Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
File:                     C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft (raw, json)
Hash identifier:          b1IP8PNiwC9B5lO0rahxwT0oiMBLkvmdllcwMf60I3M=
Subject key identifier:   EE:44:FB:80:1E:40:79:DA:8C:ED:50:91:2F:5F:47:1C:F4:F6:E4:8B
Authority key identifier: C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7
Certificate issuer:       /CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
Certificate serial:       27B8CF76E8BF4809CB523AF358885076C060608C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
Manifest number:          0431
Signing time:             Sat 18 May 2024 20:01:39 +0000
Manifest this update:     Sat 18 May 2024 19:56:39 +0000
Manifest next update:     Wed 22 May 2024 07:24:39 +0000
Files and hashes:         1: C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl (hash: oMnQ600MExJN3aD9LhOn8U5YGkGm2jJGxGZufdL3clg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl
                          rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 20:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b8:cf:76:e8:bf:48:09:cb:52:3a:f3:58:88:50:76:c0:60:60:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7
        Validity
            Not Before: May 18 19:56:39 2024 GMT
            Not After : May 22 07:24:39 2024 GMT
        Subject: CN=EE44FB801E4079DA8CED50912F5F471CF4F6E48B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:84:86:9a:99:7a:b3:20:b5:f6:18:43:e1:
                    71:e1:3c:be:af:ec:55:97:f5:54:e0:f2:41:b3:c8:
                    09:94:e7:a3:4f:bd:c1:56:92:4d:71:a8:f8:7e:2b:
                    24:fa:fb:23:dd:58:b0:cb:d1:8c:c7:3c:50:2a:bd:
                    6c:44:d5:09:18:7b:80:c4:1f:c0:09:8b:0f:ad:7f:
                    4b:4a:fa:7e:17:41:02:fa:6e:dc:bd:b7:18:d3:fa:
                    aa:aa:61:b2:37:3c:f2:9d:cd:51:06:5b:38:a5:72:
                    64:be:1c:99:58:84:ee:c2:e0:63:80:14:d5:c0:bc:
                    ca:77:c6:ff:fd:a7:4d:3b:62:03:84:da:e4:0c:9c:
                    6d:ff:9c:56:4e:e9:9b:b7:e2:bc:fe:b4:1f:5e:ed:
                    51:f5:33:56:16:8b:bf:db:f3:72:74:de:51:e6:7f:
                    4d:0c:e3:01:fb:91:84:de:e0:f9:3c:78:42:f0:b8:
                    c3:98:bc:8d:b7:20:97:96:49:98:55:1b:ca:e6:73:
                    0f:c6:0e:ac:52:fc:6c:71:ef:d9:95:04:19:bf:46:
                    cb:4e:af:00:ce:83:cc:01:45:8f:b7:e6:0f:cb:c7:
                    08:e2:43:7a:37:e8:fd:f6:55:06:06:ca:f9:7a:72:
                    91:7f:38:27:18:9a:9e:10:0d:6f:9a:f5:cb:3e:18:
                    6a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:44:FB:80:1E:40:79:DA:8C:ED:50:91:2F:5F:47:1C:F4:F6:E4:8B
            X509v3 Authority Key Identifier:
