Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
File:                     473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft (raw, json)
Hash identifier:          tDB9wjiM/yQ8Ha+hB5b3SNyJ9A/IfQbJXwjzV16NUPk=
Subject key identifier:   8F:8C:5A:8C:35:EB:63:24:39:D1:96:FB:C8:AF:81:93:57:17:9A:7C
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Certificate issuer:       /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial:       55E52AC6F765A289522AF7BC97199D637E7C10D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
Manifest number:          01F4
Signing time:             Sat 18 May 2024 18:20:37 +0000
Manifest this update:     Sat 18 May 2024 18:15:37 +0000
Manifest next update:     Tue 21 May 2024 21:31:37 +0000
Files and hashes:         1: 323430343a393763303a373030303a3a2f33362d3336203d3e20313338383134.roa (hash: fIEgtx2a0B8Etx8pkEt+CVY8Lwual6G2lBp9xtzxvEo=)
                          2: 323430343a393763303a613030303a3a2f33362d3336203d3e20313338383134.roa (hash: VYZUZQYVdWf0mFq1ZiAr51RL01BsOx1eA5Ay4zmnZks=)
                          3: 323430343a393763303a3a2f33322d3332203d3e20313338383134.roa (hash: GbDGv5ipTv6v1m6LNO6HQGYN6bSP6+WqU5xZXzAxiQE=)
                          4: 323430343a393763303a653030303a3a2f33362d3336203d3e20313338383134.roa (hash: OWnilJIIJDR9J4a6Gzw39UPg+Z0Jf4UIprf0upaJUEk=)
                          5: 473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl (hash: cdzu15988KfK3c1HlbYnIDK7ddoRTepteb0nVhURUPQ=)
                          6: 323430343a393763303a333030303a3a2f33362d3336203d3e20313338383134.roa (hash: rD9bKJs+0PJ/AODGMcuh/nqptm7vb9pUx0YPudE76b4=)
                          7: 323430343a393763303a633030303a3a2f33362d3336203d3e20313338383134.roa (hash: qmZb47/w11roqPtxzsSEt76P0SjDXtOmpMrRrWS9a3w=)
                          8: 323430343a393763303a323030303a3a2f33362d3336203d3e20313338383134.roa (hash: ClrU+b5Oz0WpiPAisc3+HKENml5ld7hg+8sFdRGiv7E=)
                          9: 323430343a393763303a363030303a3a2f33362d3336203d3e20313338383134.roa (hash: xGwdtlKFURrQ/WJ4fNDwhFMXT4hrQ9wjzYmMAaM+cAs=)
                          10: 323430343a393763303a383030303a3a2f33362d3336203d3e20313338383134.roa (hash: CWzUZFP+/R4wuOcNSGFNIh9dN8C50mAJFTBhLlko59g=)
                          11: 323430343a393763303a663030303a3a2f33362d3336203d3e20313338383134.roa (hash: NEWHKXgNTiQf+NHx5Z3fwmHk1dk1fnVnIJiasEuxtoY=)
                          12: 3130332e3133362e3136322e302f32332d3233203d3e20313338383134.roa (hash: GWiCfKgEMyT0LKw3f1ev8mOWghI8iwbbxd5x3uvdCG4=)
                          13: 323430343a393763303a393030303a3a2f33362d3336203d3e20313338383134.roa (hash: YolzQssc1TbfP5tD/PiUjVC01n17TxxVvy6gWbDD5hU=)
                          14: 323430343a393763303a313030303a3a2f33362d3336203d3e20313338383134.roa (hash: 1GZOrXQN3z5L0qm7b+3s4slqnOrLe7UZneVIMn3meNQ=)
                          15: 3130332e3133362e3136322e302f32342d3234203d3e20313338383134.roa (hash: LPPz1Yc1QjTtH06aIhEfTKLJY8jVHC5UeJrzy927Ibw=)
                          16: 323430343a393763303a3a2f33362d3336203d3e20313338383134.roa (hash: ktQwoC6BNuFUe5VFujFFHpK/RmKkgSx1zA6w6q3I8Jg=)
                          17: 323430343a393763303a353030303a3a2f33362d3336203d3e20313338383134.roa (hash: mAS75lCTGbzHEnWR90xFkwtpmNeAjwcxkDKsBnVJR1I=)
                          18: 323430343a393763303a623030303a3a2f33362d3336203d3e20313338383134.roa (hash: 78pEJDI7Ug/03JXt9OXlE2cCLeEu/ZhxPGFNWcxnVwU=)
