Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
File:                     1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json)
Hash identifier:          pRE8UukKhNesin3dx4wp/TYsWM0RAOFiI1vwHuuT6Jw=
Subject key identifier:   56:27:AA:0A:5D:34:69:96:46:D0:CE:A7:BF:87:8C:82:6B:96:5A:D7
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       3BCB5B30483E0680BDB52353E80EBE3DD2EE1D79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
Manifest number:          0183
Signing time:             Thu 16 May 2024 01:51:38 +0000
Manifest this update:     Thu 16 May 2024 01:46:38 +0000
Manifest next update:     Sun 19 May 2024 08:33:38 +0000
Files and hashes:         1: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: iN9muUR+YxZ4o3/CA09QGfaZsZWDJWswkN40Rz3saoA=)
                          2: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: iy5+8ztoe5DDRKAwIhC5Zp0gFg/4wnDf1bSJMjPLq3E=)
                          3: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: toRAlVj3zEnTQOf2O3svxg5Hq84VbHHpMKPmmL9o3ss=)
                          4: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: tuC8MEUEcdj4aejYW8E3scwSN6FZSzAw4TVHzmh9NqA=)
                          5: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: Dq3ZweN4eaXldfHOXeJL7ihUBPd4FlfCuwvOxZvmYmE=)
                          6: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: TPr77EoAIVHtCQKiAjmbt5bRWqc/2aluWcJV4D10c/Y=)
                          7: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: W2CLhFrYGcyK1RWFDJHHPDpgB1KfrpTWYgmbo5Kq/a8=)
                          8: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: DBukz6S8F4E+SIpJGzmMi/09xJMB2awXahKvpu68Xfk=)
                          9: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: BzFu2n43chglMdGgc1jSFgViLyWmM8uXCxYjJL33VPs=)
                          10: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: zzH66NV40eulXXh5IAF/2gVsu4+dBTyq1EWe4ftH/hU=)
                          11: 3230322e35372e31382e302f32342d3234203d3e20313439373037.roa (hash: +T1gf2uApw76UcUj6oPqv0Lxj2A7PA+RQBx1vdM2GJ4=)
                          12: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: KNR1sf2xgaU64i1QqHXkD93qwABtoPzzciEEipK9gP4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 08:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cb:5b:30:48:3e:06:80:bd:b5:23:53:e8:0e:be:3d:d2:ee:1d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: May 16 01:46:38 2024 GMT
            Not After : May 19 08:33:38 2024 GMT
        Subject: CN=5627AA0A5D34699646D0CEA7BF878C826B965AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:ba:43:e7:4a:03:50:4a:c1:57:cb:01:8c:
                    8d:0d:38:f8:17:07:fa:0e:23:2a:c7:91:ee:db:38:
                    c3:7b:7b:d5:a0:ca:a3:ad:f1:ba:28:7a:1b:0f:bc:
                    7b:d0:6c:99:7d:fa:29:08:02:0f:52:d6:3a:3b:e9:
                    ca:de:1b:68:fc:05:04:2f:c9:c7:83:a5:07:55:41:
                    21:96:98:58:bf:64:99:b4:c4:11:3b:00:57:d1:bf:
                    fd:86:d0:f3:ff:9f:e6:d5:84:8c:60:d0:d4:ed:d3:
                    0e:29:8d:0b:44:7f:a8:dc:c6:07:3b:75:77:98:41:
                    fe:62:dc:83:38:04:2f:68:66:45:22:70:eb:d8:3d:
                    bf:86:9f:f9:98:85:da:7e:cb:92:d5:2d:90:63:66:
                    66:db:fc:77:26:9b:b5:fb:d0:c4:8e:4e:09:7d:ed:
                    52:89:0c:4a:f3:dc:c1:5a:93:46:43:76:fe:df:cd:
                    37:9b:3c:82:e0:8d:24:01:66:50:5d:34:79:a5:12:
                    39:a7:d9:e9:2a:80:b0:d1:a8:9a:ff:8c:74:61:3f:
                    e5:30:72:18:e2:07:dd:20:37:90:e7:0a:8d:30:f5:
                    d8:3e:af:82:8d:ff:82:b8:ae:98:97:8f:a8:2b:b6:
                    a8:b5:1d:74:73:77:b4:55:71:3d:a7:4c:84:9b:98:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:27:AA:0A:5D:34:69:96:46:D0:CE:A7:BF:87:8C:82:6B:96:5A:D7
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:eb:91:e6:fa:84:15:2f:6e:ef:e6:6f:9a:58:ac:97:12:49:
         6d:fe:61:a2:50:82:8a:75:65:a0:53:b8:89:d3:a1:3a:55:a8:
         7a:d6:ac:60:15:8a:ea:94:e5:44:9e:9c:2f:ea:42:8b:b0:fe:
         80:be:7a:7f:4b:a7:b9:db:31:34:63:5e:5a:7d:a4:29:2b:c9:
         3c:cd:0f:93:c9:b8:07:70:1e:48:0b:97:20:fa:bd:8a:a4:7e:
         55:d6:1d:2a:2c:f7:2c:37:a1:01:7f:93:3e:9d:9d:01:11:b1:
         e2:da:b8:b7:fa:bf:95:db:f9:97:2d:24:d6:b5:d0:05:44:10:
         e0:2e:7c:70:c6:6c:2f:db:bc:af:b3:60:14:1c:9f:37:40:2d:
         a0:f9:fd:04:e5:c8:07:d6:14:91:dc:d4:ed:c3:55:7c:4f:34:
         dc:27:a0:62:63:81:e0:0b:57:37:16:dc:d2:05:bb:44:6e:0f:
         00:08:43:1c:81:3c:e5:79:0b:37:c7:71:42:0d:b5:1c:66:a5:
         54:6f:4c:c8:0b:a7:e4:94:47:8c:45:70:21:4c:5c:51:9b:ac:
         30:d1:6b:9f:fe:62:64:7c:72:c8:19:46:98:b4:1c:31:05:5c:
         e4:21:73:56:69:6c:7f:86:1b:32:2e:db:08:cd:b0:2c:d5:5c:
         ce:9e:6f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 02:58:49 2024 by rpki-client on console-ams.rpki-client.org