Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft
File:                     DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft (raw, json)
Hash identifier:          bo0lzS04aIDlbMZDt2cABc8V9RDy8H613K60e2dtWZE=
Subject key identifier:   B3:E4:35:5C:89:D7:50:48:17:37:FE:40:04:D0:38:DB:CB:32:E5:62
Authority key identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F
Certificate issuer:       /CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F
Certificate serial:       31A67BC22C1DE3AAF3E7409AE716EE6339B8457A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft
Manifest number:          3A
Signing time:             Mon 25 Nov 2024 04:20:53 +0000
Manifest this update:     Mon 25 Nov 2024 04:15:53 +0000
Manifest next update:     Thu 28 Nov 2024 05:11:53 +0000
Files and hashes:         1: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: rry2+zEAQCTnnp1DT6Cb11gc7Z2XdYT6O/X9Xn/Cg1E=)
                          2: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl (hash: xouAUTKFV/FWcaU1mrnAL7mj3agj/c4MdnWYQRsYXig=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl
                          rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a6:7b:c2:2c:1d:e3:aa:f3:e7:40:9a:e7:16:ee:63:39:b8:45:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F
        Validity
            Not Before: Nov 25 04:15:53 2024 GMT
            Not After : Nov 28 05:11:53 2024 GMT
        Subject: CN=B3E4355C89D750481737FE4004D038DBCB32E562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7a:10:e0:2a:e8:4d:e8:99:44:95:6a:27:c7:
                    ed:c5:0c:b7:77:e8:c8:ca:40:7f:08:dd:49:66:62:
                    da:b7:62:32:0f:b3:de:c3:da:d7:b0:0f:11:f8:87:
                    3d:21:2b:10:72:9a:dc:4d:1a:d1:60:43:17:9f:6e:
                    be:70:34:6c:53:5a:33:38:43:42:71:3a:5e:6d:7a:
                    14:72:72:80:25:e4:0d:c8:8d:4b:4c:81:fc:a5:a0:
                    ca:ee:0e:e1:0b:36:05:0e:ed:cd:14:1a:d1:02:c9:
                    4c:30:35:86:81:60:e8:1c:34:f6:96:2a:3e:9f:5f:
                    02:15:31:45:e1:b6:3c:89:c0:be:a9:fa:27:ad:0e:
                    72:87:e5:ec:cb:8a:5e:0f:ba:cb:6a:df:0a:b8:c4:
                    a7:1f:22:f4:bf:4a:34:90:5b:32:ed:1e:65:b2:9d:
                    0f:ed:5e:26:04:79:47:86:19:4d:9f:f8:f9:02:65:
                    62:e4:ca:6c:ed:2c:f0:d1:41:9f:92:25:c9:92:ca:
                    a7:04:70:00:41:a3:cd:7d:a0:4a:00:19:aa:f6:0a:
                    2a:67:41:29:06:e1:fa:0c:0b:c1:f0:21:c0:aa:f1:
                    1f:a2:28:cb:3c:90:dc:03:26:39:a3:3f:24:03:ad:
                    be:4f:f6:4a:13:d8:6d:78:eb:b7:7e:64:b3:09:8b:
                    fa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E4:35:5C:89:D7:50:48:17:37:FE:40:04:D0:38:DB:CB:32:E5:62
            X509v3 Authority Key Identifier:
                keyid:DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:fa:a9:1c:c7:ac:e4:2d:5d:e0:25:cb:47:74:02:dd:f7:00:
         7f:2f:b0:06:b1:bc:b3:1b:e6:ee:78:d5:65:a8:03:1a:3b:ae:
         e9:f4:2a:ed:b4:e5:3c:a5:f0:b3:91:66:9f:15:cf:b0:83:8e:
         4a:d1:b5:26:79:63:04:7e:0c:61:2c:ae:95:03:c5:9b:4b:2b:
         62:e5:88:55:1a:4a:51:b8:de:82:3c:76:a5:66:f9:d9:93:b6:
         21:fa:39:9f:40:40:21:7b:e8:ae:b7:b5:c7:93:37:73:8c:94:
         5a:d5:f1:11:62:2a:6c:dd:b2:43:24:55:ac:2d:9d:72:f4:c8:
         e9:2a:cf:21:13:c6:e6:e4:ef:33:30:4a:ae:31:29:61:a9:5c:
         d8:50:39:90:89:19:ee:3d:55:18:3a:51:5f:61:88:57:26:4b:
         91:6b:58:7a:e4:f2:14:99:e1:56:25:01:f0:e0:ae:13:7f:6d:
         04:2a:f2:d7:bf:46:45:d0:f3:21:a5:69:a5:0e:94:0a:b1:9f:
         84:23:d5:02:19:69:ae:f6:2a:dd:41:8a:b0:82:aa:e8:53:c0:
         17:83:06:bf:39:b9:df:25:26:9f:d2:3e:5f:57:fc:f2:b9:ed:
         d3:e7:20:57:13:64:ae:ea:fc:4d:11:f1:06:50:85:b1:49:50:
         70:3b:c2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:02:39 2024 by rpki-client on console-ams.rpki-client.org