Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
File:                     229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft (raw, json)
Hash identifier:          /XPFnCh68bx6cdtbFRzOKAb4PNQw602G5kdboeaWnZQ=
Subject key identifier:   DD:6B:13:9F:37:4F:89:70:4B:DA:20:DB:E4:7A:AE:F8:2F:6D:31:7F
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Certificate issuer:       /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial:       01AB68B7E1164C1BDCCDFD7020391243ECBC9FEB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
Manifest number:          0431
Signing time:             Wed 01 May 2024 03:11:34 +0000
Manifest this update:     Wed 01 May 2024 03:06:34 +0000
Manifest next update:     Sat 04 May 2024 14:49:34 +0000
Files and hashes:         1: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: 7xtas/zgPmaVh5WLRPDoXSbPgphLFtzPv6iApP15bYo=)
                          2: 3130332e3130342e3133322e302f32322d3234203d3e20313333383233.roa (hash: IK9YaeKUkf4FaR7zo9UaJ6sJIm986CDaegOpeUSigw8=)
                          3: 34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa (hash: Yefv3jbSOsfKTvdliG7ovig+BXYricC+HrtJH4IvcWw=)
                          4: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl (hash: YCc/5yhYRcC2CAgcdnb6AkBagWcas9+uo5SW9mqjg8A=)
                          5: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: rYEN0EF59yxFj2LQd1dKhBmZSoVRwch2VFKhGcb3ky0=)
                          6: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: IBTSZozBEHYUkeE4m+FkjoWuRsYpQAm6eHVHYg1Fz60=)
                          7: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: x6SXa3lIWsragAFnbqwGDeAH/zDcp/7F256huME32Io=)
                          8: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: 4hNydA2ao+SAdzNq5mE/FcCs6i1iD/UyZOAJffeSP0U=)
                          9: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: fSsOBYlxuYnH0+qA0e+Tb5xwW7bUSMK9yabTrlBiDF0=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
                          rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 13:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ab:68:b7:e1:16:4c:1b:dc:cd:fd:70:20:39:12:43:ec:bc:9f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
        Validity
            Not Before: May  1 03:06:34 2024 GMT
            Not After : May  4 14:49:34 2024 GMT
        Subject: CN=DD6B139F374F89704BDA20DBE47AAEF82F6D317F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:42:ff:86:e6:92:26:65:83:07:c8:f8:8c:
                    5f:40:f4:bb:d3:2e:90:05:3e:ad:1f:b7:e6:89:b7:
                    b8:45:09:7d:9b:e6:d2:87:f0:ed:a4:35:dd:95:15:
                    05:54:e9:b7:c8:df:39:ef:3d:e9:85:af:9c:d9:2e:
                    9d:d0:86:70:6a:94:29:6e:a7:9d:18:92:c2:54:b9:
                    c1:04:b2:51:55:10:fc:a8:39:67:c6:78:90:d3:1c:
                    e1:a5:cc:fd:57:23:30:6c:5f:d6:05:8d:fa:01:93:
                    ae:4e:c2:21:56:aa:9b:90:b4:6f:80:39:3c:47:c5:
                    64:c8:7d:c5:2f:d9:6b:71:8b:08:4f:0c:68:2b:b4:
                    e9:ac:32:3b:8e:7d:06:82:f1:1f:e1:f9:9d:0a:59:
                    dc:9c:b8:84:a2:45:0c:b0:d6:21:df:29:50:1b:3c:
                    0c:b2:31:f1:7b:1e:c2:e2:9a:d2:71:b3:5a:bf:a2:
                    15:90:eb:1a:9f:8b:e9:a0:23:4d:44:48:41:87:61:
                    e9:d0:13:3b:eb:0c:4e:ce:c1:e1:7a:f3:f4:2c:70:
                    5e:b0:46:e5:51:96:d0:83:c4:09:8f:d8:65:2d:6a:
                    f0:23:79:82:62:13:40:aa:2f:4c:68:85:8d:ac:96:
                    89:90:2e:a7:e5:62:fb:8d:58:e8:6d:ec:08:6a:37:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6B:13:9F:37:4F:89:70:4B:DA:20:DB:E4:7A:AE:F8:2F:6D:31:7F
            X509v3 Authority Key Identifier:
                keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d7:a5:e5:c2:a6:5a:33:b9:00:27:2d:5b:e1:b1:f6:61:61:
         5f:61:7f:0d:8c:52:33:d2:73:53:49:55:fb:62:da:49:53:32:
         82:eb:19:ac:f4:51:11:12:11:41:44:3e:a2:25:a8:d3:ea:76:
         28:a4:28:22:23:e3:a3:ea:66:d2:63:c7:75:ae:e3:32:f9:70:
         a8:42:84:cc:fe:0b:1c:a8:2d:74:84:63:6c:cf:c3:28:83:78:
         2c:53:0c:e3:55:9e:7b:09:3b:41:0b:b6:18:be:94:e7:90:22:
         48:84:e5:6b:57:74:f4:44:2b:35:93:a6:11:93:f2:0c:5a:78:
         74:86:de:8e:1f:4e:00:c8:c3:f9:53:71:25:8e:be:3d:3b:97:
         af:ad:23:0b:da:8c:60:4a:83:0f:6d:95:7d:03:0f:75:37:fd:
         9a:87:9e:1e:82:4f:e8:dd:32:92:e3:86:db:ba:14:94:dc:05:
         fd:1d:ad:af:ac:74:e0:ab:b5:ea:35:66:60:b2:13:7b:26:5f:
         71:05:11:83:ca:5d:78:30:e2:1b:63:ad:41:2e:c4:6e:7c:38:
         83:95:6f:6e:b3:37:be:f7:52:da:d3:f4:bf:d4:07:1a:8c:56:
         25:4f:56:97:75:56:bd:86:aa:ad:f9:c2:55:b4:b2:7b:b7:82:
         c2:6e:4c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:56:37 2024 by rpki-client on console-fra.rpki-client.org