Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
File:                     4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json)
Hash identifier:          FU1NmWBoaA7962zGZY4tNv54SLRV6+sFu2dLLJkzGKI=
Subject key identifier:   6E:80:58:67:81:20:1D:09:65:4D:DF:1A:D6:EA:8A:69:FC:E2:22:92
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Certificate issuer:       /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial:       4279FE9B81A03FFC3ABE89ECB52BC70B144E2940
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
Manifest number:          0436
Signing time:             Thu 02 May 2024 22:40:47 +0000
Manifest this update:     Thu 02 May 2024 22:35:47 +0000
Manifest next update:     Mon 06 May 2024 09:57:47 +0000
Files and hashes:         1: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: KdISJidQDc4jZsrLQ64o2Ghh+PQHeauIXcY0IwAp9SE=)
                          2: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: rCOH3xxAAfj1pNlzN0wjwUk5FjWuLhDJdIwrQTwN1l8=)
                          3: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: cZBWmyJVcEruYTz5jZxkeBKZPSWY8Hb8VWSWCgiAjvI=)
                          4: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: 5TL2HsiRY0J5tCiDuwP5I5G6VKjQwHWtSJpLgBKSl9s=)
                          5: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: f4K2SZ1tBIDPBW4R2sqb/6PSvfT8KDt8uhQxMWAFF4A=)
                          6: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: EiocqLCh5acMXbZ6HiEfGJEU3SziY2qRKhtAWMOQoeA=)
                          7: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: zyENRhpBWCFLOnAFhIw9GBX+2AFV1c4Tf6T/skpY63M=)
                          8: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: qX8gePdtOM473piPBMTP7kWrRHBc8lexc0ZQr/Op85s=)
                          9: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: VnwQNKGST3423f7ROowdWhnGGks1pox92ZjveSETg8c=)
                          10: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: LswmJUjYBSTxdSF08XDdiFJuzeMGnUv66qN622jV+Tw=)
                          11: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: BldE+n5ZR7XiM6wKM0WepxdkcTTnAMsaALvhtQVLZgA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
                          rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 05:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:79:fe:9b:81:a0:3f:fc:3a:be:89:ec:b5:2b:c7:0b:14:4e:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
        Validity
            Not Before: May  2 22:35:47 2024 GMT
            Not After : May  6 09:57:47 2024 GMT
        Subject: CN=6E80586781201D09654DDF1AD6EA8A69FCE22292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:59:aa:7b:ff:52:37:07:a5:12:ae:51:67:
                    f8:98:07:96:f0:43:cc:0b:4c:ab:a2:45:5e:f7:7a:
                    57:bc:90:d7:df:0a:5e:e4:ea:c3:9e:53:b3:f2:09:
                    52:3e:96:06:d3:4f:0b:e7:d4:e2:87:38:5c:d8:09:
                    38:8c:9b:a2:a9:89:65:99:7c:3a:32:3a:7d:34:b9:
                    0d:06:de:5c:3c:2d:f9:0c:b9:c5:9a:3f:5f:77:60:
                    89:a2:31:7d:88:fc:20:9a:46:23:c5:60:cd:15:23:
                    3f:5b:86:b7:21:18:78:90:8b:96:ca:10:98:c8:f6:
                    0b:40:88:ca:6c:05:9d:3d:49:9e:b7:bb:b5:27:a2:
                    e2:54:cc:7a:74:a3:47:28:5d:7d:a4:8a:ff:86:60:
                    8e:8d:c6:29:5e:22:00:94:b6:f0:0c:11:bb:3c:ac:
                    47:04:8a:91:2d:f0:7e:9b:1a:90:d0:71:4c:3c:3c:
                    64:87:84:6e:89:e8:c8:c8:75:ad:60:7b:de:33:54:
                    f8:48:62:ff:54:a0:24:17:d5:50:f6:b2:2c:93:fd:
                    8b:26:fc:36:ef:5e:dc:a9:23:91:28:95:6d:3a:2b:
                    19:1f:45:b8:02:6d:35:08:8a:2e:58:85:47:ed:98:
                    70:f7:e1:1b:29:47:3e:a0:c4:58:1d:96:fd:11:0b:
                    cc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:80:58:67:81:20:1D:09:65:4D:DF:1A:D6:EA:8A:69:FC:E2:22:92
            X509v3 Authority Key Identifier:
                keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:30:33:56:22:41:8c:fd:d7:e7:02:03:06:9b:a3:dc:d4:3b:
         aa:d4:c8:9f:00:d3:e8:77:1e:f2:79:5f:57:2a:a4:52:e0:af:
         0b:87:bb:10:0d:00:65:6e:d5:1b:a5:21:22:ac:f8:17:5a:0d:
         85:be:a1:dd:b9:d0:8c:92:28:3b:2f:6a:04:55:ca:5c:4f:5d:
         91:32:8f:19:bb:a1:51:0a:90:2c:3a:53:ff:53:6b:e6:30:5a:
         f3:9f:cc:06:32:cd:dc:8a:56:f3:6c:08:c6:d0:03:b9:ba:41:
         5b:5c:aa:b8:79:e0:09:91:5b:df:bd:5c:cf:ae:99:d5:26:ab:
         dd:40:c3:42:7f:11:d8:93:3a:da:5a:b1:bd:92:e7:22:ac:47:
         6c:65:ee:c2:6f:9d:42:1a:70:00:b4:5a:98:35:c2:60:31:1f:
         6f:40:5d:8e:51:55:cf:c3:81:ac:93:86:c8:6b:1e:0c:66:f2:
         68:a7:f3:06:59:95:7b:eb:dc:b1:7c:46:29:c2:a9:9c:d8:87:
         e6:44:14:4e:d8:2d:ff:11:3c:c0:58:dc:e2:86:98:a2:c0:59:
         1e:58:7b:ea:b3:04:fa:6e:e1:d8:4a:2e:35:a1:89:b8:bc:2d:
         15:71:78:81:e8:97:94:e9:93:8f:80:85:7f:27:d6:4e:28:33:
         ff:5b:fe:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:47:29 2024 by rpki-client on console-fra.rpki-client.org