Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
File:                     A095A9A71806956C905D5CF7CB797843D22D04B8.mft (raw, json)
Hash identifier:          78cEvwLnLa3gK0NkdjQZxXn3HrdBjkJ62J+Pkms9shU=
Subject key identifier:   3D:36:24:22:20:6C:E1:B3:BE:E4:60:3B:F6:54:0E:B8:1F:AF:95:24
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       55949B8E01370439B1599DDA5D352862E57647D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
Manifest number:          0436
Signing time:             Tue 21 May 2024 09:42:02 +0000
Manifest this update:     Tue 21 May 2024 09:37:02 +0000
Manifest next update:     Fri 24 May 2024 10:22:02 +0000
Files and hashes:         1: 323430333a666438303a653030303a3a2f33362d3336203d3e203538333639.roa (hash: n4fdExbV3/y7L+SGSyqIXP6Wu7JtmtgEfI8hFO8avAg=)
                          2: 3131362e3139372e3132382e302f32342d3234203d3e203538333639.roa (hash: Tlr0xrSq3+7h767qPy9yElWt3a6Sk3kwdnd3cM2MuT8=)
                          3: 32372e3132332e3232322e302f32332d3233203d3e203538333639.roa (hash: 8XQUfMw6GnwS2E0201RAPWtJ23dTHrioqOdXJ4tabqE=)
                          4: 323430333a666438303a3a2f33362d3336203d3e203538333639.roa (hash: 53eT4pOJGsMf72Ko9zeBz69h64D8zcRMKxfGNvsnZGg=)
                          5: 3131362e3139372e3132382e302f32332d3233203d3e203538333639.roa (hash: zgYgWIQjExvpXyjwJw9MHkHReDLPWklQNGkbk1cwzZM=)
                          6: 32372e3132332e3232322e302f32342d3234203d3e203538333639.roa (hash: wJ+ZAmnI8exWdQgd/Kqii27G6UuqBY8320ymDrLMdrk=)
                          7: 3131362e3139372e3132392e302f32342d3234203d3e203538333639.roa (hash: mdNMcJaJF3e4vSabIawm/1ZK2+cfWzrFkbacs1/nzeQ=)
                          8: 3131362e3139372e3133342e302f32342d3234203d3e203538333639.roa (hash: oVOa2tYMVZcGlxnOVgwBXrSvRrIkOa+QJ8Jb0Or06QE=)
                          9: 3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa (hash: DXrnyku39HOJd6nOXNj93SLefUxkE0MMViMtgCO5Lgc=)
                          10: 3131362e3139372e3132382e302f32322d3232203d3e203538333639.roa (hash: LF+KZKgTYLSVptoVB6K92N2yziCNiAlTEpXL+hsb2JU=)
                          11: 323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa (hash: qLB/gtjmaFkSLhzRWBLTKlAPgXVZs6N6fTBdpShmtWA=)
                          12: 3130332e342e3136362e302f32332d3233203d3e203538333639.roa (hash: qEjLQrwRxBf4RQreRFTtKOpzqW9uG7Ggg7MGOrnMFDo=)
                          13: 34352e3131322e3132362e302f32332d3233203d3e203538333639.roa (hash: jmNDrFS2IAVxFWUZy4//Nx/2KEr4OjCAFXGWWG3sftQ=)
                          14: 3131362e3139372e3133352e302f32342d3234203d3e203538333639.roa (hash: nSkI+Vpt8SEAc3teIw3kg3RTueHtruz189WhiulntlI=)
                          15: 323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa (hash: qzOKuiWgeH3gDKTvRfrA8GLFT3YB6UZucp2iMVzh+Eg=)
                          16: 3131362e3139372e3133312e302f32342d3234203d3e203538333639.roa (hash: Anecbj3kWzq+BSFSVhpgwMbKXwJAUEjS7/h7bQwFbGA=)
                          17: 34352e3131322e3132362e302f32342d3234203d3e203538333639.roa (hash: rKokMuq3icHaPMJyMqDyKQ4IhZxyFN8Cfh5wODl+yZI=)
