Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
File:                     F23ACCA147720B423A9576F3E408691505B293A3.mft (raw, json)
Hash identifier:          hr8RHhxDY7ARmdTj/VEHa21XDmKPgRNzTSYXiUKJRdQ=
Subject key identifier:   35:74:D7:7A:1A:F1:EB:FE:E2:7E:2A:80:1A:23:AA:F9:CD:96:58:62
Authority key identifier: F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3
Certificate issuer:       /CN=F23ACCA147720B423A9576F3E408691505B293A3
Certificate serial:       1331DDF858740DFB6F5A64754F3A08C0CAC00F37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
Manifest number:          B9
Signing time:             Mon 25 Nov 2024 21:11:41 +0000
Manifest this update:     Mon 25 Nov 2024 21:06:41 +0000
Manifest next update:     Fri 29 Nov 2024 00:16:41 +0000
Files and hashes:         1: 3130332e3139302e32392e302f32342d3234203d3e20313439393438.roa (hash: tvYlBhnklEiw/TZsUy/XAKxHZ5SwpPC4Bkk7W+uYiRM=)
                          2: 3130332e3139302e32382e302f32342d3234203d3e20313439393438.roa (hash: 4xG5rUbrfk7U5JEhOVdnlCDzgzXDJr6D4I9VnoiM2Rc=)
                          3: F23ACCA147720B423A9576F3E408691505B293A3.crl (hash: HtvoZTAnd3fpvZEfFcL9cgEjb3spk+sJuQ2JNTQqHd8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl
                          rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:31:dd:f8:58:74:0d:fb:6f:5a:64:75:4f:3a:08:c0:ca:c0:0f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F23ACCA147720B423A9576F3E408691505B293A3
        Validity
            Not Before: Nov 25 21:06:41 2024 GMT
            Not After : Nov 29 00:16:41 2024 GMT
        Subject: CN=3574D77A1AF1EBFEE27E2A801A23AAF9CD965862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:4e:19:d4:31:30:c2:0d:86:11:7a:b7:0a:
                    af:be:79:78:1d:6f:34:fb:e1:cb:ea:17:3f:48:59:
                    75:f8:36:d9:a7:49:ba:66:5a:39:e9:a3:c6:ac:86:
                    1b:22:e7:9e:f7:68:dc:c9:2a:da:44:0d:3c:09:c1:
                    c9:c6:fd:9f:13:01:62:4c:9a:3f:bb:68:bf:cb:80:
                    b7:a4:70:ba:52:18:ec:fe:f5:67:c6:81:13:f4:98:
                    ed:0b:03:b1:c7:be:2a:07:55:f4:49:b6:de:0f:7e:
                    d8:30:c4:ae:07:68:65:12:76:03:de:9a:08:b6:77:
                    8b:18:78:a2:10:90:68:00:59:09:5e:8e:7a:85:34:
                    06:a6:ca:e0:e0:6f:35:0f:1d:8f:9b:63:fe:84:e0:
                    92:3c:bc:a3:fc:97:51:b0:e5:5a:36:67:56:34:d0:
                    3f:aa:76:90:9c:10:7c:96:88:d7:93:90:f3:9d:fb:
                    83:59:fb:21:9c:35:2f:c1:b6:7a:a7:f0:55:91:a8:
                    a7:bc:0b:de:0d:33:cc:0c:a2:52:01:b1:2b:16:a4:
                    40:27:8e:3a:56:01:9b:b1:ac:4f:36:55:fb:a3:eb:
                    ff:93:29:f4:12:9e:60:ac:b7:7d:7f:27:48:08:c9:
                    37:e9:56:f8:fd:27:73:8f:30:96:9b:28:68:e2:9c:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:74:D7:7A:1A:F1:EB:FE:E2:7E:2A:80:1A:23:AA:F9:CD:96:58:62
            X509v3 Authority Key Identifier:
                keyid:F2:3A:CC:A1:47:72:0B:42:3A:95:76:F3:E4:08:69:15:05:B2:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F23ACCA147720B423A9576F3E408691505B293A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bee14382-d587-4e86-8e7e-6a264a58ea06/0/F23ACCA147720B423A9576F3E408691505B293A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:69:d1:da:7c:57:7c:9a:bf:b2:2c:7f:38:96:52:76:2c:8f:
         32:36:59:eb:e5:2c:cb:c2:df:89:f5:fd:65:97:1e:a8:9a:6d:
         1c:d0:9c:5a:37:b7:81:0e:69:cc:9b:2b:4c:08:db:b6:36:94:
         db:45:71:ec:0f:4c:fa:1e:80:9d:24:72:41:06:04:30:cd:7a:
         34:43:d4:dc:8c:be:f6:16:c6:62:28:e9:65:99:48:2b:d0:70:
         9b:19:24:ad:ee:cb:81:a0:6a:33:06:f4:a4:f5:d9:b2:02:d0:
         82:ba:28:69:30:1f:b3:29:01:30:3a:0c:98:5e:6b:22:9f:f4:
         03:3b:a5:a2:37:69:18:c3:ba:9b:2b:28:c2:fc:c0:ba:b1:3c:
         d8:4c:92:c5:47:ee:e2:19:92:79:cf:a5:96:55:33:40:46:5c:
         28:51:b9:6d:51:3e:3c:f5:a9:da:53:d7:8e:d5:a0:f6:5c:29:
         9c:8b:14:28:26:b9:09:89:33:c9:9a:1b:ce:d4:7e:28:74:a4:
         c8:f4:db:d8:f5:ea:55:5c:61:5d:83:1d:3f:b4:1a:a2:b1:2e:
         f4:6b:6e:f2:da:fd:1f:87:36:9e:1f:a7:43:91:be:bf:a0:8c:
         89:f4:f6:9e:3c:4c:12:cd:13:8e:34:76:14:77:f7:a0:57:66:
         07:b9:87:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:52:55 2024 by rpki-client on console-ams.rpki-client.org