Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
File:                     28E2707085C2950AF9267465A3801841D8077215.mft (raw, json)
Hash identifier:          wFH42gqgJOYuxYbZ+UCjcI/qwteMd51noN/kd86H9mc=
Subject key identifier:   39:92:A0:D5:8A:88:A5:7D:4B:6F:E0:7C:91:D3:59:DD:B0:8B:51:00
Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15
Certificate issuer:       /CN=28E2707085C2950AF9267465A3801841D8077215
Certificate serial:       036007C8E661E6D0EC741AE2ED10A14FB8E71499
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
Manifest number:          0155
Signing time:             Mon 25 Nov 2024 09:51:06 +0000
Manifest this update:     Mon 25 Nov 2024 09:46:06 +0000
Manifest next update:     Thu 28 Nov 2024 16:21:06 +0000
Files and hashes:         1: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: NEM92NLlOO0LaHXDKIjoogibVFw3/2ww7dqbWcCrAR4=)
                          2: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: GAmzCAzoPI+4HcsABxBZWaJGPyauDprmMRh/jUFWaeU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl
                          rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 11:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:60:07:c8:e6:61:e6:d0:ec:74:1a:e2:ed:10:a1:4f:b8:e7:14:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E2707085C2950AF9267465A3801841D8077215
        Validity
            Not Before: Nov 25 09:46:06 2024 GMT
            Not After : Nov 28 16:21:06 2024 GMT
        Subject: CN=3992A0D58A88A57D4B6FE07C91D359DDB08B5100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:95:8b:04:bc:d4:4e:18:bd:b6:67:0a:25:
                    87:b1:3f:2e:b9:2b:06:01:ec:0f:aa:24:e8:6c:ef:
                    f8:88:89:5a:3e:cb:da:6f:e6:75:79:0f:27:d5:37:
                    2b:5f:c9:00:e3:45:2f:10:29:cf:1c:f3:00:fe:38:
                    18:35:bf:05:d6:ef:1b:fd:81:c6:6d:3d:3b:5c:54:
                    94:5c:0e:10:80:1e:f6:5a:d5:70:10:ec:5a:fd:c0:
                    45:41:00:89:ca:54:00:4c:dd:dd:a5:0c:03:ba:e3:
                    6c:78:db:e5:b9:92:c4:b2:f8:c3:58:3a:07:51:74:
                    64:2f:df:36:c1:03:97:0b:1c:80:88:20:c2:cd:eb:
                    92:cd:46:be:10:05:d5:1e:2c:90:dc:23:2f:5e:01:
                    2b:17:a1:95:a4:06:94:cd:81:8d:26:c9:23:1d:81:
                    be:2f:6b:93:27:0c:c1:13:4d:a4:75:2f:6d:ea:6e:
                    77:28:57:ba:ff:4d:67:ed:bc:ae:0f:08:19:9c:80:
                    6c:99:ae:6b:3d:fc:9c:8d:3c:1b:b9:0a:52:1b:2e:
                    f8:bb:7c:b2:c2:b8:4b:0e:c0:a5:fd:97:f9:9b:05:
                    d7:07:ad:8a:79:48:ab:61:8d:ab:94:5d:60:b4:e4:
                    7e:98:6a:a5:1f:41:c9:33:98:a3:16:76:04:3c:03:
                    88:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:92:A0:D5:8A:88:A5:7D:4B:6F:E0:7C:91:D3:59:DD:B0:8B:51:00
            X509v3 Authority Key Identifier:
                keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:9d:50:61:52:8d:7e:35:c2:46:16:de:58:77:61:2e:49:db:
         fa:a9:33:dd:f4:80:06:87:34:f4:89:d7:63:98:7d:dd:eb:ca:
         81:c0:b2:ef:ad:e3:6e:02:cd:53:9f:a3:83:7c:55:89:03:83:
         4e:15:c4:26:90:a3:74:14:db:3b:bd:60:ba:f8:50:f0:ce:9d:
         a4:b8:51:17:e7:0b:0b:88:7a:9e:1a:a0:68:04:e3:fe:9b:26:
         62:97:57:4d:b4:b6:68:c0:e9:95:1c:bc:8a:54:78:94:64:ee:
         e5:20:6b:05:06:dd:05:82:81:a7:26:7b:85:52:54:18:e9:fe:
         cb:b0:a2:b7:fa:ec:4c:b9:3b:a2:70:ed:7d:a5:95:70:b7:af:
         ec:34:c2:8f:d7:15:f0:5b:26:d9:3c:01:5b:04:04:fc:4f:5d:
         b6:b9:95:1c:a2:f8:d2:df:3d:bf:74:49:5f:8d:dd:0c:22:50:
         d8:f2:71:51:9c:c4:e3:4e:7f:02:ad:41:6d:38:41:27:3c:23:
         80:ee:53:37:86:e4:37:e0:3e:b3:3e:36:a1:b9:8a:74:52:33:
         7b:86:eb:94:aa:0d:f8:2d:ba:43:5b:0e:db:ef:8d:4f:14:5b:
         7a:fa:c8:8a:8d:2c:fc:5a:2c:58:44:93:c6:f3:41:c5:a8:3f:
         3d:0a:98:f8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUA2AHyOZh5tDsdBri7RChT7jnFJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE
ODA3NzIxNTAeFw0yNDExMjUwOTQ2MDZaFw0yNDExMjgxNjIxMDZaMDMxMTAvBgNV
BAMTKDM5OTJBMEQ1OEE4OEE1N0Q0QjZGRTA3QzkxRDM1OUREQjA4QjUxMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6ZWLBLzUThi9tmcKJYexPy65
KwYB7A+qJOhs7/iIiVo+y9pv5nV5DyfVNytfyQDjRS8QKc8c8wD+OBg1vwXW7xv9
gcZtPTtcVJRcDhCAHvZa1XAQ7Fr9wEVBAInKVABM3d2lDAO642x42+W5ksSy+MNY
OgdRdGQv3zbBA5cLHICIIMLN65LNRr4QBdUeLJDcIy9eASsXoZWkBpTNgY0mySMd
gb4va5MnDMETTaR1L23qbncoV7r/TWftvK4PCBmcgGyZrms9/JyNPBu5ClIbLvi7
fLLCuEsOwKX9l/mbBdcHrYp5SKthjauUXWC05H6YaqUfQckzmKMWdgQ8A4gVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOZKg1YqIpX1Lb+B8kdNZ3bCLUQAwHwYDVR0j
BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1
QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3
NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi
MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4
NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABOdUGFSjX41wkYW3lh3YS5J2/qpM930gAaH
NPSJ12OYfd3ryoHAsu+t424CzVOfo4N8VYkDg04VxCaQo3QU2zu9YLr4UPDOnaS4
URfnCwuIep4aoGgE4/6bJmKXV020tmjA6ZUcvIpUeJRk7uUgawUG3QWCgacme4VS
VBjp/suworf67Ey5O6Jw7X2llXC3r+w0wo/XFfBbJtk8AVsEBPxPXba5lRyi+NLf
Pb90SV+N3QwiUNjycVGcxONOfwKtQW04QSc8I4DuUzeG5DfgPrM+NqG5inRSM3uG
65SqDfgtukNbDtvvjU8UW3r6yIqNLPxaLFhEk8bzQcWoPz0KmPg=
-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:15 2024 by rpki-client on console-fra.rpki-client.org