Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft
File:                     9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json)
Hash identifier:          kAXAgeXpqImtwvuJBTTMElfZU3IxYEd5l9rHOqEef3U=
Subject key identifier:   2C:49:2C:0B:11:72:6C:AC:E0:E3:AD:13:2D:21:B1:C0:8D:82:BB:47
Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76
Certificate issuer:       /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076
Certificate serial:       20FA3E4255A8A14778904A3F23BCF9A9C0C0FB37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft
Manifest number:          16
Signing time:             Fri 22 Nov 2024 23:50:56 +0000
Manifest this update:     Fri 22 Nov 2024 23:45:56 +0000
Manifest next update:     Tue 26 Nov 2024 01:27:56 +0000
Files and hashes:         1: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: 7j0r9wEVW4/qCNW6lM3S9r4JEHmoumPSy5Coq+uGfl0=)
                          2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: llXvyGLPDurj6bmSYN1tz+/ct/cQR7nz/GjhVW22jnQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl
                          rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 01:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fa:3e:42:55:a8:a1:47:78:90:4a:3f:23:bc:f9:a9:c0:c0:fb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076
        Validity
            Not Before: Nov 22 23:45:56 2024 GMT
            Not After : Nov 26 01:27:56 2024 GMT
        Subject: CN=2C492C0B11726CACE0E3AD132D21B1C08D82BB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:87:83:f8:96:01:9f:7d:9b:5f:8b:c5:d8:
                    75:27:61:75:e6:a8:da:cd:1e:04:af:2b:17:38:f7:
                    09:52:ec:08:12:6c:02:45:1d:62:52:fb:2e:09:12:
                    4d:11:3a:41:fc:7a:cc:36:07:b9:93:e5:7d:b1:ee:
                    b8:b9:8f:05:d2:84:8c:4e:d6:18:1a:10:b5:0a:f9:
                    5b:a3:a9:d6:e9:86:5a:b6:2c:5c:56:70:cc:30:2e:
                    46:fc:86:0c:f1:95:b2:1a:d9:3e:14:e6:7d:e5:04:
                    76:2c:bc:5f:7e:99:32:2b:79:6b:bb:47:43:27:be:
                    50:ce:09:a5:f9:c7:e6:0c:b5:d2:cd:d4:37:e0:96:
                    2a:9c:1b:fa:4c:e5:95:3b:37:3d:c2:c4:b5:8d:0c:
                    60:77:1f:7c:85:5d:cd:4f:eb:0a:8e:5e:14:53:32:
                    3a:12:fb:6a:8e:a3:ab:b1:e8:0e:ac:f9:e4:5b:73:
                    8e:81:ca:76:a1:7f:d9:e8:fc:f4:af:3c:35:1a:91:
                    12:f7:47:08:09:20:99:5a:31:c9:2c:4c:5f:e0:5a:
                    8b:4d:3c:35:a3:43:a7:61:fe:4f:ec:4a:97:c8:98:
                    34:2a:e3:4c:19:ad:d3:e2:47:0b:9c:34:57:d3:4e:
                    2b:88:20:5d:ff:28:33:b7:66:27:70:18:4a:86:ff:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:49:2C:0B:11:72:6C:AC:E0:E3:AD:13:2D:21:B1:C0:8D:82:BB:47
            X509v3 Authority Key Identifier:
                keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:d1:0c:7f:20:49:bf:15:bf:1c:d7:11:b0:cb:7e:b5:66:dc:
         8e:0c:ed:a9:18:05:c7:41:41:5a:39:1f:a5:10:12:4f:c8:8b:
         c8:74:38:b3:79:05:ab:81:c7:b6:8a:c7:77:88:03:5b:d4:a1:
         0a:88:27:4e:47:a0:23:53:77:81:c8:bb:b9:ee:8c:9f:e9:63:
         a6:42:42:48:03:fc:7b:63:f4:9a:60:7e:9f:64:a1:d5:fb:ef:
         a1:2f:c7:db:a0:19:d1:94:e6:03:25:08:65:8a:21:60:f0:ac:
         61:bb:71:83:75:d9:06:79:34:36:63:ba:7b:00:4e:64:2f:7a:
         19:ec:7f:86:dd:66:64:91:d2:7a:09:08:f8:8d:4a:3b:41:37:
         28:51:52:a3:c7:7e:7f:b2:66:52:1c:b1:f0:e3:89:49:80:7e:
         61:08:a9:1d:7e:cb:78:cf:da:8e:82:0d:15:4f:00:22:8a:26:
         cc:4f:08:4f:74:a7:22:ba:10:5c:11:de:7f:cb:ef:c6:cd:1d:
         e0:a7:eb:f5:5b:0f:63:09:91:2a:36:b9:4d:1c:89:fb:2f:b4:
         12:a4:a1:d7:ba:d5:96:fb:ce:26:cb:22:c0:4d:eb:95:62:8c:
         c1:6a:6d:fd:68:66:7b:5e:75:5a:a2:b2:9f:87:50:bd:f6:d7:
         89:cd:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:47:43 2024 by rpki-client on console-fra.rpki-client.org