Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
File:                     83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft (raw, json)
Hash identifier:          3fKbjCHElu6suFPU9r0+WqkRTz6e3n6fdMN0xpvjGqc=
Subject key identifier:   B7:E3:53:D8:46:EB:63:F1:D5:CC:0F:C0:29:61:B6:5F:BF:E1:91:F2
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       1A177F0ED2ED846B8033C0CED74350026480518E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
Manifest number:          0449
Signing time:             Sat 11 May 2024 22:02:02 +0000
Manifest this update:     Sat 11 May 2024 21:57:02 +0000
Manifest next update:     Wed 15 May 2024 00:00:02 +0000
Files and hashes:         1: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: Mpi+gOpiKUrDBtxSMf7LrOKjaA020QPEeqr2hXrvB0w=)
                          2: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: ba4bJYXBff1ZIW7uRMVK89B0B0NTcS6y5u8OtGS36Ks=)
                          3: 83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl (hash: xx+4QwCYVqpKJTa/gW9yOzJ8KeE9STMQwwVbzFyTRiM=)
                          4: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: eRkqfUoGL9i+Ui5BmFOd2pwiZFmA3eE945Zbvk6zcOw=)
                          5: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: 319xaLCsr1yheVz2kiJy6cmj8XiOjJPXujq5NfiiH1g=)
                          6: 3135302e3130372e3130342e302f32332d3234203d3e203338353035.roa (hash: a4ytfhrxBR6hjtGzSMXM1RVRSQfhM2RmhGbtPuCCF8k=)
                          7: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: tjEzuJPjZoClnzb2BmViJiauL/UTXbtOTyh+LRY+yMk=)
                          8: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: /BSYhfo0Z3GNchaLBx/P41OY1rs0KgqRIMcxfqpX8dg=)
                          9: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: 4koootgASGSzk6ohBjirdcqPZUKGpUXcpyKXpLo8TlI=)
                          10: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: x5FohtHwnxt7beeEV+6xOS9UzQmf2LL5r67bmmGQEOc=)
                          11: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: s1J5gM7V6uQOzDg1X6Dn7pJkFEDEp+hUeNwc5gZriIg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
                          rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 19:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:17:7f:0e:d2:ed:84:6b:80:33:c0:ce:d7:43:50:02:64:80:51:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: May 11 21:57:02 2024 GMT
            Not After : May 15 00:00:02 2024 GMT
        Subject: CN=B7E353D846EB63F1D5CC0FC02961B65FBFE191F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:3c:c6:15:71:ad:6d:85:0e:45:58:2b:21:
                    cb:62:08:b5:db:14:8c:d0:29:bf:d1:ad:c1:66:9c:
                    0f:cf:90:eb:68:51:4b:8b:3e:67:44:00:70:50:a1:
                    76:0b:62:f8:6a:07:24:88:ca:75:73:ee:d7:d1:f7:
                    f5:5f:91:88:62:1e:b2:1c:5c:2c:82:b7:1c:ec:b8:
                    17:a7:cb:82:79:7a:55:43:d6:ac:df:ed:20:9c:3a:
                    f7:d6:91:8c:f8:3f:67:df:67:45:4e:75:c2:98:df:
                    9b:f3:4f:f4:5c:b3:74:3e:6b:ee:1d:7b:c6:06:e9:
                    b7:34:d6:7e:cc:ff:db:e7:07:51:ef:de:e0:00:b6:
                    89:3b:34:c0:9f:96:c0:26:a2:91:90:43:26:bf:67:
                    74:ce:1d:bc:cb:de:ed:a7:e2:8a:41:fc:c3:ec:6a:
                    b8:ad:e8:40:31:17:65:a5:79:df:64:c4:f6:58:7f:
                    05:89:13:4a:0c:fe:8f:0c:d8:01:17:e3:bd:66:78:
                    02:3b:bf:d4:68:01:92:f4:c4:46:60:ef:c7:5b:5b:
                    16:04:e9:59:5c:90:74:44:0d:1b:05:ee:43:c3:13:
                    36:a8:1f:d1:39:65:d3:ad:0c:84:a8:a6:f7:e8:59:
                    4c:88:e9:0c:d3:ce:d3:2a:81:85:f2:b9:ce:d6:d8:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E3:53:D8:46:EB:63:F1:D5:CC:0F:C0:29:61:B6:5F:BF:E1:91:F2
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b0:02:17:fd:ec:d3:d0:7e:96:1d:61:14:2d:ef:50:01:d2:
         19:68:6a:82:25:d6:05:f7:6b:eb:f4:0d:cd:38:dd:63:4e:ae:
         91:36:c8:b7:df:94:ce:fc:ab:a6:5e:f2:9e:0d:17:db:89:23:
         46:27:b2:10:d5:50:03:81:8d:93:c7:5d:cc:86:c2:3d:ac:6e:
         80:33:2d:da:2f:d0:f7:89:d6:8b:c3:ab:49:72:b9:b0:8d:42:
         35:8d:a1:43:83:19:14:7a:00:6d:f4:e5:01:77:26:8c:b3:6a:
         f9:50:29:d3:56:c6:fc:ab:26:cd:25:68:2e:e9:c2:c2:6f:24:
         05:eb:7c:10:90:76:37:06:28:f6:f2:80:f6:63:5a:0f:37:c1:
         88:82:03:6e:53:88:37:55:e1:9d:26:08:21:c3:94:93:26:4e:
         16:56:23:6f:34:e1:9b:02:25:23:90:d7:7a:e9:ea:25:e8:c5:
         d8:fc:9b:21:68:82:83:6a:ec:3a:23:42:3a:09:ca:28:9a:a9:
         fa:83:97:27:10:55:ae:7a:66:00:9e:21:4e:91:d2:c1:da:66:
         66:5a:ab:ce:e8:bd:44:31:3c:97:7a:ad:6d:82:e7:55:8b:d1:
         83:17:cf:c8:95:f5:60:28:51:43:7c:84:dd:c3:72:76:ea:46:
         c2:fe:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 22:41:34 2024 by rpki-client on console-ams.rpki-client.org