Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
File:                     DD29F5E4CE561760A0212F0448987AFBE75263D7.mft (raw, json)
Hash identifier:          cEM26ek4cPGgxwVNVgqcp7K6gymp4tLY7Yjy0kLblEs=
Subject key identifier:   85:34:69:66:10:1A:B5:97:F8:1D:10:7C:88:92:60:32:FD:C8:89:23
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Certificate issuer:       /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial:       0142C1ECC46E39DBA9A1950AB1148A05E53B7204
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
Manifest number:          0247
Signing time:             Sun 19 May 2024 20:21:49 +0000
Manifest this update:     Sun 19 May 2024 20:16:49 +0000
Manifest next update:     Thu 23 May 2024 07:58:49 +0000
Files and hashes:         1: DD29F5E4CE561760A0212F0448987AFBE75263D7.crl (hash: YxjXV8cEMzbVql/5/CuUdP1UqxzmIkK1eyTXeXLz5UA=)
                          2: 35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (hash: lWUyBM4uQV65NPE7VrQpjexhjz0yEXoDhnDWSGaVDI0=)
                          3: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (hash: Sh1Yl/59zUSCsXC9+pWVanY5d3+cu6Elh5iFn6StgTM=)
                          4: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (hash: bhKHYK9obFl/wh6ufXfRMNZyUVp/XWJvbrCc5sm6boo=)
                          5: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (hash: fISgAshT6fdaWrWilwrStIis2PJ5deJBaM169sUzF34=)
                          6: 35382e3134372e3138382e302f32342d3234203d3e203234353334.roa (hash: oH9bgVrT3gaDslqQL3ake7uI9o0l2J1Fb4XrkqO/Txw=)
                          7: 35382e3134372e3138372e302f32342d3234203d3e203234353334.roa (hash: 5a6ESL8o8N2uYRfQYUOcYnEwVeqgWPz/ERUMQRHJcpQ=)
                          8: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (hash: ow/MHglTYYxcubWPnFZENeVfL04rGyVHKNvzXcSHe4A=)
                          9: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (hash: 3duj5FpID2Vk2dyPdpEPnPPpgo3ld3zGzf8W1+UBM7A=)
                          10: 3130332e34322e3132302e302f32342d3234203d3e203234353334.roa (hash: XYXKo1LG7n78NlTDZbEPgOGkBBR/62cuEOVubVZgxtM=)
                          11: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (hash: Yk5CgCCvisbk0uLeUnXr6EVQjemgm+3OFkbZfT24bHA=)
                          12: 3130332e34322e3132322e302f32342d3234203d3e203234353334.roa (hash: Xll4VPxIrvgNvtBW3kK0i1yKkT0WMtlbMWEgcX8Avcw=)
                          13: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (hash: 964SsHdjlIVh/7LSyp2y0wuc4knjdZ0AWpEtptA0Cfw=)
                          14: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (hash: te5Az+576wy5jnr1x38yaS/9bfbSsmEJFfYmMW2X+pY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
                          rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 19:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:42:c1:ec:c4:6e:39:db:a9:a1:95:0a:b1:14:8a:05:e5:3b:72:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
        Validity
            Not Before: May 19 20:16:49 2024 GMT
            Not After : May 23 07:58:49 2024 GMT
        Subject: CN=85346966101AB597F81D107C88926032FDC88923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:34:cc:34:e6:b3:ec:39:31:72:96:4a:01:
                    99:51:32:b7:28:66:73:78:72:e1:07:d8:3b:8f:76:
                    1d:98:2a:d2:21:83:31:73:09:e8:ba:82:7d:09:85:
                    e2:b2:55:22:a8:dd:d1:9a:45:a5:cd:02:cb:b8:17:
                    51:63:fe:13:02:1f:15:40:73:85:66:de:c0:94:30:
                    ae:03:a7:9b:ee:30:ab:8e:6c:8c:ba:a8:c0:82:99:
                    38:9e:61:16:ac:56:4a:6e:43:0c:07:5f:d1:5d:20:
                    2f:23:8c:75:6b:f7:91:9f:c8:32:01:f4:d0:61:a1:
                    0a:27:63:02:f1:4e:65:7e:4b:9c:eb:23:bc:25:6a:
                    68:6c:8a:c7:d1:ab:33:e0:7c:f2:1e:24:47:b8:38:
                    a0:89:a2:57:af:31:e5:9a:8c:91:70:8f:25:14:16:
                    00:fa:3b:82:17:14:81:9b:30:41:e0:30:a8:34:65:
                    2f:93:0e:ed:6d:85:8a:f6:7f:ea:68:b8:33:4e:7a:
                    53:55:97:17:80:5c:5c:f9:5f:74:36:21:ea:db:9a:
                    03:f1:b1:47:f0:61:6a:2c:ca:b9:80:1f:b5:61:6f:
                    bc:d6:07:80:72:41:09:41:f1:d8:32:69:4e:42:08:
                    ce:6a:3d:b3:42:7b:5b:57:ab:49:ce:60:c8:9d:b2:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:34:69:66:10:1A:B5:97:F8:1D:10:7C:88:92:60:32:FD:C8:89:23
            X509v3 Authority Key Identifier:
                keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3d:3c:0a:eb:50:80:21:e3:04:3c:f5:5f:0a:79:34:99:89:
         ce:de:13:8a:65:66:b1:db:98:7f:b2:74:42:3a:4f:53:2b:c2:
         b4:23:f6:39:09:d6:3b:6e:60:5c:c2:03:10:54:84:46:1e:ce:
         9a:f0:95:3b:5b:d4:0f:9c:21:28:26:9d:39:36:77:e3:5e:1b:
         2a:ab:12:7d:a6:fb:1b:d3:b5:41:a1:51:1a:ab:4c:c9:8d:64:
         6b:87:3b:9e:e1:cb:57:c7:0f:bb:6d:79:d9:cb:56:d7:3c:81:
         01:09:9a:ed:8d:4b:2f:02:70:3e:56:df:b0:4d:2b:ef:77:12:
         b6:53:ee:32:5a:4f:62:25:54:cf:a2:a8:8c:c0:63:f0:24:a6:
         c1:26:7d:d2:db:c4:c7:55:76:1d:8b:cc:6b:89:93:96:a4:0b:
         d5:b2:99:dc:7d:aa:1d:ac:10:d8:3d:99:55:a0:9c:b6:86:16:
         f7:c6:31:36:00:00:82:9d:03:e1:a0:b3:bc:9d:dd:37:d7:01:
         21:4c:4b:27:af:8c:e5:40:a3:f6:94:ff:7f:3c:1f:60:2d:dd:
         74:10:0d:40:c3:c2:41:63:14:d6:a0:d0:7b:4b:d4:0d:2f:15:
         25:20:2c:ff:af:1d:ed:62:25:24:ff:5d:42:92:e4:4e:06:94:
         6c:f1:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:56:03 2024 by rpki-client on console-ams.rpki-client.org