Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
File:                     C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft (raw, json)
Hash identifier:          +KcjzySl8eTDHcjWBF/dDGUvNIUlldAKoqeGBiJnEL8=
Subject key identifier:   C8:73:CD:F2:E3:C6:7C:8F:BD:28:56:49:EF:DF:F6:2A:F4:B0:FA:0C
Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
Certificate issuer:       /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Certificate serial:       73AFB24A45A5C5102EF0A5E6E4C6BB060727C4E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
Manifest number:          0436
Signing time:             Mon 27 May 2024 09:31:43 +0000
Manifest this update:     Mon 27 May 2024 09:26:43 +0000
Manifest next update:     Thu 30 May 2024 13:22:43 +0000
Files and hashes:         1: 3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (hash: Jog10QAYslnPjVZScpp7e+Stj37Vvp9/CNzc04LtKo0=)
                          2: 3230332e38392e32342e302f32312d3234203d3e203234353231.roa (hash: I8l+Fh95nOWGvNYs74V0DvgQkoeTjEwZDFqg0XCzsdk=)
                          3: 323430333a626130303a323030303a3a2f34302d3438203d3e20313332363531.roa (hash: NXK6GqyM5BY0XfYzpPGn7bc7UeihGHhpc/3yfkIeq5s=)
                          4: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (hash: xTgQPvk+gG1wMz0njgy9KTB0aKmL1X6wr7NeuADx6hw=)
                          5: 323430333a626130303a3a2f33322d3438203d3e203234353231.roa (hash: sfl8slCC5bZPVp1guecn1+OA9OjY5bgvzmhO26wAt8o=)
                          6: 3131322e3130392e31362e302f32312d3234203d3e203234353231.roa (hash: Ojj2tW470jKzWw7OP1+m+KROLb35B3K703uxZd/oKGA=)
                          7: 3137352e3138342e3232342e302f32312d3234203d3e203234353231.roa (hash: rPSDYrQU4nzSP+ijECNnTmmqFbNqzhs2dBEE3lrfWFo=)
                          8: 3131392e38322e3234302e302f32312d3234203d3e203234353231.roa (hash: ESwreuywVu+3zFW3NzTkx6Ms1wMPE47eV1j9PZlfxWU=)
                          9: C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl (hash: aCqcd5LOBEVkh7czHi06PhLGKAHKoCInHYJdlo3ZRnQ=)
                          10: 3137352e3138342e3233362e302f32322d3234203d3e20313332363531.roa (hash: mIhVHFB7C2KIbp4ipsFX66QENnWeEmsJHYvKSj3amRc=)
                          11: 3132332e3235352e3230302e302f32312d3234203d3e203234353231.roa (hash: Z7RwzshL8sQT+b3alhiP/nA3eE2rd3MEE/le8iiNS/I=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
                          rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 May 2024 13:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:af:b2:4a:45:a5:c5:10:2e:f0:a5:e6:e4:c6:bb:06:07:27:c4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
        Validity
            Not Before: May 27 09:26:43 2024 GMT
            Not After : May 30 13:22:43 2024 GMT
        Subject: CN=C873CDF2E3C67C8FBD285649EFDFF62AF4B0FA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:37:63:2b:23:9c:d0:19:ad:9c:24:e4:6a:75:
                    5e:0c:e4:21:8f:63:03:c3:2f:05:3d:15:9e:09:02:
                    7a:b7:3c:53:8c:c3:a6:25:af:b6:a5:87:bb:46:42:
                    7e:52:09:49:d8:f1:5f:45:48:c8:ae:72:e4:85:72:
                    1e:0d:ab:2e:61:03:ee:ca:a4:9e:bf:ee:23:37:2f:
                    d5:b9:df:12:ba:bb:6f:85:d9:f8:55:01:3f:3d:a8:
                    83:b5:37:5b:0b:50:b0:3c:13:39:05:39:5e:38:e2:
                    9d:34:da:a6:fa:0b:38:6c:f1:1b:ed:78:60:3c:a2:
