Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft
File:                     9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft (raw, json)
Hash identifier:          IPXtupIFZtjVDshNxSJ7XaM2r8olxaifX3ERnTQCzK8=
Subject key identifier:   8D:DE:18:C8:DE:37:7F:73:DA:E6:8B:50:A3:3C:38:49:4D:1C:CC:7D
Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40
Certificate issuer:       /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40
Certificate serial:       3B3B3E5BB2EBA33204BF7F3A2328B4EEE614A153
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft
Manifest number:          2C
Signing time:             Thu 21 Nov 2024 23:41:16 +0000
Manifest this update:     Thu 21 Nov 2024 23:36:16 +0000
Manifest next update:     Mon 25 Nov 2024 11:07:16 +0000
Files and hashes:         1: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl (hash: QMGgQHd1wpl0qYy5XLtgbO0Q0Hj14TogvMANpyYy/74=)
                          2: 3230322e39302e3139382e302f32332d3234203d3e203338373739.roa (hash: j+SkNC2jU7ZKCx7WNLHkcABxxG0uZTHYVDpXSnYoRAs=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl
                          rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3b:3e:5b:b2:eb:a3:32:04:bf:7f:3a:23:28:b4:ee:e6:14:a1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40
        Validity
            Not Before: Nov 21 23:36:16 2024 GMT
            Not After : Nov 25 11:07:16 2024 GMT
        Subject: CN=8DDE18C8DE377F73DAE68B50A33C38494D1CCC7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:91:c0:27:fc:a6:94:0a:a6:f0:98:c3:54:3f:
                    c5:a6:b0:27:07:0e:50:2d:9c:f9:4d:3d:d3:5f:d9:
                    ba:2f:3e:84:e0:bb:ee:ae:9d:43:af:bd:74:f1:44:
                    76:37:c5:52:8d:1e:d1:ba:06:03:40:10:59:f1:21:
                    05:8d:23:11:08:2c:73:15:de:6d:ff:37:ae:a7:74:
                    3f:1e:bd:2e:aa:fe:f7:85:9f:af:cd:c0:b7:06:16:
                    82:86:04:82:ce:35:85:ce:54:88:eb:cf:40:f9:b4:
                    17:6c:7b:99:47:6d:23:7e:92:c2:02:07:23:9b:c4:
                    a0:61:de:70:5c:e3:9d:19:a1:06:5f:46:4e:09:dd:
                    1c:c9:18:59:18:a9:af:1f:65:52:7a:8f:88:09:7a:
                    8b:cc:3d:6a:54:48:37:0f:24:dc:e9:1e:38:de:41:
                    e7:31:6a:99:c2:b6:8e:7b:b4:0f:a4:49:19:7e:a0:
                    f2:3d:e0:bd:32:94:27:a9:14:50:44:9c:80:13:47:
                    ee:e3:21:1a:83:7b:13:b5:40:18:80:51:1b:3a:c7:
                    50:da:cc:c4:50:bb:6e:67:d2:d5:5f:8b:14:33:74:
                    ce:93:93:c7:59:bb:88:de:f2:68:dd:0b:b1:7c:f9:
                    c8:66:cd:ce:b9:d1:4c:de:6a:51:fc:9b:32:13:12:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DE:18:C8:DE:37:7F:73:DA:E6:8B:50:A3:3C:38:49:4D:1C:CC:7D
            X509v3 Authority Key Identifier:
                keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:65:97:26:42:28:91:43:b3:22:a3:58:75:6e:b2:18:52:e8:
         70:40:85:21:47:7a:62:4e:fd:c0:28:61:30:60:80:57:cf:fc:
         45:cb:6e:3c:3b:a3:87:ab:3a:df:b8:6b:f5:6b:91:5f:9a:9e:
         d4:34:10:cf:ae:71:6b:eb:0b:82:4d:ac:f6:a6:0e:bc:ea:18:
         d7:4f:60:de:2c:06:0c:50:17:aa:25:ee:31:e2:9b:6a:08:51:
         f2:19:d2:cf:23:cf:42:71:7f:89:92:85:1d:ab:f7:a3:39:00:
         81:51:ad:2a:25:4d:73:a7:c3:f9:e0:8d:7b:d5:a1:ce:40:1f:
         5b:48:c1:ad:af:5d:11:2b:08:1f:5a:1f:55:57:b4:32:4c:1a:
         9e:49:72:8b:59:ae:d9:4f:96:89:86:09:61:fb:46:18:24:11:
         9d:9f:1e:2d:b1:78:df:44:17:7d:39:76:30:69:c5:99:33:c9:
         ce:7b:ee:6b:69:0a:d2:1b:ac:6d:e9:98:93:b2:2b:9f:ab:d7:
         28:4a:e7:ed:23:71:6e:04:3b:9a:0d:7d:47:29:6f:58:29:05:
         ce:41:7c:10:0a:a3:a5:b1:a4:7d:3b:dd:18:d0:9b:45:27:b8:
         82:10:46:4e:db:c0:a7:33:0d:81:2f:d0:2b:c9:3c:e6:10:ca:
         78:f3:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org