Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
File:                     B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json)
Hash identifier:          ShL0U9jA/8WcPag/wQzIViKpb3Y/jAOnavF+dopA5X4=
Subject key identifier:   1C:C3:1B:C8:D6:EB:4D:CF:42:B2:F5:16:E2:56:E8:69:B0:B3:2D:EA
Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7
Certificate issuer:       /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
Certificate serial:       21DBC6E291BE094E0D72309A74B6D656AF9401A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
Manifest number:          0112
Signing time:             Fri 22 Nov 2024 15:10:37 +0000
Manifest this update:     Fri 22 Nov 2024 15:05:37 +0000
Manifest next update:     Mon 25 Nov 2024 20:33:37 +0000
Files and hashes:         1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: X/RSOXUq7KW+7LVhNjqX4Q2vYkD2wUSDkeHP3hdjPZw=)
                          2: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: L1nP2+pxchPIkSU0l3/nlJDDpNPW8AazHmyGzOWryzQ=)
                          3: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: K34tzv4In5TfTpgYNTuYA3PKN9jOsj6OuQuov+kvvEc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl
                          rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:db:c6:e2:91:be:09:4e:0d:72:30:9a:74:b6:d6:56:af:94:01:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
        Validity
            Not Before: Nov 22 15:05:37 2024 GMT
            Not After : Nov 25 20:33:37 2024 GMT
        Subject: CN=1CC31BC8D6EB4DCF42B2F516E256E869B0B32DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:0a:7b:c0:3a:62:77:cf:60:b5:af:1e:34:
                    56:2a:89:02:2e:22:44:a4:ee:a4:c8:34:eb:8c:1d:
                    5d:c2:54:a9:21:af:f3:78:b5:3a:53:b1:ba:a3:69:
                    b7:2d:33:0f:e0:f2:f9:9c:f0:43:98:c3:aa:17:fa:
                    5b:58:70:75:3e:e4:6a:49:eb:35:22:04:47:e9:80:
                    82:3c:96:d2:72:cb:f0:2f:92:51:af:77:c6:0b:29:
                    4d:08:c7:93:d7:78:30:98:ce:b3:3b:97:91:e1:76:
                    43:4f:6d:b8:58:1b:a5:f4:f0:4b:b7:da:24:75:a5:
                    68:fa:b0:95:db:20:e6:e6:bd:16:ee:db:a1:c0:36:
                    7a:9c:fc:9b:ef:75:88:f5:f0:1d:06:8d:9a:64:ee:
                    57:43:55:21:27:a7:5d:95:58:8c:2f:79:b7:a0:62:
                    fb:51:2a:ce:17:c8:b7:46:bc:63:44:4b:8d:53:e5:
                    cb:d0:b5:3e:a9:f5:3e:8b:f7:f6:17:b7:bc:9e:75:
                    aa:ae:f5:06:12:d5:13:7e:24:ba:97:bc:7a:aa:1d:
                    03:83:af:b4:76:be:95:17:cb:f1:8b:ae:ab:4c:e7:
                    98:3c:1c:bd:fd:35:d1:9d:8b:38:7f:0e:16:40:85:
                    4a:e3:c4:15:11:0f:f5:71:bb:3e:a1:c1:8d:fa:8b:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C3:1B:C8:D6:EB:4D:CF:42:B2:F5:16:E2:56:E8:69:B0:B3:2D:EA
            X509v3 Authority Key Identifier:
                keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:6d:dd:62:95:da:7f:da:9f:f3:43:d1:68:50:f8:cc:83:
         c8:c4:2f:26:32:73:5d:91:70:f1:f2:6a:6d:61:c2:0b:f8:b3:
         b3:c2:af:44:46:53:16:90:4a:38:6b:a0:1c:0f:81:bf:3f:31:
         a4:46:e6:60:21:37:ab:04:31:67:39:9e:dd:0f:41:bc:52:14:
         ed:97:ea:8e:97:d5:40:f3:4c:42:64:b6:84:2d:05:f9:4e:13:
         da:50:f4:f5:8d:99:50:95:8a:18:9a:ba:fc:9c:0a:8b:33:5a:
         7a:1c:1e:ea:fe:91:17:b1:10:a2:f4:88:e0:5a:36:67:46:23:
         df:a8:5e:7b:2b:2b:eb:0a:30:3c:cd:c6:f5:a3:1b:ab:55:45:
         c6:df:5a:63:df:0c:b1:f4:93:e7:1e:8c:08:ad:07:3c:0a:0b:
         98:d6:0e:25:8e:68:a0:44:97:01:b2:db:05:2c:a6:db:b1:a3:
         31:ea:42:22:8f:ff:a5:ac:7f:46:ad:11:40:e4:cb:99:7e:21:
         06:ea:20:0f:31:cf:b8:8a:56:e9:39:54:db:c2:d5:2a:12:0e:
         42:db:46:19:12:62:35:12:5d:ff:5a:60:14:2b:ae:b4:e4:80:
         9a:71:7f:84:94:2b:07:8a:10:37:44:d3:7c:b9:a5:c1:8b:f7:
         32:19:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:10 2024 by rpki-client on console-fra.rpki-client.org