Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
File:                     9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json)
Hash identifier:          PKcf6VU/f1zR5Kaez21lnliYhAv1JTnYsO1Fs6JiSRs=
Subject key identifier:   FB:DF:EE:D0:5D:A2:54:E7:65:7D:DF:B7:F7:1E:D5:AB:2D:7B:89:99
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       65EB20FC980CB183C495D962EE5AB791DAAE1A80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
Manifest number:          0431
Signing time:             Fri 17 May 2024 19:21:37 +0000
Manifest this update:     Fri 17 May 2024 19:16:37 +0000
Manifest next update:     Mon 20 May 2024 21:46:37 +0000
Files and hashes:         1: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: cIh7AeQoTmqNjdCKCQgoJST4L8Z/MHBHqxUbrV/FBVA=)
                          2: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: 6Xbsz8T36BaFpMPY7FxvqXCGDPH1cHpfbt4okPJGNb0=)
                          3: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: NmyBnETYxpAcjvVD2XcMMaR0y+Uu3jUeZgk4v2ZiU8w=)
                          4: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: 7qAjk35/TM8+/CWmfr12L1ymt0UwUcbu9TSSId73660=)
                          5: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: 6jCPD84y8MH7uTvQ3xE/CNM90suM2uvSs7LwiDSJt8o=)
                          6: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: 2xHHHzYf/At8Ok4Z385XEQl71Q9QdJynkDIBcmmxALU=)
                          7: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: ll1xVrAa6lhDcLUd8Yyr5OUC3kLSP7APj8eXxhlETQY=)
                          8: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: ZJjYeosySZMfgYwIaz+349Zsu8L81BUeesBmEwnPj6M=)
                          9: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: M3fuQHtjdLgrcRYUvZ8ftseQoV1+kdI5pfyXgu6wTEU=)
                          10: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: NFC0CMbotRdQOYDpWF7lOtBo8F6Tg/WC+ajElaCfY9w=)
                          11: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: SJh3drYM9RUic7dNUbCxLV8QM9/ZENJ9xvzsJT+Xh+k=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 21:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:eb:20:fc:98:0c:b1:83:c4:95:d9:62:ee:5a:b7:91:da:ae:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: May 17 19:16:37 2024 GMT
            Not After : May 20 21:46:37 2024 GMT
        Subject: CN=FBDFEED05DA254E7657DDFB7F71ED5AB2D7B8999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:c4:24:5b:30:c3:fd:3e:97:ed:f0:ac:5b:
                    00:41:3b:a8:60:e8:fd:0e:ec:ab:8f:06:3a:f1:85:
                    d4:bc:81:58:6d:3f:cb:96:a3:15:84:63:b4:11:29:
                    a4:11:fd:a4:fb:5a:f8:50:2f:35:a5:df:ba:96:14:
                    db:89:e7:84:a7:6f:11:9a:4c:1d:29:9d:af:85:00:
                    cf:99:67:4f:75:c4:31:a3:8d:23:fc:24:95:33:0c:
                    e8:c6:a5:42:cb:d6:6d:a5:f7:a9:d7:19:34:49:b9:
                    d7:fb:d3:d7:cc:bd:59:85:0e:bd:53:9e:df:26:2a:
                    57:a8:d3:0a:8c:5f:38:72:36:c3:b7:58:d2:1a:cd:
                    b0:ad:94:fd:c1:5e:13:a4:7a:2a:3f:1e:6d:87:00:
                    fc:08:99:43:06:ca:f7:97:37:8a:97:70:f9:00:5f:
                    d4:49:05:7c:20:e9:54:76:58:44:a0:2f:ed:89:db:
                    aa:e8:0b:e7:27:ff:4e:ef:04:28:51:95:8f:17:d7:
                    0f:c0:a8:99:ff:e0:71:97:9e:ea:2a:1b:2b:49:9e:
                    2d:93:c4:da:9a:78:24:6c:a1:c3:25:42:ee:61:23:
                    96:7f:da:fc:07:b8:d5:9d:6f:a9:d5:3a:94:be:89:
                    85:0c:1f:93:c6:f1:0f:f7:8e:1f:29:53:cc:f3:2d:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DF:EE:D0:5D:A2:54:E7:65:7D:DF:B7:F7:1E:D5:AB:2D:7B:89:99
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:30:5c:34:be:28:eb:8a:0e:f8:2a:89:79:cd:74:73:1e:b5:
         cb:4b:9e:45:86:28:75:8e:59:3e:24:5a:71:ca:55:48:76:8d:
         da:f9:86:04:4b:28:8e:c4:df:5f:af:82:bc:e0:d9:02:28:53:
         1e:6c:f2:c1:1a:6c:db:5e:0d:50:f9:11:48:68:21:b1:bd:a2:
         9f:84:48:22:ff:12:e6:47:0c:20:05:73:c3:1d:da:a1:ab:d1:
         43:02:f7:97:47:ff:f0:4c:11:a8:ef:13:d9:fc:06:59:f4:da:
         cd:49:c4:7c:ba:d2:ad:b2:40:4d:44:38:cf:0e:c4:10:55:c5:
         fb:53:3e:9c:be:e9:e9:d4:86:c5:80:ea:4a:1d:da:f6:ea:6d:
         7b:fe:e2:0a:ab:dc:b6:c0:c4:23:3e:fa:06:e5:07:72:0e:83:
         45:f0:be:c8:1d:5b:a7:ae:d4:d0:e5:6d:6c:09:4e:4c:31:3b:
         c3:54:37:ba:d3:11:c2:8e:fd:a7:70:6b:a9:28:c7:86:e1:aa:
         67:5b:dd:8e:ad:73:a3:47:e7:bf:3b:25:f5:1b:2d:b1:e2:31:
         81:55:4c:dd:ea:5c:97:9a:6d:be:4f:6e:2b:a3:5a:69:ba:f7:
         fd:ef:ce:d9:f7:3a:c0:6a:4a:d7:cc:bb:4d:82:e5:93:44:2e:
         13:cb:83:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:01:48 2024 by rpki-client on console-ams.rpki-client.org