Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
File:                     F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json)
Hash identifier:          OiKFTDUxQzMHYitu0RI6eUenFVMoMdK7p7l8pJoJeJc=
Subject key identifier:   CF:BB:35:E8:A1:B6:B5:44:03:CE:5B:C5:65:62:2E:72:8D:63:08:D4
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       59F697900BCB4AB0670126D001A7BB4C7DBFEDDE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
Manifest number:          042E
Signing time:             Fri 19 Apr 2024 10:10:55 +0000
Manifest this update:     Fri 19 Apr 2024 10:05:55 +0000
Manifest next update:     Mon 22 Apr 2024 18:44:55 +0000
Files and hashes:         1: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: oLk31qSVIaqUXwyUv9ztwnPUw1UJvmxOdWyfOMuIxhM=)
                          2: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: 8NSrSCYMDFTZmNfl6/e4Rj0vrg/r9XtzMS28Z7c/LO4=)
                          3: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: jI37nNdWQwb/zj5KjkpPuo+srTlyjeFTHjPUana/DaI=)
                          4: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: 0bRi0DX23u9GJ2/3fGwbPmcOfD3OT+Gmtarrrv+ll28=)
                          5: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: f3xc9QY+XKSDQ09BIL5EmE9pqqX3BS/XyvVTI8Q6Msc=)
                          6: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: GIode9kfVORTLmbX03DnHdl0pZ2dZSFIBfc+/YqPs3A=)
                          7: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: X/LGr2iOyULTq7bhZhyo103gakFKNiM+r1Wf9NsL/8c=)
                          8: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: 23KZSfc73b9n9xLknqafZsWnLH/XhjmWm7L+sUm2ziI=)
                          9: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: hhI9I4ziesLSYvwJEX70tw6g5F+I7NRtM8/jKfHmEmA=)
                          10: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: y+OLW0S40JnM0nnggLpDz5UkWp+12bD+wlHLd3fhXkg=)
                          11: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: +qmCjFARxHgJrX5Owi9O+2KeIgkQv6FV9SfM34HrBmU=)
                          12: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: l0SiGuf0uYwEjo1DczpIXGL1j4G5WWeiSzECLrUqyNU=)
                          13: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: 2dvMyZMHFnOJZMDTZ7Xm8DEInoy3wCTypFZrOrIRh/0=)
                          14: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: jTZFiCb+uR0wj9uWEl9IgtnB0kq451pwpGhfiUuR+yk=)
                          15: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: H3vptWwq+aTUVwk0hgLdqCXAKjlD5Yez+oF045lTQW0=)
                          16: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: wcbyMQo3dSE6LlLAPDliAWajR3kYGitb4KP+ZPgV1VI=)
                          17: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: z25LnBBvBYTSF0vBuvt2PK5r5Md/cWP2W4ZR4kC2I5I=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
                          rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 18:44:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f6:97:90:0b:cb:4a:b0:67:01:26:d0:01:a7:bb:4c:7d:bf:ed:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Apr 19 10:05:55 2024 GMT
            Not After : Apr 22 18:44:55 2024 GMT
        Subject: CN=CFBB35E8A1B6B54403CE5BC565622E728D6308D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2f:25:69:9d:90:d0:78:51:da:9a:9c:59:02:
                    bb:93:e5:f5:4d:ec:2f:52:7a:a9:f9:5e:6e:2f:6b:
                    6d:7b:b1:02:a6:14:54:e5:a0:6f:c9:cb:d4:48:83:
                    48:09:e7:ca:3e:ad:24:d6:f5:f6:11:cf:ea:02:91:
                    9a:e1:8b:1c:91:54:78:88:9a:2c:53:3d:bd:88:35:
                    92:25:38:8e:2c:50:e3:a9:32:91:c6:f8:f1:40:43:
                    d2:d5:66:32:0c:78:f7:46:56:7c:62:6c:4c:5c:b9:
                    75:2e:d3:1b:ca:06:eb:a9:2d:5f:a9:51:6d:1b:d7:
                    7d:45:6e:c9:88:22:64:63:23:e8:37:f3:2f:b5:aa:
                    5e:1d:8e:bc:8d:e3:1d:b3:c6:f2:dd:ac:48:9e:37:
                    d4:73:ea:22:7a:fd:34:87:2e:06:66:c2:5d:7d:37:
                    36:62:a2:95:08:1f:7e:a4:b5:8b:b2:ab:4e:1a:1c:
                    a0:31:ef:47:c4:44:85:4d:00:ca:06:96:91:dd:25:
                    24:3d:03:29:83:89:6d:15:b2:04:b2:be:1d:3c:ce:
                    89:01:50:78:17:5a:af:7c:83:2c:35:70:51:b4:33:
                    e3:7e:fa:76:72:fe:93:f7:31:a0:40:4d:56:13:22:
                    48:2e:08:6c:1e:62:69:60:13:69:4f:41:55:84:70:
                    bc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BB:35:E8:A1:B6:B5:44:03:CE:5B:C5:65:62:2E:72:8D:63:08:D4
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9d:01:6f:9d:f1:03:de:92:5a:2e:6a:11:cd:16:5f:b1:4d:
         df:a7:b1:7d:32:53:74:04:96:9c:a4:45:f4:51:a6:12:bf:55:
         27:e6:49:bd:7f:46:47:a8:9d:9f:f0:c1:2a:e4:7e:21:55:17:
         f9:24:4c:2b:d9:53:b8:a9:52:27:16:4f:6c:51:da:e4:40:1c:
         c6:a1:17:95:5a:57:20:96:b5:9e:7f:9c:45:5e:b4:20:8b:bc:
         e6:6e:a7:e3:16:e4:10:2c:c5:09:16:c2:7a:29:97:d2:0c:43:
         01:b5:f0:a4:6c:98:8f:8f:2b:22:4b:d7:b6:bc:63:71:3d:b2:
         43:71:e6:99:a2:8d:62:17:c1:48:61:fe:09:6f:b6:1d:f8:a0:
         e1:83:0d:9a:0f:56:a0:ee:4a:f5:c6:57:43:6c:41:df:a0:d5:
         23:e8:29:53:59:a3:60:8b:fd:54:0f:66:8a:b0:f5:89:d7:ba:
         73:03:8b:44:c9:28:90:b8:71:0c:2c:f6:44:b1:cd:fe:87:8c:
         19:1b:89:97:0a:ff:d3:29:93:58:59:d0:1d:fb:d4:9e:1e:2f:
         6c:b2:b7:12:57:32:c7:1d:fe:73:53:1b:88:ea:b1:bb:04:ae:
         c4:a7:e6:7c:72:00:f1:36:49:e6:87:a6:41:f4:0f:2b:99:5b:
         dd:df:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 11:24:27 2024 by rpki-client on console-fra.rpki-client.org