Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
File:                     C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json)
Hash identifier:          RDJ1T5PnVRQDICCiCQVuUfmjq74eFimoNMOQorHLEuE=
Subject key identifier:   A2:3D:96:C5:06:30:28:A3:7E:8E:66:01:B2:6B:50:27:D7:8E:6C:D2
Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14
Certificate issuer:       /CN=C85C49978E8023F2D58521524D4EC616244CDC14
Certificate serial:       0A968BDE18F7E7042317B2A4F2C48D63ACC1E24F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
Manifest number:          0163
Signing time:             Thu 21 Nov 2024 20:52:21 +0000
Manifest this update:     Thu 21 Nov 2024 20:47:21 +0000
Manifest next update:     Sun 24 Nov 2024 23:41:21 +0000
Files and hashes:         1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: Mu1l5+n/VaKVFhf0WBtRhsGG+5nDUvBnH2F3gpMlpm8=)
                          2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: Bx1b38fbUxJjhjrxeEuROMcN+gxdeGCZuXwCivK7OCQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl
                          rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 23:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:96:8b:de:18:f7:e7:04:23:17:b2:a4:f2:c4:8d:63:ac:c1:e2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14
        Validity
            Not Before: Nov 21 20:47:21 2024 GMT
            Not After : Nov 24 23:41:21 2024 GMT
        Subject: CN=A23D96C5063028A37E8E6601B26B5027D78E6CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e6:6d:1a:57:97:10:cb:ef:58:95:8e:a4:f2:
                    53:2f:c3:9a:86:d2:c0:dc:ca:10:1e:6e:de:c8:72:
                    fa:ca:c4:7e:ef:88:83:f6:f5:a4:5f:20:7e:c6:31:
                    13:43:92:9e:ce:ba:bc:5f:8b:c6:6c:93:6d:91:58:
                    e9:ff:f2:31:cd:04:94:53:1e:f7:32:73:46:91:b5:
                    7e:45:2c:3e:6d:d3:ac:86:07:61:4d:ed:d7:f1:33:
                    d6:23:11:9e:2f:b5:f8:21:40:a2:46:5e:78:2a:23:
                    2a:40:60:8d:c0:98:c2:c7:3f:b1:af:41:08:20:48:
                    54:b4:32:fe:03:76:f2:01:2e:14:51:d0:2d:8c:ac:
                    bd:0b:fc:70:1b:4f:b2:1a:f2:b2:62:3f:7e:0a:5e:
                    01:f3:61:a5:2d:15:d1:6b:d5:65:80:e8:e0:14:97:
                    19:da:53:04:b5:49:ff:93:bd:6e:9b:a8:ea:5c:55:
                    34:24:a9:37:12:6f:a0:fe:28:81:b0:4a:29:e4:95:
                    82:5f:2a:96:30:aa:e3:96:b9:44:d1:f6:e2:5e:6b:
                    3c:97:0c:23:78:8a:29:81:cd:8f:c6:e6:e5:ac:b9:
                    ee:9e:25:82:c5:1b:19:51:92:d3:9a:df:da:d4:96:
                    c0:46:51:43:10:9b:3b:c0:55:07:a4:a1:72:a3:ef:
                    fc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3D:96:C5:06:30:28:A3:7E:8E:66:01:B2:6B:50:27:D7:8E:6C:D2
            X509v3 Authority Key Identifier:
                keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9a:cc:de:33:19:16:f9:0c:16:b3:3a:06:e6:d4:7d:be:b7:
         93:d1:3d:6d:42:7a:01:14:05:80:bc:e7:e3:81:a0:52:03:44:
         cf:7c:ae:b7:38:6b:6d:d7:75:7d:72:2e:86:4a:f7:23:7a:26:
         14:70:52:bb:60:91:b2:87:37:7b:1c:23:8c:0b:c6:ff:ca:6c:
         27:9c:00:d8:7d:fe:84:d9:92:66:0b:df:6d:75:41:37:c1:c3:
         6c:95:66:14:42:d1:09:b0:d3:f3:c6:8e:2c:fa:98:e3:c2:04:
         22:e5:d8:24:cd:b8:46:6d:e6:5c:bf:aa:d5:88:05:f1:a4:b4:
         03:4f:5b:6f:81:57:b7:cc:a6:4f:3b:82:29:e4:a3:26:ce:d1:
         e0:1a:bf:cf:f3:82:71:f0:3e:d1:bb:8d:3b:a6:7b:15:f2:2b:
         b3:81:db:7d:1c:79:66:1a:08:21:ba:2d:c5:42:f3:bd:a4:18:
         8b:52:a1:31:3b:b9:c0:5c:5e:22:69:3e:ee:17:35:d3:e5:aa:
         9d:c0:f3:d4:1e:c0:6d:f4:2e:de:a9:22:3e:2d:43:9c:ce:e2:
         e6:88:4c:b8:82:6f:cd:65:ec:20:ae:d1:77:64:16:e4:ff:a2:
         f6:41:41:ed:b4:a2:14:cf:f6:1f:75:ed:4b:d6:b3:17:79:5a:
         3d:8b:e1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org