Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft
File:                     B70932ED6C688D58897E32E1D5C990B20910FF02.mft (raw, json)
Hash identifier:          vl1kqYqyBm+fJHaIanipoGVekLSmaUOF5iNSBJr8S5s=
Subject key identifier:   46:5A:D8:9A:ED:89:A0:3A:21:E9:64:F5:7D:28:E3:A8:9D:4A:BA:E1
Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02
Certificate issuer:       /CN=B70932ED6C688D58897E32E1D5C990B20910FF02
Certificate serial:       3B8996E5EA643E520782E1203A1CB1DF53B0E68A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft
Manifest number:          D4
Signing time:             Wed 15 May 2024 13:21:57 +0000
Manifest this update:     Wed 15 May 2024 13:16:57 +0000
Manifest next update:     Sun 19 May 2024 00:20:57 +0000
Files and hashes:         1: 3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (hash: WFffJOCgH0Y3J50qixxNuMVx5r75z/Uvc+pFqrxFBpg=)
                          2: 3130332e3132392e34302e302f32332d3234203d3e20313335343738.roa (hash: BcSe6bmfvH7lU+i3a6H9OGHOKq/AFu7XtdC0A7giNp4=)
                          3: B70932ED6C688D58897E32E1D5C990B20910FF02.crl (hash: idYyPGvC6aGRcwGAQSj7MtTTn10qwRSxgcNu1ZWqnsQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl
                          rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 May 2024 19:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:89:96:e5:ea:64:3e:52:07:82:e1:20:3a:1c:b1:df:53:b0:e6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02
        Validity
            Not Before: May 15 13:16:57 2024 GMT
            Not After : May 19 00:20:57 2024 GMT
        Subject: CN=465AD89AED89A03A21E964F57D28E3A89D4ABAE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8d:93:0e:84:a0:89:41:68:6a:3b:6b:91:8f:
                    33:5e:b8:73:26:75:8c:e8:22:c9:16:46:3a:84:ff:
                    c9:bf:12:d6:40:5a:4f:6d:20:83:bf:53:d9:7e:87:
                    32:90:36:8d:65:c5:ef:7f:b9:75:4f:00:c7:74:3c:
                    ab:33:7e:2c:14:7f:e5:01:e3:bb:0a:43:7d:08:89:
                    84:d8:27:f8:0c:5d:1e:7f:54:3d:fc:df:39:38:35:
                    df:08:c9:aa:6c:24:55:5d:52:b8:4b:f3:d8:6b:7d:
                    89:3d:ec:33:16:7e:94:1f:01:b0:86:64:87:fc:24:
                    1e:9e:34:bc:ed:12:ad:e5:f1:4a:6b:c4:54:f5:be:
                    1c:ea:d1:fb:de:3e:28:11:4b:69:cd:b6:5e:a4:c3:
                    7d:33:37:fa:a2:df:79:56:ad:1d:b0:29:e0:2d:8c:
                    7b:71:88:9b:17:e1:37:43:24:fb:24:4a:01:90:4b:
                    09:df:49:6e:fc:13:da:b5:f1:1e:c9:63:d8:f7:62:
                    01:4a:30:c9:d7:54:37:93:a9:0f:70:48:e0:2b:42:
                    7a:5c:a8:aa:0a:3f:b5:cc:15:e2:43:29:5f:db:12:
                    cb:90:8f:c3:03:8e:68:d7:aa:c3:f6:07:e9:42:78:
