Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft
File:                     2FB994CD1282292E6D2907FCECD7F9E472F49985.mft (raw, json)
Hash identifier:          35GbkBO/cLF21IC/v0ZubgfA7y7b7OIgaqrCxdsNmGo=
Subject key identifier:   54:26:1C:05:C8:03:0B:57:DC:90:A6:40:51:F3:76:71:45:36:0E:93
Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85
Certificate issuer:       /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985
Certificate serial:       43826DF12AB05DDE4F2058C9704D213205DE3FFB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft
Manifest number:          0422
Signing time:             Thu 18 Apr 2024 12:50:39 +0000
Manifest this update:     Thu 18 Apr 2024 12:45:39 +0000
Manifest next update:     Sun 21 Apr 2024 22:07:39 +0000
Files and hashes:         1: 3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (hash: rjD6qLPnx8NqaEYwX4uisI58IjWLoX7aREw2tBigNKM=)
                          2: 3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (hash: v189SqGxfGJ1T5DkJdL7Q7JAhQMT1AqcjgdFtkVMhQU=)
                          3: 2FB994CD1282292E6D2907FCECD7F9E472F49985.crl (hash: h+li6ZLiMOsbQujxgx9PZOvptb4LsRcbjr1N+WJkTh4=)
                          4: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (hash: VD3RXjgOYyfLKE547arcd/IJIJLEssOQzlmDs2puSiw=)
                          5: 3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (hash: i3C/wQwiKdnZqtOupiR0iSjRraA5BBCMUtyn15+H21A=)
                          6: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (hash: Kw+n95Hy9qYvFpAmqlEFDfLqo7cZQ87ctXtxSulGVYA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl
                          rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 19:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:82:6d:f1:2a:b0:5d:de:4f:20:58:c9:70:4d:21:32:05:de:3f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985
        Validity
            Not Before: Apr 18 12:45:39 2024 GMT
            Not After : Apr 21 22:07:39 2024 GMT
        Subject: CN=54261C05C8030B57DC90A64051F3767145360E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6d:6c:d7:8f:50:29:d6:c1:68:7e:5f:a9:5e:
                    5b:57:43:2f:5e:50:aa:55:f5:9c:3b:99:95:b3:87:
                    f1:99:e9:23:43:4d:d1:eb:b7:19:db:40:27:d5:01:
                    27:1b:3c:45:c3:33:62:60:8b:e4:2b:e2:e2:f7:17:
                    5d:c0:93:a4:e2:8a:95:c3:ff:01:50:aa:0f:95:c9:
                    c5:e9:50:3e:52:69:a6:22:39:4c:de:c3:cb:e1:cb:
                    c8:5b:fa:51:6a:71:c0:5b:99:6e:85:92:5f:a1:42:
                    15:27:0b:5d:b9:a8:7a:a9:0f:c8:4b:15:b6:03:db:
                    8d:40:f1:b0:80:87:22:60:5b:26:04:5d:61:27:c8:
                    b9:f3:62:7a:3d:3a:fe:4c:46:9d:5b:b4:9a:2f:b2:
                    0e:33:bb:e8:30:47:81:a7:b4:0d:e5:89:0a:6a:ee:
                    46:54:67:2f:db:5b:d0:15:23:f4:9d:7c:df:66:8a:
                    3e:da:56:58:e6:1d:dd:ac:ad:d9:40:39:03:7b:a0:
                    6f:75:f2:74:09:b5:95:83:27:54:3c:03:f8:6c:01:
                    7f:65:fa:15:2d:9f:6a:9e:af:86:63:49:cb:d7:0d:
                    a6:c5:57:ce:38:45:56:ae:79:1e:4a:9e:4d:10:3e:
                    10:bb:9f:ef:79:9f:b9:5c:51:77:03:98:44:b3:54:
                    64:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:26:1C:05:C8:03:0B:57:DC:90:A6:40:51:F3:76:71:45:36:0E:93
            X509v3 Authority Key Identifier:
                keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:fe:82:e1:02:4a:ac:c9:18:04:29:31:8e:9c:f0:30:28:
         58:8c:53:a8:eb:08:52:32:f9:4f:61:56:75:e1:c0:cb:b8:2d:
         3e:7f:3c:24:bc:9e:b4:1b:24:34:ba:88:67:b0:c0:2a:c5:bb:
         2b:08:fa:88:72:bd:5c:e7:e8:97:bf:7e:d0:74:f9:42:f7:b8:
         75:7b:bd:84:db:4e:16:86:1a:b4:b1:25:f6:7c:be:a0:8c:08:
         55:a0:7d:bd:ed:31:95:d1:d7:57:10:1a:a6:94:9f:28:34:b6:
         7c:bb:80:ef:2a:50:6f:76:1d:3b:8a:13:db:6d:9a:2b:6d:36:
         d6:35:85:7d:f3:a8:2c:b6:d2:10:dc:25:eb:f8:8e:20:4d:d9:
         7c:54:48:96:6a:a9:98:9a:91:6b:63:75:94:b4:b6:47:d2:65:
         96:40:0e:89:be:8d:dc:ea:09:4c:e4:47:d8:01:0f:72:7e:2a:
         93:7c:48:3f:1d:d8:bd:44:ba:86:2d:02:92:69:09:51:14:13:
         44:ee:fd:66:21:74:ce:b1:d5:58:33:d5:a0:ba:18:f2:29:04:
         1c:e8:d1:69:d7:24:8b:51:61:1e:e8:34:65:a7:b8:8b:3f:ba:
         af:3b:20:a7:c0:8e:7e:53:55:0c:93:75:17:e8:ea:3f:14:4c:
         0d:b6:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:05:47 2024 by rpki-client on console-ams.rpki-client.org