Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
File:                     DA8766A90851AE44D76B8563D83586F0164FE5CF.mft (raw, json)
Hash identifier:          fDBn3c5L+pfGVPHO+NxNpnupHWDHmGGJ8lVYk/29uO8=
Subject key identifier:   32:40:B1:0A:9E:B5:3E:3D:F5:BD:DD:65:52:28:F2:95:4A:CF:7A:BB
Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF
Certificate issuer:       /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
Certificate serial:       3F5A2C2ECA4BC1D4CA91E87868619485FCC40847
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
Manifest number:          0458
Signing time:             Tue 30 Apr 2024 21:01:54 +0000
Manifest this update:     Tue 30 Apr 2024 20:56:54 +0000
Manifest next update:     Fri 03 May 2024 23:40:54 +0000
Files and hashes:         1: 323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa (hash: kW7/BU69nyozzWzVgFLEcxD+G0emrysXTjPuXNQEQU8=)
                          2: 323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa (hash: +x4T5Aw7pz8Jg2nuo2Bb1xBgv6lfKMlvTf0/cAvrX04=)
                          3: 323430353a616163303a3430303a3a2f34302d3430203d3e20313339393439.roa (hash: 5CrIhCxkbIkEfEXaUTYMOAIyPQ2xJAnB7+3H6Y4z5MI=)
                          4: 323430353a616163303a35353a3a2f34382d3438203d3e20313339393439.roa (hash: ClX6YjP1U64O0x9o8QokVLrn1o3v+XEkhwuow1RaaYI=)
                          5: DA8766A90851AE44D76B8563D83586F0164FE5CF.crl (hash: iTfFCu0yvo3XZOYJ2n7jgevtSSbqVglNEzlInCf3Wxk=)
                          6: 323430353a616163303a31323a3a2f34382d3438203d3e20313339393439.roa (hash: NCqxglkAE9miCro9r1CT3LmpsDZVNXHsUFjbUWHVMhs=)
                          7: 323430353a616163303a3232323a3a2f34382d3438203d3e20313339393439.roa (hash: vnJILYnZLU4fRpWacJ6HiRLOcQDZnbrBFnrwTG7tD/c=)
                          8: 323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa (hash: cwzvQZJPM89gcb2/wLflXeqMU3fE8VkCU1MF374NC+g=)
                          9: 323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa (hash: 56KeQqs6JmBcvs5dV3CwEL100SrFXhFc+JTeePZn1vg=)
                          10: 323430353a616163303a35323a3a2f34382d3438203d3e20313339393439.roa (hash: IW7O+2Tw5NxPr0dwMjJyQztZ0KiVktt2MlC1m7oQyjY=)
                          11: 3130332e3134372e35322e302f32342d3234203d3e20313339393439.roa (hash: tQJZy0KJNB1ZBuDsIhsn3DVCCsplGm46lX0jDwGf6cw=)
                          12: 323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa (hash: TSbP4ikAEQubVoBKgAuN+KABpg5nmhinI4Edt7MBPdw=)
                          13: 3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa (hash: g8KCuVRfHdqyspEfvj+TwM3mZ5KdXINhnD/ntPINyr0=)
                          14: 323430353a616163303a3130303a3a2f34382d3438203d3e20313339393439.roa (hash: jOz4OpM+omFSRd/i2o5MiNZNHmvj+syVcZP/m5U2qvg=)
                          15: 323430353a616163303a3232313a3a2f34382d3438203d3e20313339393439.roa (hash: 8ta7yw4B4utuXOXcNX0Ilejom40ybRp3siLVt8aLaX8=)
                          16: 323430353a616163303a35343a3a2f34382d3438203d3e20313339393439.roa (hash: krGGMl+Ilf3X4rJedlsFjSJXdb5bs/WvYj6IHw46HhY=)
                          17: 323430353a616163303a35333a3a2f34382d3438203d3e20313339393439.roa (hash: figAl+Z8nJ7M0qUFiRd19IrhQx/hIQAUsnReV8MROnQ=)
                          18: 323430353a616163303a363a3a2f34382d3438203d3e20313339393439.roa (hash: WceCY2QgYoFwa9oX5I+IJs584bk2xLnwvDjbK8kVQ4s=)
