Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft
File:                     9AF96929E0E99A4F2539BB15137093D976C714CB.mft (raw, json)
Hash identifier:          bQ8UKfHUDWqJkzAwbozjjU14qWRm4sEXyozeIrVTEAk=
Subject key identifier:   0F:00:61:0A:B2:9C:85:A6:80:6F:42:02:1B:BA:E3:96:59:AE:C6:7C
Authority key identifier: 9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB
Certificate issuer:       /CN=9AF96929E0E99A4F2539BB15137093D976C714CB
Certificate serial:       579C0868B1959B368E534812D3131A88583D4669
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft
Manifest number:          2F
Signing time:             Thu 26 Sep 2024 13:11:23 +0000
Manifest this update:     Thu 26 Sep 2024 13:06:23 +0000
Manifest next update:     Sun 29 Sep 2024 19:16:23 +0000
Files and hashes:         1: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (hash: IO/iDpjxGtO9u/3pWEFUATuibuSL20cGvyzQOUML/eA=)
                          2: 323030313a6466323a376663303a3a2f34382d3438203d3e20313530323432.roa (hash: UQvjbahM5wEVbxKknlNWx8E15RhJ5vKpHF1nJfhJShU=)
                          3: 9AF96929E0E99A4F2539BB15137093D976C714CB.crl (hash: fyXlsIHxOgGygwgkywWtBBzK9da8NY+NbjGy6n9C604=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl
                          rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Sep 2024 19:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:9c:08:68:b1:95:9b:36:8e:53:48:12:d3:13:1a:88:58:3d:46:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF96929E0E99A4F2539BB15137093D976C714CB
        Validity
            Not Before: Sep 26 13:06:23 2024 GMT
            Not After : Sep 29 19:16:23 2024 GMT
        Subject: CN=0F00610AB29C85A6806F42021BBAE39659AEC67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:50:b2:5a:f8:50:ec:69:ac:95:c8:48:8b:
                    9e:63:6b:6c:74:5b:a7:fa:4e:f5:db:14:69:47:eb:
                    2e:b5:cb:52:88:4c:2a:5a:a2:50:ac:d9:01:fd:12:
                    f8:81:c5:1b:8e:68:86:4a:01:8a:ca:18:c3:5a:43:
                    91:be:e9:ec:d9:d8:18:43:c6:5f:e2:55:ca:75:5a:
                    f0:7e:bf:cd:88:ab:a8:c2:d9:3f:71:d7:2b:f9:68:
                    d4:8b:04:84:f8:11:a6:af:15:d1:1b:fe:9a:bf:f2:
                    99:74:32:ab:99:a3:93:d6:13:49:8e:d4:1a:64:3b:
                    8e:d8:c3:03:98:10:66:e4:c6:d4:e5:99:64:35:39:
                    37:5c:6b:d9:f3:9d:13:6c:9c:7a:f2:41:6a:40:c5:
                    52:2f:f8:0a:44:23:e2:31:3a:62:61:42:1b:e0:3c:
                    11:61:7c:89:1a:ec:aa:b4:fc:a5:37:89:ed:dc:b6:
                    53:dc:9a:59:11:c2:15:03:30:3c:31:b2:a0:ff:d7:
                    2b:0e:e4:71:ff:15:99:df:e0:ce:ff:7a:f1:a7:c9:
                    97:39:0e:69:19:6f:2d:0c:10:35:db:ee:2b:36:36:
                    8e:f7:6b:cd:5d:72:3e:0f:96:08:97:69:29:65:91:
                    2d:1f:c4:c9:3a:1b:e1:46:eb:29:f3:5a:2b:c1:31:
                    5c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:00:61:0A:B2:9C:85:A6:80:6F:42:02:1B:BA:E3:96:59:AE:C6:7C
            X509v3 Authority Key Identifier:
                keyid:9A:F9:69:29:E0:E9:9A:4F:25:39:BB:15:13:70:93:D9:76:C7:14:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AF96929E0E99A4F2539BB15137093D976C714CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3521e5ee-5882-4943-b408-43c37582fb0b/0/9AF96929E0E99A4F2539BB15137093D976C714CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8d:9e:77:26:bf:97:d6:af:70:a1:eb:e1:c5:57:09:40:fa:
         ea:b0:52:e6:71:52:58:8b:55:9a:d9:ed:32:75:e5:af:06:fa:
         21:a7:a7:01:1a:f7:86:7e:7b:b2:99:1f:cd:99:58:0f:6d:68:
         65:33:c4:94:e3:24:16:69:c3:43:de:9d:36:6e:2f:90:8d:b6:
         9b:f5:22:2c:84:45:5b:60:eb:10:85:37:ea:42:3b:ab:24:16:
         da:7e:9c:61:69:60:8a:7f:f8:6d:00:e3:08:bb:e3:62:36:40:
         9f:73:bf:95:88:cf:c8:4c:0d:1b:e0:f0:3c:e1:32:f7:5f:d4:
         df:e4:56:64:07:17:26:47:2c:9d:c5:eb:4b:b8:91:2b:eb:5e:
         18:aa:44:c0:30:02:29:27:74:91:53:1a:57:26:49:70:ef:47:
         71:f4:95:e3:49:06:5e:53:a8:73:a6:1c:13:27:18:36:07:dc:
         4e:9b:82:fd:cc:fc:a3:45:c5:d7:90:e0:ef:2b:bb:80:87:31:
         61:72:9d:77:86:45:9e:33:a8:85:dc:2c:23:f8:c3:1f:c7:0b:
         c7:0c:2e:14:cc:4b:44:df:73:f7:c9:6f:6b:de:bf:bf:de:d8:
         ac:a9:2f:79:ab:18:75:f6:1b:e7:cf:f0:17:c4:10:ea:0b:8c:
         36:c6:a5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 15:01:27 2024 by rpki-client on console-fra.rpki-client.org