Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
File:                     3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json)
Hash identifier:          wtZ0Lmmtj5xv35ErO+J6E9Wvkh/Ou8JsyudbEw0327g=
Subject key identifier:   DE:BF:9C:9C:4D:6C:CA:78:76:2F:23:22:1E:77:90:7A:5D:EA:02:AB
Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB
Certificate issuer:       /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB
Certificate serial:       76A5E9379524C056C9D47EA213EA760BFD9510FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
Manifest number:          18
Signing time:             Fri 17 May 2024 21:50:48 +0000
Manifest this update:     Fri 17 May 2024 21:45:48 +0000
Manifest next update:     Tue 21 May 2024 01:11:48 +0000
Files and hashes:         1: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: 3pQvTbCuYBm6Vo1nBcoEIrPxsYdZ+bSd9Ar6iUoXGJ0=)
                          2: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: 9EXTm7lLrNXeKEZFAS1H8Y/d5vScwHo6Q04HEitu528=)
                          3: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: wfBLV7crHpRvOvrkP8sO7cSqml5P6MQ5e6U//U3tlqI=)
                          4: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: J/Wg5I3AAWGTjt0qXGXk8aEhIm0PYlLw1GdX0NdjbV8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl
                          rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 00:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a5:e9:37:95:24:c0:56:c9:d4:7e:a2:13:ea:76:0b:fd:95:10:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB
        Validity
            Not Before: May 17 21:45:48 2024 GMT
            Not After : May 21 01:11:48 2024 GMT
        Subject: CN=DEBF9C9C4D6CCA78762F23221E77907A5DEA02AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:86:d6:78:c2:16:ee:63:d5:2c:b8:55:0e:
                    bf:ba:3e:c7:15:50:23:78:18:f3:26:cc:5a:a8:58:
                    e6:97:30:23:04:d6:ac:5a:26:bc:24:73:f0:38:ab:
                    ca:9f:15:07:c2:54:f4:90:c8:3a:00:23:65:34:ed:
                    5a:35:47:8d:ad:f8:3f:e2:93:b5:08:be:d6:f5:c7:
                    c1:69:5b:53:ca:ac:cd:f7:ee:86:b2:f7:09:e7:21:
                    e1:82:23:4a:3b:45:02:4b:e6:97:47:eb:41:b6:0e:
                    26:e2:a3:6c:4f:87:8f:44:21:f0:88:32:79:28:09:
                    80:8f:05:09:5e:2c:16:f3:4b:7a:a2:e9:ea:b1:32:
                    cd:fa:3d:9e:9e:43:80:57:34:12:14:3e:39:69:13:
                    61:d4:0e:7f:c7:5e:b8:29:1d:e6:04:6d:ab:49:2f:
                    0d:89:b5:8d:2c:45:b9:74:63:da:9f:b7:75:05:0f:
                    b8:ce:fa:a9:ef:fa:db:c3:32:99:5c:52:29:6e:d8:
                    a9:36:32:3a:f8:31:69:f7:f7:f9:7a:12:18:c3:8c:
                    ff:be:f7:6b:8e:5a:d7:29:50:89:97:bd:75:e3:fa:
                    ed:fa:98:77:79:fe:f6:71:e2:c7:75:5f:96:a1:22:
                    06:d8:b7:08:c4:e9:ac:ef:b1:7c:26:79:1d:ec:c8:
                    60:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BF:9C:9C:4D:6C:CA:78:76:2F:23:22:1E:77:90:7A:5D:EA:02:AB
            X509v3 Authority Key Identifier:
                keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6f:05:2b:34:fc:e1:82:8a:c6:b5:c8:69:fd:fe:91:fd:0f:
         f8:d1:d8:38:a1:27:f5:cf:f6:b5:db:39:f4:5a:02:1b:3f:38:
         70:5f:81:fb:95:5f:14:a6:08:d1:96:5d:d5:f1:fb:a1:5c:34:
         d9:22:78:10:7f:2b:ef:5a:b4:b3:4b:6c:30:c5:9c:fb:1f:25:
         8e:55:65:4a:31:9b:08:29:d9:d5:6e:07:6b:d3:92:9a:e5:f4:
         f2:4c:48:e7:b8:6c:d7:b6:90:12:ba:e1:b1:b7:e0:80:e3:1f:
         43:cb:89:6b:a3:db:2e:60:ea:d0:72:81:fc:b5:e2:c9:31:ff:
         ff:e9:74:cb:13:35:bb:bb:3d:08:32:3e:e0:49:eb:55:f9:93:
         6d:5a:20:ee:03:b7:17:67:c7:33:f6:14:19:dd:34:35:9e:47:
         a5:10:39:cb:ad:58:f6:c7:d8:6d:71:26:49:6f:59:e1:90:19:
         84:4e:4a:db:e1:d9:a7:50:98:07:b8:c8:e8:ee:c4:42:68:0f:
         91:93:29:c0:3e:fd:29:08:f6:59:30:4a:38:9d:da:0f:34:e5:
         5b:2c:9b:58:93:0e:09:33:b5:56:50:cf:a7:0f:45:47:b3:a3:
         41:2d:42:a6:25:c5:52:16:d8:d5:35:88:58:dc:fa:a6:1b:0f:
         1e:c3:97:cd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdqXpN5UkwFbJ1H6iE+p2C/2VEP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF
MzREMjlBQjAeFw0yNDA1MTcyMTQ1NDhaFw0yNDA1MjEwMTExNDhaMDMxMTAvBgNV
BAMTKERFQkY5QzlDNEQ2Q0NBNzg3NjJGMjMyMjFFNzc5MDdBNURFQTAyQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4OYbWeMIW7mPVLLhVDr+6PscV
UCN4GPMmzFqoWOaXMCME1qxaJrwkc/A4q8qfFQfCVPSQyDoAI2U07Vo1R42t+D/i
k7UIvtb1x8FpW1PKrM337oay9wnnIeGCI0o7RQJL5pdH60G2Dibio2xPh49EIfCI
MnkoCYCPBQleLBbzS3qi6eqxMs36PZ6eQ4BXNBIUPjlpE2HUDn/HXrgpHeYEbatJ
Lw2JtY0sRbl0Y9qft3UFD7jO+qnv+tvDMplcUilu2Kk2Mjr4MWn39/l6EhjDjP++
92uOWtcpUImXvXXj+u36mHd5/vZx4sd1X5ahIgbYtwjE6azvsXwmeR3syGBVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3r+cnE1synh2LyMiHneQel3qAqswHwYDVR0j
BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2
MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE
MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl
Y2MtODJiMjE0YmNlNDc0LzAvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNE
NzBFMzREMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHhvBSs0/OGCisa1yGn9/pH9D/jR2DihJ/XP
9rXbOfRaAhs/OHBfgfuVXxSmCNGWXdXx+6FcNNkieBB/K+9atLNLbDDFnPsfJY5V
ZUoxmwgp2dVuB2vTkprl9PJMSOe4bNe2kBK64bG34IDjH0PLiWuj2y5g6tBygfy1
4skx///pdMsTNbu7PQgyPuBJ61X5k21aIO4DtxdnxzP2FBndNDWeR6UQOcutWPbH
2G1xJklvWeGQGYROStvh2adQmAe4yOjuxEJoD5GTKcA+/SkI9lkwSjid2g805Vss
m1iTDgkztVZQz6cPRUezo0EtQqYlxVIW2NU1iFjc+qYbDx7Dl80=
-----END CERTIFICATE-----
Generated at Fri May 17 22:51:20 2024 by rpki-client on console-ams.rpki-client.org