                    14:05:73:56:30:0c:c1:03:a3:8a:a3:6c:d2:3f:1c:
                    9b:eb:22:03:ca:cf:7b:e1:1f:27:91:22:6e:b6:9c:
                    f4:43:b2:cd:f8:10:c6:48:19:ec:90:fd:17:c7:4a:
                    66:94:bc:30:42:8e:73:cd:28:51:f3:6f:9a:bf:92:
                    c2:f9:ac:e3:55:a1:24:5d:2d:68:39:7c:a2:f0:0e:
                    d1:8a:46:33:8d:fa:2d:ce:5e:1c:16:3a:41:60:df:
                    2a:93:97:49:ea:5c:f2:0b:ef:60:81:00:85:8c:2a:
                    b6:05:23:35:29:fe:3e:85:96:e4:27:ab:1d:df:0d:
                    e0:cf:d4:b1:79:df:b6:ab:4b:ff:e4:5e:42:4f:92:
                    4a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:73:CD:F2:E3:C6:7C:8F:BD:28:56:49:EF:DF:F6:2A:F4:B0:FA:0C
            X509v3 Authority Key Identifier:
                keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:f6:22:94:60:cf:6b:ac:98:1e:5f:c2:22:c5:40:26:4e:be:
         c9:7b:54:bc:29:3d:60:1e:23:86:38:3a:0f:bc:46:3a:4b:8b:
         78:33:3a:64:8e:8b:71:20:3e:a6:fc:4c:99:c2:e6:c4:ba:e1:
         c7:c5:1b:c0:dc:79:3b:72:b8:b8:7c:c8:d5:f2:c2:e8:85:33:
         fa:d2:ac:5c:b2:a6:88:53:e8:d4:2a:b0:db:18:54:78:1e:8c:
         05:68:8e:1c:10:fb:85:db:df:55:a6:f1:9e:67:7b:1a:80:a1:
         21:56:55:5a:75:79:45:87:03:eb:46:de:09:b5:69:fe:d9:e1:
         c5:5c:66:35:5b:f7:9d:1b:2b:fa:89:dd:02:ec:ae:cc:dd:b2:
         2c:0c:e4:5f:6a:35:cb:d5:53:fb:ce:77:34:38:83:a4:a0:93:
         41:7c:1e:fb:c4:8f:8b:89:db:8e:bc:2c:f2:5c:e8:fb:bf:8c:
         75:52:52:a6:4a:79:f8:81:fe:88:79:1a:6f:88:af:6b:76:86:
         87:d4:20:14:3f:f8:ac:34:98:ae:c7:4e:70:02:86:6b:54:7d:
         f2:e8:dd:bf:12:41:fb:54:35:ca:c0:a3:cb:e1:e9:5a:cd:10:
         8e:fc:13:f4:38:db:e0:23:5e:74:b7:9b:08:96:f8:a2:93:be:
         cb:71:75:f3
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc6+ySkWlxRAu8KXm5Ma7BgcnxOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz
QjI3MUUzRTAeFw0yNDA1MjcwOTI2NDNaFw0yNDA1MzAxMzIyNDNaMDMxMTAvBgNV
BAMTKEM4NzNDREYyRTNDNjdDOEZCRDI4NTY0OUVGREZGNjJBRjRCMEZBMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDON2MrI5zQGa2cJORqdV4M5CGP
YwPDLwU9FZ4JAnq3PFOMw6Ylr7alh7tGQn5SCUnY8V9FSMiucuSFch4Nqy5hA+7K
pJ6/7iM3L9W53xK6u2+F2fhVAT89qIO1N1sLULA8EzkFOV444p002qb6Czhs8Rvt
eGA8ohQFc1YwDMEDo4qjbNI/HJvrIgPKz3vhHyeRIm62nPRDss34EMZIGeyQ/RfH
SmaUvDBCjnPNKFHzb5q/ksL5rONVoSRdLWg5fKLwDtGKRjON+i3OXhwWOkFg3yqT
l0nqXPIL72CBAIWMKrYFIzUp/j6FluQnqx3fDeDP1LF537arS//kXkJPkkpZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyHPN8uPGfI+9KFZJ79/2KvSw+gwwHwYDVR0j
BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3
RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3
MUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA5YzIyYjEtMWI3Yi00NjcxLWFi
OTQtNWM1ZTc0ODgyNTQ3LzAvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgw
MDgzQjI3MUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMr2IpRgz2usmB5fwiLFQCZOvsl7VLwpPWAe
I4Y4Og+8RjpLi3gzOmSOi3EgPqb8TJnC5sS64cfFG8DceTtyuLh8yNXywuiFM/rS
rFyypohT6NQqsNsYVHgejAVojhwQ+4Xb31Wm8Z5nexqAoSFWVVp1eUWHA+tG3gm1
af7Z4cVcZjVb950bK/qJ3QLsrszdsiwM5F9qNcvVU/vOdzQ4g6Sgk0F8HvvEj4uJ
2468LPJc6Pu/jHVSUqZKefiB/oh5Gm+Ir2t2hofUIBQ/+Kw0mK7HTnAChmtUffLo
3b8SQftUNcrAo8vh6VrNEI78E/Q42+AjXnS3mwiW+KKTvstxdfM=
-----END CERTIFICATE-----
Generated at Mon May 27 10:24:25 2024 by rpki-client on console-fra.rpki-client.org