Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
File:                     9EA3AB422D824FDD9A25622F84924203216B1ED1.mft (raw, json)
Hash identifier:          JLitA8JKhQZH1DjqaqEyUO4AeUU8s+vobnmdvE2Nguc=
Subject key identifier:   F9:49:46:01:1C:10:31:24:5C:13:0B:C2:5F:23:B4:F3:3D:EA:80:F7
Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1
Certificate issuer:       /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
Certificate serial:       705C249755B281454BC205D0C51BBB434BE911DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
Manifest number:          0484
Signing time:             Thu 21 Nov 2024 23:41:11 +0000
Manifest this update:     Thu 21 Nov 2024 23:36:11 +0000
Manifest next update:     Mon 25 Nov 2024 08:21:11 +0000
Files and hashes:         1: 3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (hash: YpXfCL82On8UTAObXpsp+TSzduNgz0G+wsNlyOIz0pA=)
                          2: 3130332e3134332e3234342e302f32342d3234203d3e20313332363337.roa (hash: F1X4boFtxn/EgnpkVQWCKt75oCjM/gmO/k75zwrcQVs=)
                          3: 9EA3AB422D824FDD9A25622F84924203216B1ED1.crl (hash: BnbDSeypnIzY/Ku0fdLnB+UaWKVbikIPaTQbaVXBkC4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl
                          rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5c:24:97:55:b2:81:45:4b:c2:05:d0:c5:1b:bb:43:4b:e9:11:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
        Validity
            Not Before: Nov 21 23:36:11 2024 GMT
            Not After : Nov 25 08:21:11 2024 GMT
        Subject: CN=F94946011C1031245C130BC25F23B4F33DEA80F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:75:9e:01:0f:45:04:e8:1c:6b:af:f1:e5:
                    8c:99:90:e2:ef:54:af:ce:b3:45:55:d1:68:d7:be:
                    0d:71:6b:8a:e3:a3:fa:0f:21:42:ac:44:a6:c6:9c:
                    8d:40:f9:90:c0:3c:6e:49:71:ae:cf:b7:93:c2:cf:
                    76:ed:33:3d:35:3a:d7:22:80:d9:3b:42:d9:7e:a6:
                    c4:1e:79:44:4d:99:c1:3b:c5:e4:66:2b:98:2a:ba:
                    9e:6a:6d:f9:9a:1c:bc:33:c5:b3:f3:99:a7:d0:c2:
                    dc:1a:dc:af:0d:2b:04:81:a9:c4:48:29:81:fd:46:
                    b6:aa:53:38:9f:57:88:19:bf:ae:f0:63:77:7f:28:
                    8d:57:bc:2e:e8:1e:d0:ed:b9:fa:c7:eb:bd:ff:69:
                    8d:42:08:40:07:7c:a6:ea:00:26:a5:b1:f0:a2:b5:
                    be:2d:61:4f:e8:d0:c4:56:8b:81:c7:74:3d:cc:a7:
                    71:c6:45:8a:8a:78:16:95:c1:b6:66:80:dd:ec:69:
                    a1:79:11:3a:5c:28:ba:2e:71:61:e7:f6:56:4f:4b:
                    98:78:2f:7e:1d:53:d9:82:10:2c:3f:33:fe:28:19:
                    db:ee:5b:62:eb:48:d2:1d:3a:c2:f8:a6:72:f9:97:
                    55:1f:a0:54:d3:e4:0c:87:d8:64:dc:82:36:be:ce:
                    c0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:49:46:01:1C:10:31:24:5C:13:0B:C2:5F:23:B4:F3:3D:EA:80:F7
            X509v3 Authority Key Identifier:
                keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3d:ff:93:61:cc:14:db:02:aa:97:93:11:12:6a:68:5c:b3:
         b0:71:50:f9:41:1f:93:ca:a7:17:c0:d9:3f:a8:73:a2:2e:4e:
         4f:56:87:87:ce:a8:5a:f7:1b:f7:dc:25:ba:a8:f9:3a:c8:6d:
         58:b7:37:ef:8c:fd:4a:b2:34:80:4f:c5:bb:ad:91:cb:55:8d:
         ec:41:40:7a:d7:a5:13:bb:b4:09:69:d7:6f:88:d5:2d:49:7d:
         b3:d8:c1:ea:1f:6f:43:ca:e2:34:d0:2a:e6:d1:11:3f:63:5a:
         ac:7e:d5:6a:5b:d0:97:96:6d:02:09:d4:a1:1d:09:1c:6b:8d:
         aa:9a:59:75:57:9e:36:a4:1d:bb:d6:e0:5c:17:ff:d0:0d:71:
         cb:c6:ab:16:b7:87:2a:2d:be:97:f6:34:3c:49:83:3f:0c:84:
         3b:8e:c5:22:bb:b1:45:26:12:2a:d5:0d:66:be:3a:74:b3:c4:
         f7:d9:a9:02:66:f8:e3:65:b9:6d:3c:5a:13:29:5a:99:19:1a:
         96:ec:55:79:16:19:07:38:2e:d5:88:1d:8c:33:41:75:d0:59:
         90:6f:21:e6:cd:40:40:c0:79:bc:28:59:b3:e6:29:c0:f9:2b:
         83:86:02:03:f7:82:e3:66:4b:d6:7a:d5:31:b0:42:de:c1:02:
         18:1c:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:43 2024 by rpki-client on console-fra.rpki-client.org