Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
File:                     C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft (raw, json)
Hash identifier:          7cffnRIDTueRrXEBLl9sjIPt3dFsnctDVf3TIJaqm1g=
Subject key identifier:   E1:E4:5F:04:BC:6B:61:04:7D:6C:19:AD:A8:BF:11:67:D8:E6:44:77
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       3109778DA0F3507AF941BE67CE07E134B56DA2FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
Manifest number:          0462
Signing time:             Wed 17 Apr 2024 00:32:04 +0000
Manifest this update:     Wed 17 Apr 2024 00:27:04 +0000
Manifest next update:     Sat 20 Apr 2024 03:32:04 +0000
Files and hashes:         1: 3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa (hash: u0BTJ06d9ZyUn+zmvvDO3h6vf78QgCTJ06qY9MKSyn8=)
                          2: 3130332e32322e3234392e302f32342d3234203d3e20313331313131.roa (hash: V4Xu5FUxjJ9JtDLYcgC0EIk5g92p6dEzb97bCap1H6c=)
                          3: 3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa (hash: KnIKjt5pGOnb6FbahaUXUZtBNkMWL8GfzIrsWuyRPtY=)
                          4: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (hash: OgDhMwTsmtNuUJkbJ6mo1inYSSEr+6QSfqhs+B1k/Z8=)
                          5: 34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa (hash: WAUcqdA7O2LLYcTzQMKWrsmTmgFIw7LfRlQQL7UptDI=)
                          6: 3230322e34332e3137362e302f32302d3234203d3e20313331313131.roa (hash: u1khOUZzr0zzvk3rZ9h9PNyXL8p82sTJkKped49f6Qc=)
                          7: 3230322e34332e3137362e302f32322d3234203d3e20313331313131.roa (hash: QQYEjIOOwAEJPxEm8P0iXntOG084pUuLDWZAdMfwGKs=)
                          8: 3130332e32322e3234382e302f32322d3234203d3e20313331313131.roa (hash: t0vWx3i7cD0IWfrHymKFi6iS+XLTpt8CRzLa0PdDNW4=)
                          9: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl (hash: L17an8rI5dL2zPC52apKJKqR9yY/NiWZvxCOo1l1olY=)
                          10: 3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (hash: pf/92ZLdlLVR2EYOkBxTkWdBepUSif/qRX+A9DcUPF8=)
                          11: 3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa (hash: v0/VYDeqrLs0aVVVmddubkQcVhfGq++PVN0tNLBFA0A=)
                          12: 32372e35302e31362e302f32302d3234203d3e20313331313131.roa (hash: XeSxvup/l7ZyKJrFVec5Gwe5l8c7X+yAxYuS+Ybl5uE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 21:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:09:77:8d:a0:f3:50:7a:f9:41:be:67:ce:07:e1:34:b5:6d:a2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Apr 17 00:27:04 2024 GMT
            Not After : Apr 20 03:32:04 2024 GMT
        Subject: CN=E1E45F04BC6B61047D6C19ADA8BF1167D8E64477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:46:e7:5d:12:39:20:cb:fd:f9:30:26:df:1f:
                    ec:a9:4c:36:b9:08:99:9f:c7:b6:65:c4:a8:6c:0d:
                    31:e8:57:70:d6:f0:2d:0a:d6:3e:fe:b1:10:a4:af:
                    50:ee:4a:bb:51:ca:d3:20:65:b0:b1:d2:af:d2:f3:
                    e6:b4:c8:c4:00:06:7b:5b:de:70:d4:61:88:b5:65:
                    44:0e:e3:ba:01:91:38:79:a5:8a:5b:37:5a:c5:14:
                    05:67:f1:56:69:b0:40:5b:35:a9:9f:19:a5:24:6b:
                    86:5e:b0:41:fe:f9:63:11:eb:20:9f:24:97:6a:78:
                    2c:d1:6c:05:97:7a:f5:28:a6:ec:ef:30:d6:b3:bd:
