Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft
File:                     CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json)
Hash identifier:          5y/8u6yWpX0eaYevtv7CFqB9GPV0l3jkUCzdezrFDg0=
Subject key identifier:   D7:3B:DA:62:8E:45:DF:3F:E1:60:CF:1A:A3:77:EC:AC:44:17:40:8C
Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4
Certificate issuer:       /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4
Certificate serial:       1C240E5EC39A3BA45B770ECF0F303F70086D8D95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft
Manifest number:          0148
Signing time:             Mon 25 Nov 2024 01:32:15 +0000
Manifest this update:     Mon 25 Nov 2024 01:27:15 +0000
Manifest next update:     Thu 28 Nov 2024 12:23:15 +0000
Files and hashes:         1: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: hhSjaAOUVUlbGfi84OFZPlbooe8TnNpKuXr0q1lIotg=)
                          2: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: 9XCmEuujAlpFRjOfePqG7bPcXuGsZrGZceaephFd9a0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl
                          rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:24:0e:5e:c3:9a:3b:a4:5b:77:0e:cf:0f:30:3f:70:08:6d:8d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4
        Validity
            Not Before: Nov 25 01:27:15 2024 GMT
            Not After : Nov 28 12:23:15 2024 GMT
        Subject: CN=D73BDA628E45DF3FE160CF1AA377ECAC4417408C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c9:d0:d6:c4:48:76:4f:4f:7d:3a:b6:db:09:
                    c2:96:0e:e1:77:39:42:a0:cd:72:fb:c3:f1:db:de:
                    f5:f9:4c:6f:74:bf:39:96:98:cc:b1:f1:a4:d4:fd:
                    6e:f7:d4:d4:9e:fa:d8:36:42:57:74:f9:5d:b7:65:
                    11:0a:a7:20:4b:11:6d:65:cf:b6:92:1b:27:53:d4:
                    22:89:e2:9a:9e:78:70:1e:ce:fd:a2:0c:a9:e7:b6:
                    5d:fb:36:d0:c7:f4:c1:1c:c1:80:5b:92:39:8a:fa:
                    f4:d3:81:79:4a:14:38:b8:0c:6c:23:10:6b:c9:08:
                    5d:8a:cc:03:ee:6c:50:58:e4:b7:8b:c6:e4:8b:8f:
                    c5:8d:7d:0d:e3:5f:9c:1c:ab:91:7f:a3:f9:3e:fd:
                    0a:9d:a7:35:12:8e:d9:c3:b7:52:b7:ea:d5:42:3c:
                    ea:cc:f4:03:e1:bb:d5:d4:54:a5:65:99:2f:0a:e3:
                    f4:04:ce:ca:62:14:14:8c:10:5b:fb:b2:6d:5b:d2:
                    b3:b2:c9:42:f3:2f:89:4d:f4:c8:66:55:07:2a:e1:
                    1a:d2:6c:ea:d9:98:51:74:1f:5b:1b:99:10:a2:92:
                    31:c8:db:b0:c2:91:ac:a5:7f:f8:22:4a:5f:f4:92:
                    ec:5b:78:9f:1a:dd:b6:72:bc:8a:93:0b:f7:68:56:
                    59:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3B:DA:62:8E:45:DF:3F:E1:60:CF:1A:A3:77:EC:AC:44:17:40:8C
            X509v3 Authority Key Identifier:
                keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c1:99:56:8f:8d:dc:b0:fb:dd:d9:fa:48:a4:ae:57:c7:dc:
         89:b7:9e:92:6a:ef:44:13:5e:8f:bf:61:b9:ec:4a:1d:7e:bb:
         29:cc:92:ba:e7:94:4b:93:4a:5a:2e:a4:d3:94:a0:d1:8f:66:
         7d:26:dc:65:17:cf:42:e7:2b:17:da:33:cb:d8:66:5a:ba:21:
         2a:22:b0:47:c9:ca:b2:12:5c:5d:d4:5e:ff:e7:dd:24:9c:3d:
         20:b8:67:f9:3d:19:44:a5:f9:db:4a:ab:40:6e:27:a6:74:ae:
         00:8c:00:c9:4d:bb:49:39:db:9a:68:e8:52:ac:0a:c4:04:55:
         d6:fd:33:45:d1:58:56:d0:71:cd:1b:82:a2:4c:7c:68:63:95:
         47:a1:0e:45:a9:af:f9:ab:e0:f5:47:01:a6:4f:90:d0:f0:58:
         3e:13:40:0a:af:b3:3e:5c:42:a9:70:4f:35:7e:47:b1:45:8a:
         2b:e7:1e:b7:4d:6b:bc:5c:f4:6c:89:00:dc:ea:e4:29:00:20:
         79:15:34:60:6d:57:a3:49:eb:a5:03:6a:be:d2:7f:50:5d:e1:
         19:ea:2b:29:33:e3:9f:76:a4:b7:9c:e0:68:ae:ba:32:13:87:
         a9:b8:77:9e:9f:8e:34:8c:21:5d:3d:b3:7c:9e:48:9b:62:72:
         f4:6f:5c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:45:37 2024 by rpki-client on console-ams.rpki-client.org