Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft
File:                     6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft (raw, json)
Hash identifier:          69nf3Js1rZsdL7SJicWu8AO8fmz6UqO00m687SjuFPs=
Subject key identifier:   A7:85:B3:AC:77:AD:5B:CE:55:1C:CE:43:67:32:03:19:AD:BB:44:A8
Authority key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92
Certificate issuer:       /CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92
Certificate serial:       643F8667AA2DEF48E92B5EF50355C403AD896AF7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft
Manifest number:          28
Signing time:             Sun 24 Nov 2024 04:01:14 +0000
Manifest this update:     Sun 24 Nov 2024 03:56:14 +0000
Manifest next update:     Wed 27 Nov 2024 11:32:14 +0000
Files and hashes:         1: 3130332e3130332e3138302e302f32332d3234203d3e20313336383437.roa (hash: z7JSBWPGJlOn/ZqqGa8az/lIZkw26RQslHPZ9GMpJ4M=)
                          2: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl (hash: dN/YRc6n0auHfK2DIlpkX5qCQ5Hd2VQKQLDTKsvGpRw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl
                          rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3f:86:67:aa:2d:ef:48:e9:2b:5e:f5:03:55:c4:03:ad:89:6a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92
        Validity
            Not Before: Nov 24 03:56:14 2024 GMT
            Not After : Nov 27 11:32:14 2024 GMT
        Subject: CN=A785B3AC77AD5BCE551CCE4367320319ADBB44A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:47:af:d3:c3:f9:c4:00:cd:db:d0:e1:fc:
                    54:f8:31:fb:b9:8a:73:84:7c:e2:fb:0c:ff:d1:56:
                    1a:d3:da:08:26:df:c3:bd:cd:98:fb:24:35:6e:97:
                    e0:a2:9b:ee:75:cc:d0:3a:8c:5e:12:d8:51:74:3e:
                    d6:ed:2e:9a:95:0f:43:58:6b:3e:30:4b:60:4d:7d:
                    93:56:38:b9:d2:69:8b:36:0c:34:4c:42:78:69:cb:
                    68:fd:8c:fe:cb:ac:42:c3:dc:da:b8:10:6b:9a:48:
                    a9:e2:65:91:0f:d2:10:2d:03:b1:b9:d7:a5:69:0f:
                    2c:5c:ac:e8:e4:2b:7a:a0:d3:06:61:b1:1a:c5:f7:
                    57:54:04:f2:33:6f:2c:78:41:82:77:28:af:00:ce:
                    db:83:20:00:9f:43:df:9a:69:e7:2d:d5:ae:98:0a:
                    49:99:4f:54:3c:df:71:ff:5c:b4:de:bd:25:34:bd:
                    83:fe:a3:e8:95:b4:60:b8:36:c8:82:f2:c6:41:b4:
                    3f:8d:5f:55:68:ac:aa:76:b2:6b:c0:ac:25:58:35:
                    3f:95:c3:b6:47:27:3f:34:19:17:99:d7:04:92:f6:
                    da:bc:f9:44:fd:89:99:3e:8d:8f:4d:47:94:37:70:
                    0b:f2:79:a5:eb:a9:a4:bc:8a:c5:fd:8e:37:5c:e8:
                    66:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:85:B3:AC:77:AD:5B:CE:55:1C:CE:43:67:32:03:19:AD:BB:44:A8
            X509v3 Authority Key Identifier:
                keyid:6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:36:7d:58:1b:04:d3:10:48:8d:97:24:ca:96:5e:1a:ad:b3:
         cb:f6:dd:fe:5d:83:de:b2:f7:6b:5f:2a:b4:53:02:a7:f4:f3:
         3c:d5:a8:3d:3c:ed:cd:5e:8b:70:bb:1d:f3:6a:ab:38:f1:e8:
         ef:f2:8f:7a:3c:ad:fb:2b:32:b4:ad:4f:b3:32:d9:55:cf:5a:
         97:a8:a3:7c:18:5d:8d:0c:9c:27:9c:93:b4:4e:9e:40:66:8e:
         ab:c8:7a:ef:0e:49:73:2b:bd:34:d8:95:46:f7:ca:f5:dd:89:
         67:ef:79:1e:d2:ab:39:a4:d5:09:c2:aa:89:5c:88:17:f9:53:
         50:3f:1f:53:61:83:e6:bb:71:e8:06:25:ee:1f:60:94:ba:06:
         92:0c:80:a5:be:c5:8b:61:0c:5d:0f:be:5f:57:ee:02:9c:fa:
         9b:d7:f2:88:39:00:f5:97:d2:6a:c1:df:e5:29:3e:4f:b8:7b:
         eb:21:c8:cf:9c:60:61:cb:4e:10:e3:d4:bd:ba:7f:5a:c8:52:
         6d:55:3a:5a:ee:0f:63:62:31:9b:8c:40:92:21:e8:bf:9b:95:
         fa:f9:27:81:50:f8:13:f3:ed:6b:a3:1c:e5:6a:69:19:8d:bb:
         72:54:fd:c1:c4:81:8c:14:20:03:34:f7:3b:e3:0c:bd:b2:5a:
         ec:64:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:21 2024 by rpki-client on console-fra.rpki-client.org