Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft
File:                     9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft (raw, json)
Hash identifier:          jf22iAxpr9wlqsNXpFjHbZdBpuvdRiwuNm+VlV0xrII=
Subject key identifier:   DF:74:41:71:E2:77:39:22:1B:38:F0:E6:EC:48:60:86:D2:C3:32:0B
Authority key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A
Certificate issuer:       /CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A
Certificate serial:       6DCBDE83EB6D60802FA55F4D576183B2A88387A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft
Manifest number:          0191
Signing time:             Sun 24 Nov 2024 04:40:00 +0000
Manifest this update:     Sun 24 Nov 2024 04:35:00 +0000
Manifest next update:     Wed 27 Nov 2024 08:58:00 +0000
Files and hashes:         1: 3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (hash: 2gcsGWrwNMsQNKXI5tKhPs55zDtiRTAJh20IdsKpBxc=)
                          2: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl (hash: vndLTd+gXzVDc9xA1i011ZETvlRea8o5UaKRsW0ZEoo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl
                          rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cb:de:83:eb:6d:60:80:2f:a5:5f:4d:57:61:83:b2:a8:83:87:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A
        Validity
            Not Before: Nov 24 04:35:00 2024 GMT
            Not After : Nov 27 08:58:00 2024 GMT
        Subject: CN=DF744171E27739221B38F0E6EC486086D2C3320B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:ff:6e:37:9f:fe:97:00:c8:14:61:f3:77:
                    9a:c3:49:eb:a3:0c:38:2c:50:6b:fc:64:fc:6a:58:
                    9f:71:0e:97:36:1e:48:6c:aa:b7:7b:0b:9c:e7:71:
                    4f:d5:34:15:71:1b:f2:27:b2:17:c1:f7:c2:ec:a1:
                    df:31:55:bc:25:4f:a2:fd:f6:03:cf:b2:f6:2c:93:
                    bf:87:8d:8e:bf:ee:9a:e2:50:df:c7:d5:7f:ed:b5:
                    b2:19:43:86:ff:8c:1c:06:a6:f7:1c:03:d5:b3:88:
                    89:05:eb:4e:98:47:0b:fe:68:c3:c5:80:1a:bf:09:
                    9d:87:a2:d6:a3:d9:bb:e8:c6:15:61:05:de:b2:3a:
                    0f:d8:ab:c0:57:23:05:d7:59:f7:cb:78:43:98:52:
                    de:14:ca:87:89:25:f6:f6:f6:3b:e6:ff:ad:11:8e:
                    be:49:6d:67:8b:72:17:a5:d0:92:e9:18:64:08:4b:
                    28:cc:08:f3:00:85:9d:3a:87:94:e5:76:fc:0f:0a:
                    a2:03:68:07:c5:75:e8:4a:0e:23:1c:cb:7a:15:7f:
                    e0:6e:a9:fc:3b:e9:a6:81:27:44:a1:a0:8b:7f:6f:
                    20:70:c8:21:88:d4:96:11:f2:62:a3:33:9e:58:e5:
                    76:da:96:7f:de:af:23:4d:ad:3b:2e:ba:10:80:cb:
                    86:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:74:41:71:E2:77:39:22:1B:38:F0:E6:EC:48:60:86:D2:C3:32:0B
            X509v3 Authority Key Identifier:
                keyid:9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f1:7d:ee:5f:8e:7f:ae:3a:e0:ae:bb:55:da:b9:75:4b:3e:
         f9:64:1e:aa:14:c3:09:ca:9d:14:62:ce:dc:b1:ef:ac:1f:a1:
         04:95:94:34:54:27:cb:55:b6:58:45:40:66:e9:4b:d5:c2:63:
         fe:1a:8e:4f:45:4b:55:ce:19:27:80:f1:4a:f1:58:51:3a:32:
         b7:6c:75:b7:11:17:c8:bd:1c:4d:21:89:b0:77:49:f4:72:dc:
         df:04:b8:ce:ee:3a:da:39:1c:b1:7e:af:de:37:f1:2f:91:89:
         1f:19:54:0e:df:7f:66:21:5d:84:74:11:a4:49:ca:79:17:34:
         93:e9:f7:ce:20:44:de:f3:a4:7f:07:b1:42:aa:54:8b:02:6b:
         ca:e9:11:8e:5a:0c:6f:d9:ca:6e:68:d3:95:39:5e:9b:cb:43:
         f7:5d:9c:eb:f5:76:1a:d4:12:22:18:2e:2d:a5:56:50:a5:5f:
         32:d3:a3:b0:6f:27:4b:53:06:03:7a:bc:ac:45:29:6d:31:18:
         20:e7:3e:b4:4a:e5:23:3c:05:ec:4e:47:47:02:d4:05:52:dd:
         f2:ab:1e:26:7b:16:de:f0:ee:b3:33:12:01:b5:33:0a:a2:95:
         15:af:a5:de:70:b7:ee:a9:61:41:94:59:e4:80:a8:88:1a:cf:
         a2:88:41:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:23 2024 by rpki-client on console-fra.rpki-client.org