Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
File:                     C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft (raw, json)
Hash identifier:          ZkRemcKwY1CAaDz1z3JCiGHOcE5sDx1AstXHi2vg20Q=
Subject key identifier:   98:A4:DC:63:D5:23:65:17:C5:74:E3:9D:53:7A:7A:12:C9:AC:23:7C
Authority key identifier: C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7
Certificate issuer:       /CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
Certificate serial:       0EE09AD80F53CB59158EFA41DF2E863C32EC3615
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
Manifest number:          04C0
Signing time:             Sat 05 Apr 2025 00:41:48 +0000
Manifest this update:     Sat 05 Apr 2025 00:36:48 +0000
Manifest next update:     Tue 08 Apr 2025 01:32:48 +0000
Files and hashes:         1: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl (hash: 8311JT2YHQgiz8mYi0mUHXOHlbV3Ds9Qa7YLxqxmrxo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl
                          rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e0:9a:d8:0f:53:cb:59:15:8e:fa:41:df:2e:86:3c:32:ec:36:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
        Validity
            Not Before: Apr  5 00:36:48 2025 GMT
            Not After : Apr  8 01:32:48 2025 GMT
        Subject: CN=98A4DC63D5236517C574E39D537A7A12C9AC237C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9e:63:76:a8:11:0f:b8:83:09:ed:10:ec:cc:
                    ac:77:95:e3:ad:ef:a7:84:ee:d7:b9:9c:c9:d0:2f:
                    d4:51:4f:13:f5:45:cd:24:d8:be:ac:60:dc:0e:d8:
                    60:5d:a2:22:34:19:34:2d:e5:31:29:a1:ae:5e:75:
                    b9:93:22:2f:8f:db:1c:32:63:4f:1b:f7:da:f7:e7:
                    da:31:fc:db:c0:2c:3d:4e:c1:b7:8c:89:ff:69:58:
                    e3:96:08:b0:3a:d0:55:2d:a9:27:49:8e:f9:53:58:
                    73:1d:52:58:35:29:95:25:bf:07:48:a6:38:44:4f:
                    a5:02:c7:42:3f:47:f9:53:8f:de:0a:3d:f0:a8:c1:
                    6e:e4:4a:1d:16:49:56:9c:36:56:43:0c:05:cd:04:
                    46:c6:78:b1:2f:38:af:44:74:65:f7:43:19:e0:cd:
                    c2:75:28:8a:f2:97:f2:0b:8c:16:b4:ca:56:17:76:
                    b8:c7:7f:96:00:90:6e:c6:51:7c:f9:65:d4:76:36:
                    37:b4:37:b1:74:b5:84:49:74:96:f2:17:9e:8c:b7:
                    fd:a8:d4:97:25:c2:cc:53:69:41:43:eb:34:0d:c3:
                    29:ac:02:2b:9b:fd:26:47:38:e4:73:86:37:47:e5:
                    61:84:9c:03:e2:5e:fa:3d:50:2b:96:cd:f4:0a:86:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A4:DC:63:D5:23:65:17:C5:74:E3:9D:53:7A:7A:12:C9:AC:23:7C
            X509v3 Authority Key Identifier:
                keyid:C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7e:9e:a1:42:4c:6a:fa:9d:5c:e4:5d:a6:c6:f6:4d:85:3d:
         d9:cd:5e:2d:37:8f:79:b1:3d:f6:db:ee:94:ae:7d:67:ec:57:
         3e:5b:e2:86:74:49:cc:7f:ce:d1:44:e8:c8:7b:2e:a9:c3:25:
         69:70:f0:ed:a7:f7:62:33:77:eb:bf:13:44:dd:3a:33:4c:1c:
         e8:f1:d5:c9:8c:de:6c:6b:47:28:8e:74:b3:9d:41:63:73:8f:
         d1:a0:e5:1e:70:79:e4:f6:d6:69:89:1e:50:9a:bb:95:e0:d2:
         5d:bd:cc:7e:79:91:39:53:15:89:58:c8:9a:d7:80:6b:00:82:
         83:8c:e2:43:ad:c5:b9:26:a9:31:f7:c5:84:22:66:c5:94:6e:
         cc:c7:a2:72:91:64:00:a1:7c:e3:23:e0:2d:1f:36:eb:97:f7:
         cb:67:10:c4:2e:f5:db:e8:f1:2c:40:8e:bd:ce:bc:2b:4b:a8:
         ad:65:32:0a:40:38:20:72:5f:60:68:62:35:25:39:be:7d:24:
         6f:d5:18:b6:d1:1d:eb:9d:f1:43:be:15:39:58:41:d8:e5:57:
         e6:16:dd:2c:6b:36:0f:f0:80:e8:ff:7a:38:7e:a3:8a:ff:e7:
         9b:42:1a:d0:c9:41:91:aa:fb:05:34:98:50:1d:19:1e:cb:48:
         fb:ed:a1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:17 2025 by rpki-client