                          19: 323430343a393763303a643030303a3a2f33362d3336203d3e20313338383134.roa (hash: PElgzNtiW7mnVDz5XwgL93fQtVVBqZ6Kf4+ukn48T10=)
                          20: 323430343a393763303a343030303a3a2f33362d3336203d3e20313338383134.roa (hash: 6FZQ+iPyca8681+25FFkq0LKC6LDqPnTZNlpexQr8g4=)
                          21: 3130332e3133362e3136332e302f32342d3234203d3e20313338383134.roa (hash: tYR4f9wtcUq5aM/ItwcViS5PsSlhmDQgLnOHz/lTseM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
                          rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 20:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e5:2a:c6:f7:65:a2:89:52:2a:f7:bc:97:19:9d:63:7e:7c:10:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
        Validity
            Not Before: May 18 18:15:37 2024 GMT
            Not After : May 21 21:31:37 2024 GMT
        Subject: CN=8F8C5A8C35EB632439D196FBC8AF819357179A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:92:57:0c:8d:62:02:6e:d5:d8:fe:e4:2f:
                    2b:b8:d7:d8:d0:63:ae:cd:6e:37:74:ff:21:91:f3:
                    36:9f:3a:2e:0c:b4:68:d8:56:41:a2:fe:bc:27:60:
                    85:4d:4b:81:e3:86:23:e7:1e:f9:ec:76:ef:25:c1:
                    4e:af:2c:c5:a1:dc:e3:48:4d:62:9b:c9:49:da:25:
                    2d:f8:12:84:24:c2:42:56:f9:e2:a7:d8:68:ab:dd:
                    ed:b5:29:15:37:f6:d8:d7:a0:51:54:89:12:62:29:
                    28:c5:06:cf:8d:8d:41:fb:ff:bb:4d:a7:f0:48:b6:
                    e0:56:86:af:a2:17:a9:79:a5:f2:57:a7:2f:46:f6:
                    81:83:e9:3d:25:0a:ae:6a:ab:27:7e:c7:4b:0c:ad:
                    3c:00:e8:53:36:2c:e4:b1:b9:c6:fb:ab:63:a0:5c:
                    9e:6a:1c:21:52:0d:b2:ce:34:e8:ac:90:89:76:03:
                    66:0a:d5:d1:25:d2:17:80:30:3b:81:fe:e6:e3:02:
                    59:4b:fa:81:80:1d:1f:7f:37:48:8a:c7:e4:4f:40:
                    c4:fe:68:3d:9f:00:1e:91:d2:94:f3:d2:65:b2:0f:
                    fc:c0:90:fb:1b:81:0d:5b:5c:b6:f6:bc:ef:61:be:
                    78:68:68:7f:6f:95:51:d4:e6:fa:c3:76:0f:5f:06:
                    d8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8C:5A:8C:35:EB:63:24:39:D1:96:FB:C8:AF:81:93:57:17:9A:7C
            X509v3 Authority Key Identifier:
                keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:cb:06:52:bc:55:7b:7a:18:ff:a3:42:ee:e3:5b:b0:48:da:
         a6:09:c3:14:3c:54:d9:ef:f6:7d:ab:a8:3a:c0:53:5b:49:47:
         85:3d:4d:ab:c4:f8:c8:4b:d6:d7:de:53:e2:89:ce:ea:48:d2:
         83:26:a9:97:0c:3a:40:91:73:35:a4:71:91:73:62:fe:dd:37:
         9e:48:78:db:7c:18:a3:e3:06:88:4f:61:5b:b2:5d:f1:d8:cd:
         f1:cb:35:62:bc:2e:4e:bf:b1:c3:d2:e0:16:73:50:de:e4:c1:
         8e:23:8e:3b:af:ad:f3:d1:5a:27:e1:9d:15:01:76:d3:47:67:
         8e:a1:38:84:9c:ed:a1:44:3a:fb:20:b6:5d:64:d6:7c:0f:b4:
         85:cd:12:19:91:fe:63:20:96:c8:5e:63:c9:50:4c:fa:93:5a:
         57:11:e7:b1:0b:29:59:bc:60:fe:f6:20:bd:6d:17:3e:e8:8d:
         ee:d2:67:73:09:01:d2:08:fb:55:5c:a0:52:e5:d8:4b:f6:03:
         b7:0a:e8:7f:9b:34:d4:77:0b:3f:97:63:48:c1:b6:1c:70:d7:
         79:4b:8f:32:27:cc:77:21:18:fa:05:fc:7a:37:c4:11:82:4f:
         53:8a:7f:0e:4a:89:06:1e:36:24:d2:91:be:7f:07:41:1d:66:
         28:88:0e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:46:23 2024 by rpki-client on console-fra.rpki-client.org