Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
File:                     96C41CFE277F686E3476A533FDAE5A0F411173D9.mft (raw, json)
Hash identifier:          uuiftdUPMX0A2lySMtQsLdxNvVKa0zdU8Hr45mHpemA=
Subject key identifier:   76:4D:3E:98:84:9B:D9:AF:2F:86:4C:C5:EA:91:AB:86:28:74:5E:68
Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9
Certificate issuer:       /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9
Certificate serial:       2FC833057928B1B4F0DCDCFAA8B6883D48D40729
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
Manifest number:          CF
Signing time:             Fri 17 May 2024 11:01:08 +0000
Manifest this update:     Fri 17 May 2024 10:56:08 +0000
Manifest next update:     Mon 20 May 2024 20:33:08 +0000
Files and hashes:         1: 323430343a643563303a3a2f33322d3438203d3e20313338383534.roa (hash: 4UtOikiEbw7MTyF2qB18hMHkq0zS5v90+Zpu/WwZgRA=)
                          2: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (hash: pbtnRnaTH+DVJ0tZdjXb84dD832WiM9IiHWW1QnzvZE=)
                          3: 96C41CFE277F686E3476A533FDAE5A0F411173D9.crl (hash: YVYqGaXC+Hfd2xjcb8/ZWC/JiGuOVAWlYvnP+r784GA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl
                          rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 14:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c8:33:05:79:28:b1:b4:f0:dc:dc:fa:a8:b6:88:3d:48:d4:07:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9
        Validity
            Not Before: May 17 10:56:08 2024 GMT
            Not After : May 20 20:33:08 2024 GMT
        Subject: CN=764D3E98849BD9AF2F864CC5EA91AB8628745E68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:c7:55:09:ae:80:9c:4a:e9:27:49:d2:76:
                    66:a8:b1:96:c2:f3:1b:40:5b:23:f4:fb:db:fa:28:
                    9a:56:d8:54:e1:20:a1:61:91:fc:cd:0a:97:ca:7a:
                    2e:d1:8a:88:6d:0a:f7:a5:51:04:a9:5c:f5:c8:62:
                    22:10:e6:e7:2e:73:ee:b9:5c:9b:30:82:00:4d:d8:
                    ce:ad:6c:a2:78:7b:87:28:19:64:dd:b5:ef:af:67:
                    f4:7c:f5:bd:5d:0e:3e:6d:2d:0d:89:8d:f8:ab:be:
                    b8:c9:ca:4c:5a:89:fe:dc:52:31:46:b9:c7:7c:69:
                    03:88:3d:e8:20:04:d2:c6:df:b5:80:62:5c:90:25:
                    50:65:39:bf:d8:20:0f:9d:5f:49:30:80:e9:66:73:
                    aa:ce:ed:66:2a:bd:8e:4b:55:f8:58:98:e2:5f:05:
                    e3:b2:4f:26:dd:b9:de:e4:e7:da:9d:81:ad:57:9d:
                    90:4a:be:30:3d:0b:60:5a:b1:53:5b:9d:4f:3c:cc:
                    e4:40:29:22:c9:51:11:d6:b9:f4:6d:8e:d1:2c:da:
                    0d:d0:37:51:b7:25:b6:f9:1e:a6:de:67:dd:01:e5:
                    17:f2:9a:99:64:80:43:af:48:90:96:d3:1c:dd:db:
                    95:3c:3a:df:30:7d:ac:24:b6:8a:8e:d3:43:23:46:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4D:3E:98:84:9B:D9:AF:2F:86:4C:C5:EA:91:AB:86:28:74:5E:68
            X509v3 Authority Key Identifier:
                keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:66:f2:3c:24:9b:ba:25:eb:87:64:85:8f:dc:5a:0c:ff:58:
         5a:cd:87:2e:83:47:ce:e2:67:c5:f9:8a:28:4d:9d:77:5e:fc:
         df:bd:39:20:af:db:fd:cd:88:7e:0c:83:40:ee:7f:1e:e3:91:
         02:a0:88:1c:94:55:78:da:09:4a:a3:03:f7:e6:32:80:7a:dc:
         cc:62:72:d7:7f:71:8d:e2:29:ea:5e:8c:85:aa:47:26:21:77:
         a7:8b:24:c1:ff:6b:be:83:ef:e1:63:2d:0c:fd:f7:b1:c2:bb:
         35:a6:6b:80:d4:db:5f:c3:ea:6d:fa:51:c6:3f:e4:0a:f5:8c:
         d4:46:35:36:51:84:81:0d:a1:62:2f:09:16:18:46:d7:21:79:
         90:44:d6:85:be:6a:2b:fb:84:7e:2e:e7:5e:0e:4f:cc:0f:8b:
         dc:9a:cd:07:ae:58:3c:71:5f:84:8b:da:48:fa:0d:72:84:bf:
         a6:a7:18:96:40:2a:52:07:0d:ed:55:85:74:3b:91:cb:32:46:
         59:31:5e:db:e2:a1:6f:a9:c2:4b:e5:59:99:fa:d6:74:ec:0f:
         46:cb:45:57:c9:ce:2f:5b:2f:11:6b:99:ad:7d:cd:bb:6f:ae:
         e3:72:a2:5a:f4:9c:8c:01:89:47:85:2b:69:d6:a0:e6:c7:32:
         63:33:a3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:05:52 2024 by rpki-client on console-fra.rpki-client.org