                          18: 3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa (hash: 8jaudphFn+D9WojPzPE1IrKxk7LseaZnQYWG+vIHp6s=)
                          19: 323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa (hash: slIkEiUrfVdQTgy47FMOYVOHqTBQNDj2VJ9fRiD7UhE=)
                          20: 3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa (hash: t9iD80hybSeyE53SoNUe6im/3lUWpM/Am+waKMdjeVo=)
                          21: 32372e3132332e3232312e302f32342d3234203d3e203538333639.roa (hash: aTC8oA3eMdipvzhAqofcsVikw0/3i5nkMKAlgqcNblU=)
                          22: 3130332e342e3136342e302f32322d3232203d3e203538333639.roa (hash: OfyPo97MtFaQq0Wx90mz9nakroSG6UXx28osfGZNq5Y=)
                          23: 32372e3132332e3232302e302f32342d3234203d3e203538333639.roa (hash: vo8y4ceXpRESjeODtYTcVmUIMpau+BZrcvTyN3P26vU=)
                          24: 3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa (hash: dgcFLDFgMA3DOKxslIpZ/5AVvRRshVYwOkH4X7SCgzg=)
                          25: 3130332e342e3136342e302f32342d3234203d3e203538333639.roa (hash: WnwvBxEmNFEAIi8wpyOfTjDU/D3ImsYKCjWTyWDSyEw=)
                          26: 3130332e342e3136362e302f32342d3234203d3e203538333639.roa (hash: XhcnB2m+tMQ+zF/LI7bpXJchYGlbqcO5E3WshtU716c=)
                          27: 3130332e342e3136372e302f32342d3234203d3e203538333639.roa (hash: FAwXK9F5a5iK4/QJ/gwHDiAyq3GMyYcyyr48qizNmbw=)
                          28: 32372e3132332e3232302e302f32322d3232203d3e203538333639.roa (hash: mqd4r5Ju1qA1mvt65ALM4zIJN/DsZMek9kGZMtmPRsc=)
                          29: 3130332e342e3136342e302f32332d3233203d3e203538333639.roa (hash: sU0fxB5eLWnPHOEy7WqZXpmkNbBxE8p3Ia4EnWEYI7c=)
                          30: 3131362e3139372e3133302e302f32342d3234203d3e203538333639.roa (hash: DFjULgo1ykJn6HW2Hf1QUT+Ax2A0d6LcMBeKhKW3Zr4=)
                          31: 34352e3131322e3132342e302f32322d3232203d3e203538333639.roa (hash: dMku/N+pkvq9yanCLC2lrvX5J6a3K2HyLNILzMn3Gu0=)
                          32: 32372e3132332e3232302e302f32332d3233203d3e203538333639.roa (hash: NNdSuqw9IEZIpuMJI4Kbjd7FbcPvPCqTofcevXppCJM=)
                          33: 323430333a666438303a3a2f33322d3332203d3e203538333639.roa (hash: LO/US24/a6y2oKvrgCCuxW1LG57w5PI7mzpqlNG3SD4=)
                          34: 3131362e3139372e3133322e302f32332d3233203d3e203538333639.roa (hash: 5VRt+u4U4sIsuy9+gCt96ED+PtV82maUcABetSe9svc=)
                          35: 34352e3131322e3132372e302f32342d3234203d3e203538333639.roa (hash: gzV1scQ9NHd4rcaCjoOPs4OiG3AXnsptbTU/kdZNl54=)
                          36: 3131362e3139372e3133332e302f32342d3234203d3e203538333639.roa (hash: DU3uKJbMvRflmrtxis524YPzVhqOTtHupeexFMnGCac=)
                          37: 34352e3131322e3132342e302f32332d3233203d3e203538333639.roa (hash: b0r9VmGPkZ1znLkDJ4GVOeDed12z8ti53ulBpGHCBvQ=)
                          38: 34352e3131322e3132352e302f32342d3234203d3e203538333639.roa (hash: yiNoya6V/ZqtwKNmnX3KQv6+5d5Pkp1Esyxuha/CdNw=)
                          39: 3130332e342e3136352e302f32342d3234203d3e203538333639.roa (hash: scjE1M3Kx+kTtfdSqZXiAs+kPf2rAuMba44XyfB6UfQ=)
                          40: 3131362e3139372e3133322e302f32342d3234203d3e203538333639.roa (hash: z5hqhXTcOmDgigSIEPXgNeuL1qcYCc/aD1deLwbwmus=)
