Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft
File:                     5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json)
Hash identifier:          +oFmp8O47/vDPTBabl2I5PGUR7kaRQGr5LpPvIfUsFs=
Subject key identifier:   CD:36:97:5E:4F:01:D0:E4:6F:82:4F:EE:BC:F3:FD:E6:A3:D5:18:8D
Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A
Certificate issuer:       /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A
Certificate serial:       44E0E3900130F75E893EE253F26D8BAC185126C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft
Manifest number:          01CF
Signing time:             Thu 21 Nov 2024 17:11:53 +0000
Manifest this update:     Thu 21 Nov 2024 17:06:53 +0000
Manifest next update:     Sun 24 Nov 2024 21:48:53 +0000
Files and hashes:         1: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: iUCtyB1SH4aYaHAvs6hPLomv66gNGhyITEGyG0w8ODc=)
                          2: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: 6o6UV6EWnqRog88zjUO/wi78skrQiDZC+hAAPPWcQ8Y=)
                          3: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: jdeXq+Y2gtPdQZvPe/FsmavhSNgRHXt+v0Vk47jgGQk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl
                          rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e0:e3:90:01:30:f7:5e:89:3e:e2:53:f2:6d:8b:ac:18:51:26:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A
        Validity
            Not Before: Nov 21 17:06:53 2024 GMT
            Not After : Nov 24 21:48:53 2024 GMT
        Subject: CN=CD36975E4F01D0E46F824FEEBCF3FDE6A3D5188D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:3c:28:4b:57:0b:9d:61:c1:ac:3a:59:2c:
                    79:0f:71:8a:9f:cd:1b:c7:e7:33:28:ff:db:f0:c9:
                    15:bc:a8:6b:ae:ac:4e:55:4f:44:79:00:e7:5a:b6:
                    9d:1c:dd:0c:8f:11:b7:35:9f:5f:ed:17:3b:7b:c4:
                    4a:e9:3e:1f:38:18:49:8c:56:98:89:74:8f:c3:91:
                    b0:3b:d7:bf:15:2f:8e:8f:45:67:12:e1:be:b9:9b:
                    d4:d0:b1:87:25:e1:aa:5b:41:f9:7a:93:72:6b:b0:
                    0b:83:e2:78:87:98:a2:fa:4f:b9:48:b2:1b:33:b0:
                    6b:cb:88:53:28:90:f0:15:2a:5b:71:cf:14:01:fd:
                    c0:22:ed:0f:76:d2:ea:0a:98:87:6d:f1:53:70:a6:
                    8d:43:66:d0:aa:e0:bb:91:41:b7:9f:a2:c6:71:42:
                    d1:81:26:8c:c0:a1:38:0e:fe:28:ca:d5:ea:03:7d:
                    8d:56:48:69:21:69:0c:d0:d9:85:bf:4e:57:9c:26:
                    5f:0f:48:5a:55:5b:4c:85:65:ed:a7:46:ab:3e:cb:
                    b9:cc:b7:ee:9d:bc:58:dc:da:bb:2f:bf:b1:6d:23:
                    34:46:ec:44:55:c1:19:53:dc:68:0d:95:ad:d7:f1:
                    02:b7:f2:f2:9e:0c:21:9f:b5:24:69:fb:ac:3e:f5:
                    aa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:36:97:5E:4F:01:D0:E4:6F:82:4F:EE:BC:F3:FD:E6:A3:D5:18:8D
            X509v3 Authority Key Identifier:
                keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c4:a6:41:22:85:1f:4a:a6:9d:80:b4:69:5a:fc:9a:95:6c:
         44:af:61:b3:b6:67:ad:11:53:cc:7b:09:01:6f:6d:27:9f:e5:
         f0:c5:ba:b7:26:7e:1b:d0:8a:0e:42:c5:16:ff:5a:f8:3e:eb:
         9a:f3:9e:d0:6d:d8:4d:90:e5:a0:f5:05:06:5e:eb:a8:02:e4:
         fa:22:cc:88:78:89:cd:d3:05:c4:ae:d3:f7:c0:46:f1:1c:e3:
         99:5b:d8:df:de:0e:7c:65:1a:de:48:d5:71:06:ca:ec:bd:eb:
         f5:cc:24:b9:18:8b:7c:6b:b3:fd:01:52:b4:75:df:63:ca:05:
         2f:2b:25:04:cb:0d:0e:97:69:2e:4e:a3:d5:67:c4:97:39:3a:
         fe:b7:72:f6:32:be:0d:23:61:d6:ee:1a:65:38:50:7d:91:1a:
         5b:8e:54:c1:54:fc:98:87:85:e8:00:45:97:72:91:d3:ce:20:
         09:6f:cf:05:52:b7:e7:69:53:ff:3e:6d:9a:46:a0:97:48:05:
         bf:81:6e:74:3b:f8:6a:be:14:57:21:d4:3e:21:1c:5e:27:a8:
         8c:2e:a9:29:82:ac:9d:e3:c1:42:e3:27:92:64:af:05:88:06:
         be:6e:84:1b:b6:bb:1c:73:f8:98:ca:75:ab:44:19:eb:c3:9c:
         fd:f3:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org