Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft
File:                     9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft (raw, json)
Hash identifier:          VSjDkG/5zVld0+8MwFPvVw6L6ZXPhmiMkpGvATt9SNA=
Subject key identifier:   90:69:1D:69:77:00:9C:EB:AD:36:08:0A:EE:7C:5F:95:DF:40:08:D2
Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5
Certificate issuer:       /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5
Certificate serial:       2B1262059950AC86F09B0E9DE6E7348A9603DDAF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft
Manifest number:          45
Signing time:             Sun 24 Nov 2024 22:32:19 +0000
Manifest this update:     Sun 24 Nov 2024 22:27:19 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:19 +0000
Files and hashes:         1: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (hash: MVPunuL0q7ij3NQ6Rm2ZsfoQMcIAKWrLDjcXzxD0ul4=)
                          2: 9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl (hash: UPih5grmUDMWO5CkkDLP2TjRTqv79lkh1mII9WUzXf0=)
                          3: 3136302e32322e3230372e302f32342d3234203d3e20313532383235.roa (hash: lnr1eFTyKT3/IcClpnjgEYV6r1LeIKEtWF2eCPYH2u8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl
                          rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:12:62:05:99:50:ac:86:f0:9b:0e:9d:e6:e7:34:8a:96:03:dd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5
        Validity
            Not Before: Nov 24 22:27:19 2024 GMT
            Not After : Nov 28 01:00:19 2024 GMT
        Subject: CN=90691D6977009CEBAD36080AEE7C5F95DF4008D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:2a:ae:11:97:8e:8b:2b:ca:89:bd:2b:b7:
                    27:19:37:78:53:31:b4:cc:4d:8b:cc:7c:01:e7:15:
                    60:b9:8d:4e:c6:ba:73:bf:4e:10:c4:49:1b:9b:ab:
                    49:f8:c5:80:96:b2:1f:f7:06:2f:b1:45:04:f0:30:
                    02:9d:51:30:b8:b8:03:bd:d1:0e:f8:b4:74:7a:6d:
                    b5:9a:f0:81:b4:80:1f:6d:40:a9:8d:6f:ba:2c:51:
                    8a:3a:88:66:96:25:a2:6f:70:09:80:4a:01:45:b7:
                    14:41:57:91:d7:8e:eb:3f:3d:e5:03:89:c6:11:d4:
                    e9:ff:ff:e4:74:01:5a:c3:31:22:fa:eb:3d:e9:a0:
                    cb:5b:41:57:3d:bc:57:f4:63:6b:98:98:ca:3b:25:
                    78:40:4e:c0:9c:29:f2:70:61:1e:58:6c:09:99:6c:
                    19:05:70:a8:ce:5c:ee:a5:98:2e:fc:75:eb:03:78:
                    34:da:29:f7:cd:eb:6f:63:cf:15:d9:07:88:0e:ae:
                    b2:9e:4c:65:98:45:85:49:08:38:0d:a2:06:5c:f3:
                    68:fd:ed:37:0a:2e:f4:56:2e:42:0d:15:7f:0a:06:
                    8e:e6:66:fe:93:ae:d5:ec:c7:a9:57:6f:82:01:5f:
                    8d:16:1a:c3:34:ba:56:6c:ff:b4:5b:f8:62:4a:61:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:69:1D:69:77:00:9C:EB:AD:36:08:0A:EE:7C:5F:95:DF:40:08:D2
            X509v3 Authority Key Identifier:
                keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2e:38:08:db:f2:8e:5a:bd:16:27:78:23:d4:c0:ad:44:4c:
         45:e6:3c:6a:4b:9c:ff:c9:15:a9:73:fa:48:d1:e5:ea:64:00:
         4e:e5:b9:e7:19:29:11:7d:70:58:d2:cd:e0:73:15:11:ae:83:
         3f:a6:db:31:f9:e8:45:6e:58:32:ef:ef:75:f1:2e:4b:7e:e7:
         8c:c8:b4:bb:21:32:a9:28:cd:2d:8d:53:6f:49:58:b5:3d:b4:
         f1:64:fe:91:0b:07:8e:84:36:89:f3:96:0b:e7:d0:41:42:94:
         ef:42:79:c9:a6:17:1b:21:2b:a3:59:4a:25:a6:bb:7c:73:b8:
         c8:b9:c1:5c:00:af:2f:5b:c0:77:c5:c6:26:4c:ba:31:e2:7b:
         dd:10:5d:75:e7:85:74:28:8a:20:63:fd:27:5c:d8:f2:6b:b1:
         4c:02:1a:03:90:12:69:ea:c4:94:69:97:84:fd:fb:07:06:91:
         b0:0c:ad:e1:de:50:1e:03:da:1a:7a:cf:fb:86:bf:94:41:14:
         62:bc:b7:50:d0:3b:1a:2f:fb:21:61:76:e4:a6:1b:fc:8d:c9:
         ab:f9:e9:58:48:14:af:ee:7e:50:df:de:a2:44:3b:f4:68:01:
         d5:33:23:80:95:cf:74:bc:8b:a0:89:19:ce:d9:3f:07:1f:38:
         f0:78:ae:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:56:42 2024 by rpki-client on console-fra.rpki-client.org