                          41: 32372e3132332e3232332e302f32342d3234203d3e203538333639.roa (hash: O018VB+Ri1Kk21oh8K5C+rJcR2x5HsTPI3cpBI7kEus=)
                          42: A095A9A71806956C905D5CF7CB797843D22D04B8.crl (hash: gmBB2XQ5VzaUnbY5C03RN5e87zi6oa08+2AYMQ0gIE4=)
                          43: 34352e3131322e3132342e302f32342d3234203d3e203538333639.roa (hash: jrqPGW8pBGZ+mUk+o31aSC8MwKfSd47N+y5qz2eAuNM=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 10:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:94:9b:8e:01:37:04:39:b1:59:9d:da:5d:35:28:62:e5:76:47:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: May 21 09:37:02 2024 GMT
            Not After : May 24 10:22:02 2024 GMT
        Subject: CN=3D362422206CE1B3BEE4603BF6540EB81FAF9524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:31:9f:57:03:65:6e:97:a7:c5:8d:43:01:
                    ab:e0:f8:7d:83:2c:87:70:47:f9:38:4c:bf:66:3a:
                    e5:03:a5:86:59:68:89:ce:33:be:4a:04:ab:71:66:
                    b9:68:94:d6:f7:ee:1d:a4:87:f7:fc:15:ad:71:5e:
                    a5:d9:2f:03:99:e1:2f:f1:35:c6:92:5d:68:c5:b5:
                    0f:f4:a1:94:1f:28:23:5d:8d:6b:2e:aa:0d:97:9d:
                    53:75:79:b3:5f:76:f1:c1:f1:89:09:67:ee:3f:49:
                    2e:ce:09:6b:6d:7a:2b:e6:5f:e7:bf:cc:2c:81:0b:
                    48:9e:17:bb:3b:6e:5f:d5:96:63:8b:93:e1:82:a0:
                    28:e0:c1:f3:04:9a:31:fa:a6:c4:c6:52:3c:e3:ce:
                    58:1a:5f:11:2d:a3:88:0c:de:45:ba:6b:3e:4b:07:
                    d9:90:f5:74:73:c1:63:e6:23:78:2f:05:a6:d9:63:
                    4c:17:f9:09:fd:4e:f0:32:2a:de:6d:28:44:d9:2d:
                    43:e7:2f:ee:6c:66:1a:4c:b6:25:17:92:34:01:28:
                    f6:2e:46:61:44:c3:a0:30:43:52:e1:ad:78:5d:e1:
                    b3:cc:58:1a:d8:f1:8c:8d:8d:91:e4:b9:12:41:65:
                    0c:8e:0c:04:ef:48:d4:87:ba:b5:af:38:92:71:ec:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:36:24:22:20:6C:E1:B3:BE:E4:60:3B:F6:54:0E:B8:1F:AF:95:24
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b9:e7:3f:3b:b2:16:d3:b6:33:74:84:50:62:b8:f9:63:9b:
         a3:ae:00:68:20:23:fb:df:35:11:6b:19:59:54:72:53:52:89:
         15:69:f9:4c:56:7e:13:fe:62:28:4b:b4:7c:b0:5f:be:c9:c6:
         f2:b9:ad:84:a1:53:5b:9f:66:c0:11:55:dc:1c:30:22:9a:2b:
         87:4f:6a:94:d4:cf:b2:86:4b:d9:65:1c:1d:63:50:1d:17:92:
         72:19:44:c4:56:16:47:e2:62:8c:fe:c7:8e:96:76:89:1b:37:
         8e:04:89:d4:b4:af:6c:24:65:07:4d:8a:79:af:d5:f1:15:b0:
         db:a5:42:08:0b:87:50:5f:a7:b2:14:7f:28:87:82:d7:18:1f:
         e0:16:b5:77:4b:9a:ea:ff:50:df:59:ce:25:9b:0d:e9:92:81:
         33:d2:e7:8b:70:f6:71:9e:fa:4e:69:d4:84:09:9e:4b:29:f5:
         fa:65:d8:7a:76:ee:7f:08:b2:4c:ff:b1:b3:17:54:6e:3f:6b:
         89:0c:37:03:ab:b7:76:ba:3a:99:00:ce:d4:57:f6:66:f3:c8:
         82:a0:90:fd:c1:25:94:da:85:c2:84:c5:ed:c3:6b:01:0e:23:
         52:3c:67:30:4c:93:f9:5c:5b:a0:16:69:28:42:6b:a8:d0:0d:
         66:c0:64:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:36:28 2024 by rpki-client on console-fra.rpki-client.org