4b:f5:a8:36:1c:3d:a1:24:
                    b3:1a:c1:dc:4c:e0:29:92:45:bd:d5:52:73:8c:f5:
                    8c:cd:c7:11:b1:be:91:77:0a:86:95:a2:d1:fb:14:
                    4c:20:9c:a1:81:f9:ca:c5:a0:2a:2b:bb:dc:db:fe:
                    f2:aa:78:91:06:15:10:9f:31:a5:8f:c2:ee:f2:4a:
                    bf:44:66:14:d7:5c:5c:b7:12:01:fc:e8:f7:5a:b9:
                    d1:26:7b:d2:25:b8:a9:2f:b1:f4:6f:7b:83:dd:2b:
                    59:4f:29:2b:d0:12:50:22:07:7f:c8:6b:7b:25:82:
                    91:35:1f:98:b6:36:d4:4f:c1:c3:16:5b:65:8b:6c:
                    e2:81:28:4b:d1:75:68:f3:2f:eb:a3:86:43:93:a3:
                    08:d4:59:64:8b:e0:88:08:2a:ab:1e:15:f5:e5:e8:
                    c5:98:cf:2b:de:30:2e:ec:fe:10:53:44:14:ec:62:
                    12:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FC:2E:C0:5B:52:12:F3:AA:0E:3E:13:CC:EF:AB:17:B6:AC:CE:54
            X509v3 Authority Key Identifier:
                keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b0:0b:7d:45:cb:5c:b5:d7:24:fc:be:d1:0b:0f:aa:46:bb:
         02:ea:07:8b:ce:9a:54:c6:71:4b:90:49:c0:27:a2:17:e6:e8:
         a6:fd:4a:27:b5:47:73:d4:f4:19:78:29:6f:45:b1:9d:f6:8f:
         6b:b3:4f:f7:60:af:58:67:69:c3:86:4e:24:fa:f3:e6:5d:29:
         86:a0:37:cc:fb:75:6a:1c:43:23:79:55:1e:8b:f3:9c:71:b6:
         d3:c1:52:d2:3f:d8:61:d4:67:0a:35:33:3c:78:2e:b5:a4:b4:
         0a:0a:d2:ce:f3:ee:cb:0f:bd:6c:4e:83:63:d6:28:fd:81:dc:
         1f:76:63:23:2c:32:d6:61:45:b2:24:64:5d:a5:35:0f:fa:a8:
         83:db:1d:67:de:fd:4f:73:2d:37:f6:fb:51:cb:52:96:cc:6f:
         8a:52:56:20:2b:ca:13:98:bb:18:92:b0:64:96:c7:0a:7c:bd:
         c4:90:5d:1c:a6:88:24:c3:21:d9:17:84:bf:a9:45:d7:79:0d:
         e6:6e:d2:8d:80:71:4c:c6:1b:90:ae:04:a9:2e:d3:29:60:5d:
         fe:ba:08:73:2d:d5:82:cb:79:8f:85:95:b1:65:39:a4:1a:37:
         9c:2a:bf:b7:9d:f5:f8:60:ac:0f:90:61:61:f8:67:28:08:b3:
         19:16:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:34:09 2024 by rpki-client on console-fra.rpki-client.org