Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
File:                     11D0290B4630192458231FFEA93A463483E71D15.mft (raw, json)
Hash identifier:          vDQn96EH5IzKYVPMz0DBtIPIucuN2TBbok/iY4DjhK8=
Subject key identifier:   21:F2:05:87:3A:82:E8:50:BD:AB:FB:F4:02:73:CE:B4:B3:E0:B6:FA
Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
Certificate issuer:       /CN=11D0290B4630192458231FFEA93A463483E71D15
Certificate serial:       1AB9806426FCDB7CCCF5E87E3E2CC0E8EE93DFFF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
Manifest number:          012A
Signing time:             Sun 24 Nov 2024 15:42:10 +0000
Manifest this update:     Sun 24 Nov 2024 15:37:10 +0000
Manifest next update:     Wed 27 Nov 2024 21:40:10 +0000
Files and hashes:         1: 11D0290B4630192458231FFEA93A463483E71D15.crl (hash: pXdnykSfE8Jv8nUmW1Gb5AfaH1SNuzXQ2hR+jQS8BgQ=)
                          2: 3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (hash: GZ00UROycN5H3jCh+kAfoaN43OxWdIE34qy+DPXEIgY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl
                          rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b9:80:64:26:fc:db:7c:cc:f5:e8:7e:3e:2c:c0:e8:ee:93:df:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15
        Validity
            Not Before: Nov 24 15:37:10 2024 GMT
            Not After : Nov 27 21:40:10 2024 GMT
        Subject: CN=21F205873A82E850BDABFBF40273CEB4B3E0B6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:e5:4f:9a:60:9c:46:f2:57:e7:3e:ba:b1:
                    a0:73:57:5e:ba:67:b5:a8:6a:31:80:d5:bf:c8:2a:
                    7c:41:2c:cb:74:e4:b9:43:f2:2e:94:1e:89:28:ce:
                    c3:46:a2:7b:c9:21:85:44:97:fd:9f:dc:8d:d4:e8:
                    2d:9a:9d:f9:9f:28:32:86:44:03:37:9b:ac:aa:60:
                    e0:67:f2:b3:67:43:bb:93:03:50:fe:cb:dc:7b:ba:
                    43:aa:19:33:1d:6d:1f:a8:09:a9:f9:a8:d3:db:3b:
                    92:b5:c9:db:11:22:15:64:24:f7:85:dc:6c:dd:ce:
                    7c:7e:e2:8f:fa:30:10:29:ec:1b:1e:48:92:0d:c8:
                    bd:2f:e2:75:dc:46:05:17:fd:ee:eb:62:f7:e7:5c:
                    b8:14:2a:c3:0c:ed:fb:bd:bb:b2:5e:08:2c:c7:24:
                    f8:4a:b3:27:5a:3c:e3:5b:66:85:56:09:65:47:93:
                    c6:93:15:86:7b:1d:37:06:1b:76:8b:f4:8d:96:88:
                    0a:ac:7f:6a:3e:21:26:a6:c7:81:51:f8:78:b4:40:
                    08:af:c6:b9:f9:ce:02:a1:b0:4b:77:69:db:30:80:
                    81:21:c7:56:b5:d4:0e:5b:eb:06:73:6e:ac:bb:df:
                    36:50:40:6c:44:2d:0f:fe:32:e1:06:02:01:ec:c0:
                    9d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F2:05:87:3A:82:E8:50:BD:AB:FB:F4:02:73:CE:B4:B3:E0:B6:FA
            X509v3 Authority Key Identifier:
                keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:37:b3:b5:ba:0d:c6:98:bf:4e:8e:2f:96:79:fc:2b:04:cc:
         0a:6f:e7:7a:1c:42:63:2b:34:f7:20:b2:bf:68:63:07:b6:c4:
         74:24:a7:19:8b:12:46:98:35:ac:db:b4:11:a3:fa:c8:71:fa:
         e7:78:f9:87:5e:0d:2f:73:e8:6b:8a:1c:80:ee:d6:56:ae:b8:
         0d:2c:59:f2:5d:7a:c0:4f:32:ed:26:fb:4a:0b:83:92:0a:7e:
         6e:aa:5c:10:01:18:2f:34:52:24:a9:fe:50:bd:de:06:d8:6b:
         86:2e:a0:5c:1c:db:54:6e:2b:5b:90:6c:3d:7a:7f:80:6b:f9:
         78:2f:f7:26:a4:fc:5c:da:de:05:a5:42:16:ca:04:d2:f5:ad:
         d9:69:16:70:8a:7e:35:6e:70:a2:20:47:36:ad:87:33:e0:08:
         0b:94:64:07:10:35:e5:57:91:de:bb:89:33:b7:bd:c9:b4:92:
         ef:f4:0c:5d:02:b5:5a:c8:81:28:e5:2c:82:ec:8a:2f:39:67:
         ef:82:7e:52:2c:fe:d4:35:19:b8:6a:a1:49:64:98:5c:7c:74:
         0c:ea:5f:1c:43:ab:72:f0:ba:48:94:ad:dd:78:57:f9:05:f2:
         c3:8a:94:03:cc:09:4e:c8:1a:91:f4:df:f9:6d:e7:cb:35:07:
         90:68:2d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:17:42 2024 by rpki-client on console-fra.rpki-client.org