Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft
File:                     285A5330FE006D3660B306BEE40EC7FEABA96574.mft (raw, json)
Hash identifier:          u9y3iAbR8aN1BvdpgCPFty6SDTJUITwfrXmTlEovwxQ=
Subject key identifier:   69:20:D7:E5:7F:1A:EB:EA:E5:D6:2C:CE:D7:CA:9A:B3:F8:8B:4F:4D
Authority key identifier: 28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74
Certificate issuer:       /CN=285A5330FE006D3660B306BEE40EC7FEABA96574
Certificate serial:       2BB365545B8D37BC60924BF31C53605F3CB0FC72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft
Manifest number:          017E
Signing time:             Fri 22 Nov 2024 05:40:54 +0000
Manifest this update:     Fri 22 Nov 2024 05:35:54 +0000
Manifest next update:     Mon 25 Nov 2024 10:35:54 +0000
Files and hashes:         1: 285A5330FE006D3660B306BEE40EC7FEABA96574.crl (hash: 6NehQ9rtuzX5eqeNpvEaclUx+EqTjsOTqGBFKObrLks=)
                          2: 3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (hash: KQ3p9CiCu1QeSKAF7Qynno9v6emmU/LNSMNOOshbQ5E=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl
                          rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b3:65:54:5b:8d:37:bc:60:92:4b:f3:1c:53:60:5f:3c:b0:fc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285A5330FE006D3660B306BEE40EC7FEABA96574
        Validity
            Not Before: Nov 22 05:35:54 2024 GMT
            Not After : Nov 25 10:35:54 2024 GMT
        Subject: CN=6920D7E57F1AEBEAE5D62CCED7CA9AB3F88B4F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:c0:cc:66:04:1e:86:8a:a4:e2:04:38:00:
                    df:a0:ea:8e:a5:b6:41:bb:d1:9c:28:89:3c:7e:60:
                    53:2a:03:be:1b:53:de:f3:bd:57:76:cd:29:c7:d0:
                    d7:53:64:05:c7:e7:0b:e7:4e:2e:75:f6:b7:95:87:
                    b4:f7:a3:68:99:9e:a5:23:ea:a4:07:19:c1:29:a8:
                    6f:d4:60:7b:ee:6e:b5:7a:f9:fe:8f:31:79:77:33:
                    2e:32:d7:a6:89:9d:fa:5f:c2:51:17:1e:d6:ca:cb:
                    c9:72:be:d8:68:cf:d7:38:f8:a5:a5:96:58:e2:12:
                    68:73:d0:51:28:54:7c:93:cc:38:45:2d:c9:0d:af:
                    b9:e1:9b:54:3b:6f:8c:fe:41:40:09:eb:49:b8:66:
                    ac:8c:34:e6:be:0f:1b:b0:49:c0:4a:4d:da:80:a3:
                    a2:38:8f:3c:4e:42:3d:e8:59:cd:9d:2c:c1:88:d8:
                    a1:fd:ce:37:36:b4:e3:00:67:80:12:2c:28:9a:f6:
                    17:30:41:e9:2b:d0:9a:18:f0:49:e0:1a:a7:67:6c:
                    46:0a:84:d5:d7:96:0f:8b:96:0d:e2:18:a4:84:79:
                    10:86:90:cb:24:15:b8:ef:6a:f4:84:ce:14:ad:34:
                    a4:a4:a8:bd:99:8e:dd:49:75:4e:ff:7f:5a:7a:03:
                    7f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:20:D7:E5:7F:1A:EB:EA:E5:D6:2C:CE:D7:CA:9A:B3:F8:8B:4F:4D
            X509v3 Authority Key Identifier:
                keyid:28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:3e:09:a2:4c:89:f9:a8:46:95:10:bd:ed:00:08:0f:27:bc:
         42:54:6f:dc:08:27:d9:0f:64:25:a2:3d:84:b1:1a:8b:10:ed:
         2b:07:61:5e:94:59:37:33:8b:85:7a:6b:9d:12:af:ae:48:bd:
         cc:29:96:69:c0:cc:e0:da:ac:c2:9f:fc:5f:86:78:27:a1:ed:
         21:60:02:7c:7e:e0:b8:90:41:c4:28:01:90:9a:1b:66:05:82:
         29:5a:1d:62:6d:c8:5d:e1:67:1b:ef:45:69:30:88:19:07:7d:
         97:a9:57:72:16:1c:1a:21:4e:76:75:af:fc:97:d7:66:de:ab:
         3c:0b:ea:fe:8a:cb:07:ff:52:7d:9e:5b:97:f9:fa:18:c8:2b:
         38:03:0b:65:6c:5c:3f:e2:e2:b9:36:a4:88:5a:c6:68:8f:fc:
         7f:3b:a6:fd:bc:05:f5:c2:f4:e0:09:66:83:bd:27:ec:c2:2b:
         0d:46:b7:38:3a:7b:07:61:0e:6a:b3:5d:24:f6:f0:e6:1c:56:
         b9:02:38:81:3c:28:35:31:02:fc:56:2b:76:d2:ac:84:21:8e:
         ab:7f:9c:6c:c7:9a:d9:6f:09:5a:16:17:4d:84:de:51:b5:13:
         94:c6:60:cc:c0:65:ca:d2:e6:3f:82:ca:e9:eb:45:8b:0c:75:
         a9:a6:d6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:24 2024 by rpki-client on console-ams.rpki-client.org