Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
File:                     F38DFF094E16843854EAC1403C69FD7F77809D02.mft (raw, json)
Hash identifier:          7Nu2sz5tLLy3kHy10eT8QoXZ/15KfTjZFaPoxlrbtUM=
Subject key identifier:   C3:6A:93:C5:C1:BE:CA:08:F5:C1:A7:48:9B:4E:8D:53:64:27:34:4D
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Certificate issuer:       /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial:       7AB008B542A122AEC55E813020297A376548485B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
Manifest number:          0440
Signing time:             Wed 01 May 2024 07:21:21 +0000
Manifest this update:     Wed 01 May 2024 07:16:21 +0000
Manifest next update:     Sat 04 May 2024 17:04:21 +0000
Files and hashes:         1: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (hash: P1xOtDQhxWVv3b3q6iKa4zV1ePD95j5Pm/uXOZJSF6E=)
                          2: F38DFF094E16843854EAC1403C69FD7F77809D02.crl (hash: tYHtBoTeKlp4kyHPW+NMn0RxtJCjGnQHOsDY5eHIQ/Q=)
                          3: 3230322e39332e3234332e302f32342d3234203d3e203234313938.roa (hash: sxE+C62FubyRYa/N4KULH9HlfD6fKFrC6kOkzr+/0Dg=)
                          4: 3230322e39332e3234342e302f32342d3234203d3e203338373738.roa (hash: KWqNCP23Av7I5KZzN9unrr0dQ84AuQNXdG0Zngd6CZw=)
                          5: 3230322e39332e3234362e302f32342d3234203d3e203338373738.roa (hash: s3bcWkpIEP3zFPUPYESLsbe8Eu7vzRA19oSyRorT+9E=)
                          6: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (hash: G2bv3qpu58XEL4oDUx53AmRP5ZhF/h9Qe4Z0uPbcjrE=)
                          7: 3230322e39332e3234312e302f32342d3234203d3e203338373738.roa (hash: K+WgD3t8pzON78rwybN5hXw7h94J7l8KbhbevSWnliY=)
                          8: 3130332e3135352e3138362e302f32332d3234203d3e203234313938.roa (hash: w4wNKXBaokqAYeLvjnBdCI2cxuEtHXR9myt9DmZL5RI=)
                          9: 3230322e39332e3234302e302f32342d3234203d3e203338373738.roa (hash: rDBdN1OCOAfHTAkLxafIkrvg1BYmtcYWWbVt4cZ3Ahg=)
                          10: 3230322e39332e3234322e302f32342d3234203d3e203234313938.roa (hash: wgZfSvP5pfCN6o7o23v/2GaIT0c6e4WPLykL8hoU5ww=)
                          11: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (hash: Bvc/Y1AH5MXOE/f+v2ryElkCn66PX98FEt8wdHqvoOQ=)
                          12: 3230322e39332e3234362e302f32332d3233203d3e203338373738.roa (hash: yny4n8n1rYjn3ZILS+ERkwyoGJm0YQrNG87QKfOiYTM=)
                          13: 3230322e39332e3234352e302f32342d3234203d3e203338373738.roa (hash: H9VRQ91DMFjFZEtnAx0gt0Ex0lE6j6wSUe9h+9SXaFo=)
                          14: 323430323a623234303a3a2f33322d3438203d3e203234313938.roa (hash: gKJL/u4Oym0TDB2/ReYA3EQ0pyNk0zlegbrcFF32QG4=)
                          15: 3230322e39332e3234372e302f32342d3234203d3e203338373738.roa (hash: bZ2V+P7VWHiROvvyEviMeLsUf03USNSMZyYWX6E0jgg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