                          19: 3130332e3134372e35322e302f32332d3233203d3e20313339393439.roa (hash: v76i3vc6YzRRRFCEaeugT3CFUxtUt4z4GkAVZE5KlAI=)
                          20: 323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa (hash: u6xi5TN/SRIz2ABDg+cplF62fwKLUFdvG1H4kxmNX6s=)
                          21: 323430353a616163303a373a3a2f34382d3438203d3e20313339393439.roa (hash: LFhOeTen5ByE6eSoIAzU+E/iK34rCyuASzFnDc33MIU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl
                          rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 23:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5a:2c:2e:ca:4b:c1:d4:ca:91:e8:78:68:61:94:85:fc:c4:08:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF
        Validity
            Not Before: Apr 30 20:56:54 2024 GMT
            Not After : May  3 23:40:54 2024 GMT
        Subject: CN=3240B10A9EB53E3DF5BDDD655228F2954ACF7ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:15:63:ef:8d:39:f4:e2:21:14:a2:8b:ba:e2:
                    e8:6f:fe:bb:7e:18:81:4d:90:27:b7:8e:43:fb:45:
                    ef:77:fc:0d:b0:24:25:70:cd:23:ae:69:f9:87:a7:
                    2f:98:81:f9:c3:9a:c5:ef:4f:d1:30:cf:09:87:b2:
                    9b:9b:bb:98:b5:64:61:3b:21:bb:0c:b1:9f:c7:d6:
                    fd:19:ce:af:6a:bc:0d:b8:34:20:35:cc:88:05:18:
                    56:68:76:cd:36:65:dc:cc:14:82:7f:4c:57:fb:4b:
                    8c:8b:71:fb:00:3b:d7:ea:7b:22:b3:46:c4:b0:cb:
                    ee:79:6c:1b:d5:a9:85:15:f3:fa:2d:8b:c1:e8:87:
                    a9:e6:8a:49:93:0a:3d:16:10:d7:14:15:b8:ce:07:
                    f5:e6:99:a5:09:26:3f:13:ee:ac:eb:99:bb:60:02:
                    6b:2d:de:87:7d:f7:e9:ca:43:65:23:81:51:8d:d5:
                    31:f6:c7:a9:f2:b6:bd:79:0e:38:02:6b:9e:8d:12:
                    d0:43:8f:30:75:2c:cf:14:12:e9:a5:e9:61:fb:69:
                    c3:65:47:99:a0:08:e3:70:ed:89:1f:1a:39:b3:77:
                    e5:17:41:20:58:53:af:9f:08:31:c2:93:f3:52:1a:
                    4b:ee:db:1e:86:1a:ee:22:d9:14:e1:0b:26:37:8f:
                    c9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:40:B1:0A:9E:B5:3E:3D:F5:BD:DD:65:52:28:F2:95:4A:CF:7A:BB
            X509v3 Authority Key Identifier:
                keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:38:c4:ff:ed:da:2b:5a:b6:fa:85:fa:ed:67:0f:5e:4f:ab:
         7a:46:a0:a5:2e:b9:6b:02:11:e1:c4:e9:b4:73:09:91:ab:75:
         c4:2d:d0:2f:b0:6a:ae:d2:0f:c9:90:db:d9:2c:69:a4:bf:af:
         96:99:58:39:45:19:f5:04:ee:81:99:83:94:2c:58:f0:6d:2f:
         e5:bd:0f:17:c0:7f:09:8d:1c:33:38:da:9b:af:d6:c8:4b:e1:
         a5:1c:77:e8:ea:28:30:1e:a6:c1:40:57:6f:c7:ba:ad:12:4f:
         4b:bd:93:03:61:56:22:4e:6c:d9:47:ea:f6:22:f7:ca:b2:fc:
         24:d6:1f:76:40:70:97:74:61:32:59:23:3b:39:1d:50:a6:c8:
         18:a6:28:84:cf:76:ad:0b:30:0e:09:24:5f:9e:03:2b:f8:6e:
         31:f0:d0:1d:04:c3:44:e0:22:e3:84:41:a2:bf:17:75:00:22:
         6e:5d:af:fc:7c:21:00:12:60:29:b7:4d:9e:df:fd:20:74:f2:
         bd:b7:50:df:8b:26:b2:da:94:f9:66:84:10:8c:36:63:a4:2c:
         fc:ec:1f:b1:eb:96:cb:de:09:40:27:7e:7f:b0:cb:2b:35:73:
         c5:fb:58:37:45:ae:94:59:8f:73:28:ea:0a:01:89:45:4f:8d:
         3e:14:46:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:57:34 2024 by rpki-client on console-ams.rpki-client.org