                    63:f5:a3:0a:eb:2c:25:23:27:ba:b4:5a:29:96:29:
                    0a:d1:9c:91:36:99:c2:0e:3d:33:ee:70:5c:24:34:
                    8c:a7:54:e6:cb:0d:53:f3:c8:d9:b4:fa:59:d9:8f:
                    15:e5:d1:5d:44:a0:a0:ef:73:73:9d:6e:43:e6:3b:
                    11:42:0e:00:e6:7b:ba:9f:a3:37:98:ea:e0:cf:24:
                    c4:11:70:87:03:e4:05:50:3f:27:c0:b1:01:4d:c6:
                    5e:91:40:1a:54:08:d4:ed:66:e5:58:4f:79:e0:61:
                    0b:4c:c5:65:58:80:86:e9:0c:20:30:80:94:0a:cf:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E4:5F:04:BC:6B:61:04:7D:6C:19:AD:A8:BF:11:67:D8:E6:44:77
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b5:aa:43:9e:16:fc:a0:51:2a:ac:34:9b:65:c5:f1:51:78:
         c2:79:a6:9a:94:d8:53:6f:35:72:e4:ba:83:76:7a:da:5a:dd:
         16:cf:79:34:09:69:1b:1f:e2:46:68:20:15:7b:50:d3:a8:5d:
         e7:09:e3:f8:d3:9e:cb:56:1d:e1:ed:98:90:6f:cd:af:06:27:
         7d:4a:aa:29:23:cd:7c:bd:2b:1d:22:25:ae:cc:34:c9:ce:57:
         56:ec:74:91:4c:38:2b:a3:8c:60:08:61:a0:d2:53:6b:13:17:
         14:d8:3b:f2:0a:51:94:ef:c4:3d:2f:dd:3c:d1:ca:2c:c7:a4:
         8a:b7:0c:cc:6d:67:3e:7d:55:e6:45:e7:4f:95:9b:57:de:4c:
         59:f6:33:d8:7b:c8:a3:de:5b:cd:15:2c:6d:69:32:4a:d8:3c:
         bb:d9:22:83:ff:d7:03:fb:17:ad:a6:1a:06:2f:73:44:af:f9:
         e2:01:7d:d1:f2:cf:d9:a7:93:fe:19:da:90:fc:f1:57:2a:ed:
         73:fe:cd:5d:f9:cb:0f:fc:6a:f1:f6:64:c1:e6:43:ea:a1:cb:
         e3:b5:9b:64:39:db:4a:f5:e6:70:1c:b7:cf:76:9e:06:e0:a2:
         89:8e:96:d3:2e:85:4e:9a:c4:83:25:05:3d:6b:3f:56:21:d0:
         d4:9a:86:38
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMQl3jaDzUHr5Qb5nzgfhNLVtovowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4
NzE2REMyRjAeFw0yNDA0MTcwMDI3MDRaFw0yNDA0MjAwMzMyMDRaMDMxMTAvBgNV
BAMTKEUxRTQ1RjA0QkM2QjYxMDQ3RDZDMTlBREE4QkYxMTY3RDhFNjQ0NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClRuddEjkgy/35MCbfH+ypTDa5
CJmfx7ZlxKhsDTHoV3DW8C0K1j7+sRCkr1DuSrtRytMgZbCx0q/S8+a0yMQABntb
3nDUYYi1ZUQO47oBkTh5pYpbN1rFFAVn8VZpsEBbNamfGaUka4ZesEH++WMR6yCf
JJdqeCzRbAWXevUopuzvMNazvWP1owrrLCUjJ7q0WimWKQrRnJE2mcIOPTPucFwk
NIynVObLDVPzyNm0+lnZjxXl0V1EoKDvc3OdbkPmOxFCDgDme7qfozeY6uDPJMQR
cIcD5AVQPyfAsQFNxl6RQBpUCNTtZuVYT3ngYQtMxWVYgIbpDCAwgJQKz0TDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4eRfBLxrYQR9bBmtqL8RZ9jmRHcwHwYDVR0j
BBgwFoAUwa+MmZ6dBtrevDh9eLMFq4cW3C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OTIwNWU3Yy1hODgxLTQ4NzMtOTE4OC1lNTIxYjZhZjUyOWMvMC9DMUFGOEM5OTlF
OUQwNkRBREVCQzM4N0Q3OEIzMDVBQjg3MTZEQzJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4NzE2
REMyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTkyMDVlN2MtYTg4MS00ODczLTkx
ODgtZTUyMWI2YWY1MjljLzAvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1
QUI4NzE2REMyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI61qkOeFvygUSqsNJtlxfFReMJ5ppqU2FNv
NXLkuoN2etpa3RbPeTQJaRsf4kZoIBV7UNOoXecJ4/jTnstWHeHtmJBvza8GJ31K
qikjzXy9Kx0iJa7MNMnOV1bsdJFMOCujjGAIYaDSU2sTFxTYO/IKUZTvxD0v3TzR
yizHpIq3DMxtZz59VeZF50+Vm1feTFn2M9h7yKPeW80VLG1pMkrYPLvZIoP/1wP7
F62mGgYvc0Sv+eIBfdHyz9mnk/4Z2pD88Vcq7XP+zV35yw/8avH2ZMHmQ+qhy+O1
m2Q520r15nAct892ngbgoomOltMuhU6axIMlBT1rP1Yh0NSahjg=
-----END CERTIFICATE-----
Generated at Wed Apr 17 01:00:27 2024 by rpki-client on console-fra.rpki-client.org