Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File:                     8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier:          LhgWJojmT9vMyGFFK5dlZ4bAVVKIQtvvG8lhKZ/RqL4=
Subject key identifier:   44:D3:28:9D:51:DB:A6:E8:93:EE:FF:0B:CE:17:A5:F8:AC:E5:91:A0
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       28CFA2CA4A8C93C7385D3C6D73FDBF199CD51A20
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number:          043A
Signing time:             Thu 02 May 2024 04:31:27 +0000
Manifest this update:     Thu 02 May 2024 04:26:27 +0000
Manifest next update:     Sun 05 May 2024 10:11:27 +0000
Files and hashes:         1: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: oDLrqVF+zX4sloo1UqPx5WH57hqDamnMIF+wXyHLkzo=)
                          2: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: BrjRE8H7YFQPvDuh44o7X1R/3YCQrNGnZgPrzzB7jrA=)
                          3: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: EmNpzz7R2+m2IErhMcnSBenoeegQcKP/UugF8erJR24=)
                          4: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: t5yLswmy+K9B/uq3O6w2J2eMngfwgYg+DVzzcc6wFrU=)
                          5: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: Ppce4Vm64drnslQGpTeuSycmePfRpm7u8qF54zWMba0=)
                          6: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: ZDC/KQS7Mp6OF2PElsN/aL3hiqj++OoaQZd7aP/5Jio=)
                          7: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: moOG7rfKT07VI8mhUdsXJnihkLmB1yQA1rNYyKxRlxE=)
                          8: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: jI37HRbBVBEMCyExCyVNIIAeGp+QG2HgZb6ZD9CDTvE=)
                          9: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: baFhaK6Qx2zfajCNQ5WRcPrRdogukgMZ3xMzHr7tNAg=)
                          10: 3231302e3234372e3234322e302f32342d3234203d3e20313430343035.roa (hash: iwHOOcZCf9PniJG5FNPQXYypCkz+Sc2M+pZ4oDnk2sQ=)
                          11: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: Yyo36Dqg7KtPljnZ4zUD/dGagfGudAirRvs8/0fs37s=)
                          12: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: OatBnr7M0bE23jXsKX6rLI2f3wcCggK2k12zldXzFZI=)
                          13: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: ZElStxmfORJqmmEWnm690gyEBQ55HZWMJr21wnNccq0=)
                          14: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: 1SxHXmICyV4G05kGazKm5Rl198apP+N7SL3tG1BjxGg=)
                          15: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: BpEHErDFt7nny/jNZu2+w1IAMQj4CzqFqJY1q4f/Q/w=)
                          16: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: YSMzCdnTI90c9gFHho6W3Ut61PmiIq24l4YJFnER78E=)
                          17: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: O6imjZiVkJXzatcm2roLkT5dgmuL4vywVvQgeTTr+HE=)
                          18: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: t0uFp006ulY6TxsI49FKdRXKoSQqAMlzQk0oK9ftj9k=)
                          19: 3231302e3234372e3234332e302f32342d3234203d3e20313430343035.roa (hash: PY7JTUxdVIRBYDI455xMELX4+DiF3I+THJrJk8m4rQk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 09:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cf:a2:ca:4a:8c:93:c7:38:5d:3c:6d:73:fd:bf:19:9c:d5:1a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: May  2 04:26:27 2024 GMT
            Not After : May  5 10:11:27 2024 GMT
        Subject: CN=44D3289D51DBA6E893EEFF0BCE17A5F8ACE591A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1f:8b:47:0f:71:ba:7e:a0:de:51:b7:a9:6e:
                    2a:ec:ee:df:b2:dd:7c:21:23:a6:68:e6:c1:2d:57:
                    0a:e9:5a:b9:50:13:c4:91:b4:21:60:d1:26:d9:f9:
                    db:ae:26:53:d6:c6:24:c2:6a:63:1a:20:86:3c:05:
                    d1:c3:5e:6b:8b:21:4f:b5:64:94:19:59:19:62:d3:
                    36:d6:1f:4d:a9:e9:69:83:d1:9f:70:39:e2:79:fa:
                    12:48:ae:9d:7c:f9:28:86:fd:69:c3:b1:0d:3c:77:
                    8d:6e:30:86:0d:2b:2c:9d:3f:94:50:5f:88:db:8e:
                    e0:bc:41:cc:f9:d7:8d:50:ec:37:09:97:88:6f:52:
                    4f:15:b9:53:f9:2a:d7:bf:34:de:cd:e7:83:0a:33:
                    76:b0:25:86:87:5c:a4:86:b4:74:fd:43:44:8b:27:
                    b6:ba:4a:69:83:b1:1f:de:dc:8e:67:8c:2f:97:bb:
                    a7:b6:df:49:52:3f:42:e0:e0:43:ac:a4:50:4f:64:
                    f1:58:a9:1f:6d:3b:8d:cd:a2:ac:82:09:da:39:e2:
                    ee:f7:44:8f:9d:66:6b:b2:d8:b2:3d:b0:13:82:48:
                    a2:5e:23:15:74:ec:f6:93:49:74:92:3a:97:82:52:
                    ac:ad:de:fb:cb:33:45:e5:e4:c1:cc:f9:d6:a8:e8:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D3:28:9D:51:DB:A6:E8:93:EE:FF:0B:CE:17:A5:F8:AC:E5:91:A0
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:58:a0:c7:3d:b5:cd:89:cb:4e:bb:87:b0:53:9d:f6:b5:4c:
         f6:7f:86:7c:f8:3f:6f:e5:5a:3b:8f:99:a6:fc:a0:00:04:9f:
         b3:63:f2:33:5c:43:c2:6e:48:e3:7f:d5:19:77:d1:a4:c4:9b:
         3f:bf:b5:a1:81:15:cc:26:18:cf:e6:b2:36:80:01:1b:39:63:
         f8:34:2a:62:f9:00:17:4b:c6:f5:9d:fb:d7:5c:9a:b1:8e:b2:
         31:7a:c1:b9:fb:38:fd:cb:b2:99:34:0b:89:a6:09:f6:53:a2:
         47:72:cf:53:2a:d1:f1:02:c6:d4:bd:0a:5d:32:f6:0c:62:24:
         f6:ce:46:f4:48:b4:2b:93:35:00:ac:8c:99:3c:68:26:8b:15:
         b1:c1:a6:90:c9:bb:b3:41:76:f7:61:ae:b4:54:32:54:d6:cc:
         ac:8a:39:f1:57:97:81:e5:b4:45:b2:33:d6:f0:b8:ab:ba:d3:
         a1:bd:55:a1:b4:dd:df:ea:ef:aa:93:b4:30:fa:2e:21:08:b8:
         1d:1d:b5:d6:f5:43:53:90:03:df:17:0d:04:9e:0c:c3:dd:2e:
         de:43:c9:18:b3:04:28:54:f2:c0:ae:ef:d6:93:10:6a:94:c9:
         8d:5a:8b:f4:a5:af:06:ad:a5:42:a9:f0:f2:73:87:89:66:8e:
         86:aa:ef:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:09:50 2024 by rpki-client on console-ams.rpki-client.org