Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
File:                     1976DD7D4FBDFBEB355F0B96690613959E106872.mft (raw, json)
Hash identifier:          3UQ5hOtkLxue3gixm+IPeXQAcgiDuDDoCp3znHqOjFE=
Subject key identifier:   1D:FB:E3:05:4A:84:9D:12:73:51:B5:7A:41:C5:E4:37:1A:54:72:41
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       34B1055BC39D83AA094854FBE6ED2F4050CA8203
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
Manifest number:          042C
Signing time:             Tue 30 Apr 2024 17:11:38 +0000
Manifest this update:     Tue 30 Apr 2024 17:06:38 +0000
Manifest next update:     Sat 04 May 2024 05:07:38 +0000
Files and hashes:         1: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: c20EIAXMfABQNYynFBZ6UgkI4TJagUMvRavvpLmYLLk=)
                          2: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: EWyd3HvoKv4VkM5FrxkvM0SiPq0aQGDxcLZJrEfXwWU=)
                          3: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: hw3gqfgbhO4tatcZv0EHzWzicS22qeKby0cqTy6VvXY=)
                          4: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: y4tJrvbNvHgrpNzTDvkiQdjfR14Sed4krFIgqegWtNk=)
                          5: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: 5MLXeGI8XUZIY593jmgHOL/d3BsFvLxu2+eBNKHybNo=)
                          6: 1976DD7D4FBDFBEB355F0B96690613959E106872.crl (hash: ykVMWG0TjiZOUT5BbyYdOlbtvXBsXV7yf0FQmZEEmZM=)
                          7: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: g6nTqqZfA9DfYBl1fepzKBYJ/Nj2JjpkNCR+2Q2oHqM=)
                          8: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: yehVlIli3y20ddw+KBLpnCLks4m/UAVqP7tSQRUr4A8=)
                          9: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: 3lPGMpBmz03kAitI1gAsv1Onbvg/l4g+KTAVxVsmVu0=)
                          10: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: 0j9NMP9mh+49Cvj5OTe3G03ngkl65elKV+06AJP+TZg=)
                          11: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: X6GHRefKvO08t+/aazB6NmThRzd7qHiFzVlHQgTE2qo=)
                          12: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: 4kfw9wxMFbZRD9TSS+gEYFp7gcYlY+8liCP9Le3O5mU=)
                          13: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: 6GcCWJWbcmijM7AKwOnsidk+S0XxfuEDWZTDWQbZ7XE=)
                          14: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: EN9NkN+hXNKvnXRUS5mLF//exzUT+MMy6d8Vqihptu8=)
                          15: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: CO247HziiI/b7MeueGEm7fq5GE2/VyGGrWCM8PhDOFQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b1:05:5b:c3:9d:83:aa:09:48:54:fb:e6:ed:2f:40:50:ca:82:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Apr 30 17:06:38 2024 GMT
            Not After : May  4 05:07:38 2024 GMT
        Subject: CN=1DFBE3054A849D127351B57A41C5E4371A547241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:dd:1d:b3:2a:f7:52:08:67:b4:4d:14:6d:
                    f6:8f:82:e7:27:02:36:3c:52:04:51:e2:bf:af:f7:
                    a5:03:1d:67:3c:23:10:c3:7f:f4:7f:e1:dc:78:df:
                    e9:b2:46:20:0f:ec:13:48:12:e6:7b:fe:fc:86:c5:
                    59:17:13:9c:36:fc:5c:07:78:0e:25:81:b1:5c:ce:
                    b4:c3:b1:4e:f5:8f:3d:f9:44:3f:d1:c1:a8:b2:19:
                    15:05:06:b9:be:17:36:79:26:38:2d:da:20:72:e0:
                    84:56:46:53:1f:bb:1c:ec:46:45:bb:4f:16:ea:8b:
                    64:10:ed:c0:db:14:ea:97:2b:ab:9b:fc:2c:3b:76:
                    7d:fa:cd:51:e2:10:0a:20:5a:67:5d:51:e7:90:0e:
                    af:fc:fe:f7:ca:48:14:06:2d:56:64:a1:ce:07:24:
                    e6:43:5c:85:0c:23:0e:00:d4:a8:e4:5a:3b:12:1b:
                    15:eb:81:52:04:50:5a:c8:d9:84:b3:6d:99:55:15:
                    8f:c4:d3:5c:7b:21:88:30:c8:43:23:5e:5e:f4:99:
                    94:7d:d4:20:1b:66:0d:47:d3:37:32:e2:dd:87:04:
                    45:6f:f8:67:cd:d6:95:12:c1:0c:e2:4a:3e:f6:d4:
                    8c:96:6b:60:32:e9:34:f6:99:3c:50:81:a8:cf:eb:
                    b1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FB:E3:05:4A:84:9D:12:73:51:B5:7A:41:C5:E4:37:1A:54:72:41
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:ef:69:18:9d:ab:1b:b4:7e:0d:2e:75:b9:f2:39:bc:d0:16:
         cf:de:eb:c1:44:fa:16:38:c1:1d:ea:51:73:ea:b5:4a:28:0b:
         5a:ed:90:46:ab:21:01:99:7b:a8:01:8f:6c:96:9a:1a:95:ec:
         da:ea:22:b6:65:37:1e:54:b6:4c:ba:c1:76:95:42:8c:a1:c6:
         ee:94:f3:14:08:61:e9:bd:8d:38:d5:9c:95:aa:06:72:20:69:
         e0:09:14:ec:51:2e:13:0f:77:a0:50:94:8b:45:6a:c7:6b:da:
         1b:3f:51:ac:d9:a4:59:ff:5f:b8:cd:48:a1:1e:08:18:95:22:
         56:e0:d2:6f:4c:79:c9:10:19:df:2e:bc:a3:70:4f:d7:d6:a3:
         0d:31:7d:77:88:37:23:53:fc:84:4b:5c:d5:65:41:ba:a2:09:
         90:10:91:21:f0:84:76:73:13:ec:41:b4:bc:6e:85:fe:fa:00:
         f5:45:e9:28:19:38:1a:3e:d7:82:53:80:7a:40:8f:14:2a:ac:
         0c:92:06:d6:c7:e6:db:d8:ab:eb:3d:a0:26:11:62:bb:d6:ce:
         af:12:26:81:e8:68:61:4d:22:94:d9:79:52:96:c0:83:01:24:
         dd:f5:d7:62:c1:fc:30:db:fa:63:06:c9:a0:6b:c4:1c:77:ee:
         cc:c9:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:15 2024 by rpki-client on console-ams.rpki-client.org