                keyid:C9:EC:A7:31:3A:A1:73:3A:1E:37:BC:24:FF:6C:4D:40:BB:6A:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ARSEN-ID/0/C9ECA7313AA1733A1E37BC24FF6C4D40BB6A24A7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1e:bf:cb:e8:c7:8b:50:b2:6b:6e:fb:6f:a9:e0:26:04:52:
         c8:e4:74:bd:77:e7:ed:c8:98:47:1c:0d:f0:e7:a4:f1:eb:23:
         9e:4a:cf:35:5c:91:06:05:1f:da:8e:9d:4f:86:c5:7a:f9:1e:
         7b:4f:ee:5c:09:ce:c9:54:5e:77:7b:53:7d:5d:3f:60:c5:82:
         de:7d:da:87:03:60:f3:d2:90:72:cf:e2:76:76:4c:da:59:74:
         75:df:ab:25:4a:1b:17:85:1b:d2:92:b8:8a:4d:8d:4b:62:c1:
         27:46:99:40:ae:af:17:32:a2:38:54:5f:f6:ab:6b:65:f9:a6:
         25:4c:a9:a6:30:43:02:9f:fa:15:49:90:a4:0e:e8:22:82:62:
         81:0e:86:ab:e5:0e:91:3a:97:b6:d6:fe:2e:9e:16:eb:92:df:
         f1:35:84:f0:f0:81:fe:2e:92:3f:00:26:70:91:3f:62:b1:65:
         b6:5a:d9:70:3a:51:fa:d4:7b:8a:4e:d0:57:fc:06:8d:7e:0a:
         4d:8d:f2:ce:45:71:9f:e9:c3:29:8a:91:a9:82:0f:fe:a7:41:
         ac:84:83:c1:30:7d:aa:cc:4f:cf:0f:0a:ce:13:3e:c2:3d:63:
         50:09:a9:87:50:f9:83:7e:0b:15:da:57:04:eb:c3:0a:ee:45:
         62:43:34:12
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIUJ7jPdui/SAnLUjrzWIhQdsBgYIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBC
QjZBMjRBNzAeFw0yNDA1MTgxOTU2MzlaFw0yNDA1MjIwNzI0MzlaMDMxMTAvBgNV
BAMTKEVFNDRGQjgwMUU0MDc5REE4Q0VENTA5MTJGNUY0NzFDRjRGNkU0OEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxISGmpl6syC19hhD4XHhPL6v
7FWX9VTg8kGzyAmU56NPvcFWkk1xqPh+KyT6+yPdWLDL0YzHPFAqvWxE1QkYe4DE
H8AJiw+tf0tK+n4XQQL6bty9txjT+qqqYbI3PPKdzVEGWzilcmS+HJlYhO7C4GOA
FNXAvMp3xv/9p007YgOE2uQMnG3/nFZO6Zu34rz+tB9e7VH1M1YWi7/b83J03lHm
f00M4wH7kYTe4Pk8eELwuMOYvI23IJeWSZhVG8rmcw/GDqxS/Gxx79mVBBm/RstO
rwDOg8wBRY+35g/LxwjiQ3o36P32VQYGyvl6cpF/OCcYmp4QDW+a9cs+GGr/AgMB
AAGjggH/MIIB+zAdBgNVHQ4EFgQU7kT7gB5AedqM7VCRL19HHPT25IswHwYDVR0j
BBgwFoAUyeynMTqhczoeN7wk/2xNQLtqJKcwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0FS
U0VOLUlELzAvQzlFQ0E3MzEzQUExNzMzQTFFMzdCQzI0RkY2QzRENDBCQjZBMjRB
Ny5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3JlcG8t
cnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0M5RUNBNzMxM0FBMTczM0Ex
RTM3QkMyNEZGNkM0RDQwQkI2QTI0QTcuY2VyMHQGCCsGAQUFBwELBGgwZjBkBggr
BgEFBQcwC4ZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vQVJTRU4t
SUQvMC9DOUVDQTczMTNBQTE3MzNBMUUzN0JDMjRGRjZDNEQ0MEJCNkEyNEE3Lm1m
dDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAG
BAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAOB6/y+jHi1Cya277b6ngJgRSyOR0vXfn7ciYRxwN8Oek8esjnkrP
NVyRBgUf2o6dT4bFevkee0/uXAnOyVRed3tTfV0/YMWC3n3ahwNg89KQcs/idnZM
2ll0dd+rJUobF4Ub0pK4ik2NS2LBJ0aZQK6vFzKiOFRf9qtrZfmmJUyppjBDAp/6
FUmQpA7oIoJigQ6Gq+UOkTqXttb+Lp4W65Lf8TWE8PCB/i6SPwAmcJE/YrFltlrZ
cDpR+tR7ik7QV/wGjX4KTY3yzkVxn+nDKYqRqYIP/qdBrISDwTB9qsxPzw8KzhM+
wj1jUAmph1D5g34LFdpXBOvDCu5FYkM0Eg==
-----END CERTIFICATE-----
Generated at Sat May 18 21:30:46 2024 by rpki-client on console-ams.rpki-client.org