                    b0:f4:dc:03:60:39:22:e8:3b:89:cb:e8:5d:45:c0:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5A:D8:9A:ED:89:A0:3A:21:E9:64:F5:7D:28:E3:A8:9D:4A:BA:E1
            X509v3 Authority Key Identifier:
                keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:fa:e4:4a:6b:a3:ef:89:b7:06:f5:fa:8e:62:dd:eb:66:65:
         04:5b:49:ee:c9:bf:9d:21:5f:97:bd:f8:95:8b:7b:4e:6e:ea:
         53:4b:c7:38:1e:41:a9:ba:1f:26:64:ca:7b:71:77:ad:40:36:
         b5:87:ae:0b:2f:01:ad:28:f1:e2:09:16:2c:e4:df:20:b0:02:
         c5:bb:29:30:62:de:d2:23:c0:60:f4:0f:0e:95:e2:13:cb:4a:
         64:64:19:ff:20:24:e5:38:da:12:30:19:3b:97:dd:a1:9e:52:
         25:4a:ca:53:ac:c4:b1:32:74:9f:47:a9:dd:1f:89:cd:c8:86:
         45:57:07:de:7d:7c:6f:89:6c:0e:78:3d:a0:42:77:30:15:60:
         61:94:d8:ab:b5:1b:82:a2:d6:b3:96:c1:f5:6f:ff:a2:9f:9f:
         06:28:8e:fa:99:e3:2f:72:a4:7e:37:33:ea:bb:65:92:20:aa:
         3f:7f:43:a7:98:00:c6:70:11:e1:e4:06:79:b0:c0:0f:fb:34:
         da:5a:ee:bd:53:a7:ae:8c:07:3b:db:9e:1c:64:e9:7c:23:89:
         be:bb:78:99:00:e1:ac:0b:8c:75:e7:3e:29:73:53:0b:1b:ad:
         af:7b:ad:b5:38:b0:1c:b4:1c:2d:d5:ef:64:42:e3:27:0c:27:
         2e:53:7a:38
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUO4mW5epkPlIHguEgOhyx31Ow5oowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIw
OTEwRkYwMjAeFw0yNDA1MTUxMzE2NTdaFw0yNDA1MTkwMDIwNTdaMDMxMTAvBgNV
BAMTKDQ2NUFEODlBRUQ4OUEwM0EyMUU5NjRGNTdEMjhFM0E4OUQ0QUJBRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhjZMOhKCJQWhqO2uRjzNeuHMm
dYzoIskWRjqE/8m/EtZAWk9tIIO/U9l+hzKQNo1lxe9/uXVPAMd0PKszfiwUf+UB
47sKQ30IiYTYJ/gMXR5/VD383zk4Nd8IyapsJFVdUrhL89hrfYk97DMWfpQfAbCG
ZIf8JB6eNLztEq3l8UprxFT1vhzq0fvePigRS2nNtl6kw30zN/qi33lWrR2wKeAt
jHtxiJsX4TdDJPskSgGQSwnfSW78E9q18R7JY9j3YgFKMMnXVDeTqQ9wSOArQnpc
qKoKP7XMFeJDKV/bEsuQj8MDjmjXqsP2B+lCeLD03ANgOSLoO4nL6F1FwHxdAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURlrYmu2JoDoh6WT1fSjjqJ1KuuEwHwYDVR0j
BBgwFoAUtwky7WxojViJfjLh1cmQsgkQ/wIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
OTkwZGE0OS05ODYyLTQxZGUtODMzZS1iMzA0ZjBjMWFlNTcvMC9CNzA5MzJFRDZD
Njg4RDU4ODk3RTMyRTFENUM5OTBCMjA5MTBGRjAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkwQjIwOTEw
RkYwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk5MGRhNDktOTg2Mi00MWRlLTgz
M2UtYjMwNGYwYzFhZTU3LzAvQjcwOTMyRUQ2QzY4OEQ1ODg5N0UzMkUxRDVDOTkw
QjIwOTEwRkYwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADT65Epro++Jtwb1+o5i3etmZQRbSe7Jv50h
X5e9+JWLe05u6lNLxzgeQam6HyZkyntxd61ANrWHrgsvAa0o8eIJFizk3yCwAsW7
KTBi3tIjwGD0Dw6V4hPLSmRkGf8gJOU42hIwGTuX3aGeUiVKylOsxLEydJ9Hqd0f
ic3IhkVXB959fG+JbA54PaBCdzAVYGGU2Ku1G4Ki1rOWwfVv/6KfnwYojvqZ4y9y
pH43M+q7ZZIgqj9/Q6eYAMZwEeHkBnmwwA/7NNpa7r1Tp66MBzvbnhxk6Xwjib67
eJkA4awLjHXnPilzUwsbra97rbU4sBy0HC3V72RC4ycMJy5Tejg=
-----END CERTIFICATE-----
Generated at Wed May 15 15:50:02 2024 by rpki-client on console-ams.rpki-client.org