                          rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 12:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b0:08:b5:42:a1:22:ae:c5:5e:81:30:20:29:7a:37:65:48:48:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
        Validity
            Not Before: May  1 07:16:21 2024 GMT
            Not After : May  4 17:04:21 2024 GMT
        Subject: CN=C36A93C5C1BECA08F5C1A7489B4E8D536427344D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:d5:2c:60:cc:12:d0:55:87:5d:9a:4d:17:
                    02:25:fa:8e:73:10:41:76:11:6e:c6:8c:6f:d1:2b:
                    f6:42:ef:19:47:dc:bc:76:e9:5d:0e:f0:d1:0f:46:
                    1a:b9:e5:3c:7d:c0:47:53:f0:01:d6:63:c3:66:9c:
                    bd:20:2a:59:f7:f1:be:40:7c:a9:ce:29:64:51:0b:
                    dd:24:2b:de:4d:b3:b1:09:48:c2:20:5e:b0:93:da:
                    86:8d:1f:f6:ee:72:1c:f1:13:38:a7:a8:8a:65:4a:
                    74:f6:4e:5f:2e:9d:84:77:38:c9:50:7e:d5:50:43:
                    1c:d0:00:8f:bc:5e:0d:d3:4f:08:ad:5f:1e:aa:dc:
                    09:d1:ef:57:aa:75:6a:51:4a:ff:7d:3d:9e:50:e8:
                    41:31:3c:df:bd:35:b4:cd:10:5a:45:82:de:c7:10:
                    aa:65:49:47:da:55:71:0c:ff:8b:cb:d3:ca:51:80:
                    b6:67:06:8a:eb:b3:62:a0:12:56:cb:3e:b5:e0:a5:
                    ed:4d:34:c9:01:51:43:92:09:5a:e0:c6:71:47:18:
                    7e:1e:50:99:3c:eb:8d:de:c2:38:74:62:90:07:91:
                    27:4c:64:7f:52:be:81:67:5d:83:33:df:a0:c0:25:
                    b2:a2:73:6e:30:b5:48:d1:47:27:56:00:a0:5c:31:
                    55:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6A:93:C5:C1:BE:CA:08:F5:C1:A7:48:9B:4E:8D:53:64:27:34:4D
            X509v3 Authority Key Identifier:
                keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8d:6e:b7:87:5e:8d:5e:50:48:74:84:a9:a3:89:74:f7:b5:
         65:79:6b:95:1e:ef:d5:8a:7e:e1:ee:cc:78:b9:89:23:b6:26:
         ff:11:3d:85:1f:b5:89:73:00:27:5a:5a:64:85:2e:5e:b6:cc:
         5f:f9:2f:88:75:ba:0b:ac:8a:7c:49:9a:0d:f5:5d:9b:37:a2:
         bb:a9:e2:a6:16:1c:13:31:9f:f8:01:14:c0:ff:94:e2:37:05:
         83:f6:b1:00:8d:8c:76:eb:1b:e3:1c:91:45:13:fd:1f:da:94:
         c3:97:33:fb:5b:c4:d9:82:a0:74:19:c1:85:5f:1f:cf:ad:ef:
         f2:3c:ea:fd:4e:54:f8:54:10:d3:e8:6e:bf:39:78:1f:9f:cf:
         0e:c3:8f:ba:f3:ef:70:ad:9f:72:11:36:cd:0b:29:5f:58:4f:
         47:44:19:8b:d3:86:c6:f5:02:73:69:c8:5a:99:12:c1:97:a4:
         da:96:61:ce:c8:69:0a:08:8b:fa:b2:b8:c4:dd:93:fc:7e:1e:
         3d:fb:9b:d3:b6:56:56:bd:fd:ba:4c:5e:d9:07:02:a0:2a:47:
         fa:ad:0b:7f:93:86:8a:ae:36:7a:56:93:c3:26:19:b0:a0:1c:
         35:b8:d4:80:59:11:8d:6b:12:c7:56:38:8c:8f:56:ca:23:55:
         68:c4:67:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 08:04:15 2024 by rpki-client on console-ams.rpki-client.org