Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
File:                     9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json)
Hash identifier:          UlKcuWfHwbZeiSuHftFIBjQYYz2Ymvhi7eH04sPCaRY=
Subject key identifier:   73:69:03:69:70:C9:F5:64:ED:41:81:DF:16:D9:00:8A:80:2C:3E:17
Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
Certificate issuer:       /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Certificate serial:       3BFCB511A922574DFB1F57078DAA94AB083B0E8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
Manifest number:          02F9
Signing time:             Sun 24 Nov 2024 20:50:57 +0000
Manifest this update:     Sun 24 Nov 2024 20:45:57 +0000
Manifest next update:     Wed 27 Nov 2024 23:03:57 +0000
Files and hashes:         1: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: 6VWTrpXN1ZLAmUad28ZPtDVWN7B3Vkx34OJXjdZMP7Y=)
                          2: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 9/cl6A5sV+JF/ML+mNQ+5eQtQPiH4xG802RzlIwIQvg=)
                          3: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: mdcoyjfXTj5zKlqt2+BARpB8Ne7nSF/K9FFaPhv5anY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl
                          rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fc:b5:11:a9:22:57:4d:fb:1f:57:07:8d:aa:94:ab:08:3b:0e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
        Validity
            Not Before: Nov 24 20:45:57 2024 GMT
            Not After : Nov 27 23:03:57 2024 GMT
        Subject: CN=7369036970C9F564ED4181DF16D9008A802C3E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:c1:ca:89:99:ed:01:ba:12:a0:95:fa:ce:
                    12:fb:93:88:bd:6b:33:6e:0e:04:35:16:92:ba:04:
                    3c:7f:23:62:f8:ae:ac:05:9d:eb:c7:b7:b1:04:54:
                    be:c4:7a:fa:2d:a1:99:e9:bf:be:40:51:45:8f:27:
                    fb:f6:79:e7:33:68:b9:5f:8d:a7:b8:f3:f7:ea:18:
                    e0:9c:6a:26:8f:99:0d:36:22:db:a0:13:6b:cc:a1:
                    0f:9c:61:3e:f2:e3:1b:dd:14:ee:77:d5:3a:ef:5a:
                    be:03:f7:6e:7c:9e:2e:6a:9a:9d:24:a9:30:46:f9:
                    cd:bb:ff:55:e0:69:84:9d:12:54:f7:cb:35:17:0f:
                    29:96:ce:12:46:57:87:2c:d2:ac:14:1b:c7:68:6d:
                    a6:5e:80:70:0d:81:b3:95:4e:2b:37:ea:ab:4d:5b:
                    70:70:bf:5c:50:47:3a:67:5c:50:b8:a1:00:65:70:
                    bb:70:37:7a:bf:57:fd:11:1e:78:06:af:38:1c:b7:
                    45:3d:14:e4:ae:c9:37:97:ff:18:a3:0c:54:e1:b7:
                    02:a9:f3:a7:7b:e8:70:eb:97:54:37:5e:90:8d:bf:
                    f6:0b:04:84:d2:b9:69:8c:13:10:37:87:7f:ce:4e:
                    2f:c5:46:ef:0b:ae:be:26:f6:c2:e9:ad:71:59:a0:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:69:03:69:70:C9:F5:64:ED:41:81:DF:16:D9:00:8A:80:2C:3E:17
            X509v3 Authority Key Identifier:
                keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:77:3c:50:c3:ae:9d:9c:9e:0f:42:8d:63:b3:e3:ab:51:de:
         bc:3e:7a:61:c2:c4:1b:7d:a5:80:2e:bd:40:b8:44:e5:13:55:
         f2:f7:dd:d3:51:cc:9a:80:71:a5:f0:d9:89:00:26:b1:92:28:
         b8:48:f8:bf:4a:91:15:68:6d:76:16:d2:ca:b4:78:0d:e6:63:
         d9:d2:ce:31:50:f7:28:58:b9:77:00:2c:53:89:f7:21:f7:13:
         aa:90:43:d7:7c:bb:2f:66:b8:91:9a:3c:63:0b:e0:e3:8e:89:
         c8:51:1b:04:21:05:9d:d3:73:98:17:1b:da:5a:f6:b8:cc:1e:
         cb:9d:02:96:e4:96:3a:6c:92:66:10:29:ee:c5:8e:b7:5b:32:
         4c:cb:86:69:7a:3d:20:b7:7e:39:cf:78:b4:6c:7d:41:c3:ab:
         72:02:c6:77:92:12:fa:e7:81:be:5e:79:3c:72:48:e7:57:e3:
         9b:28:f6:57:ac:dc:10:bf:ba:c8:cd:49:f6:65:07:7a:e9:44:
         ab:3c:42:1b:97:85:2e:cd:26:91:4f:65:86:97:2c:f8:e4:fb:
         03:c7:e2:db:8e:b1:c6:c2:2e:ce:6f:e4:cb:ed:c9:19:c7:ad:
         b5:e9:27:46:f8:c2:10:5d:48:a0:d3:79:88:c7:2e:e7:cd:78:
         fe:29:c9:35
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUO/y1EakiV037H1cHjaqUqwg7Do8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4
Mzg5RDdCRjAeFw0yNDExMjQyMDQ1NTdaFw0yNDExMjcyMzAzNTdaMDMxMTAvBgNV
BAMTKDczNjkwMzY5NzBDOUY1NjRFRDQxODFERjE2RDkwMDhBODAyQzNFMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4MHKiZntAboSoJX6zhL7k4i9
azNuDgQ1FpK6BDx/I2L4rqwFnevHt7EEVL7EevotoZnpv75AUUWPJ/v2eeczaLlf
jae48/fqGOCcaiaPmQ02ItugE2vMoQ+cYT7y4xvdFO531TrvWr4D9258ni5qmp0k
qTBG+c27/1XgaYSdElT3yzUXDymWzhJGV4cs0qwUG8dobaZegHANgbOVTis36qtN
W3Bwv1xQRzpnXFC4oQBlcLtwN3q/V/0RHngGrzgct0U9FOSuyTeX/xijDFThtwKp
86d76HDrl1Q3XpCNv/YLBITSuWmMExA3h3/OTi/FRu8Lrr4m9sLprXFZoLu3AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUc2kDaXDJ9WTtQYHfFtkAioAsPhcwHwYDVR0j
BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5
NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5
RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh
YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2
NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJd3PFDDrp2cng9CjWOz46tR3rw+emHCxBt9
pYAuvUC4ROUTVfL33dNRzJqAcaXw2YkAJrGSKLhI+L9KkRVobXYW0sq0eA3mY9nS
zjFQ9yhYuXcALFOJ9yH3E6qQQ9d8uy9muJGaPGML4OOOichRGwQhBZ3Tc5gXG9pa
9rjMHsudApbkljpskmYQKe7FjrdbMkzLhml6PSC3fjnPeLRsfUHDq3ICxneSEvrn
gb5eeTxySOdX45so9les3BC/usjNSfZlB3rpRKs8QhuXhS7NJpFPZYaXLPjk+wPH
4tuOscbCLs5v5MvtyRnHrbXpJ0b4whBdSKDTeYjHLufNeP4pyTU=
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:10:13 2024 by rpki-client on console-fra.rpki-client.org