Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
File:                     10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft (raw, json)
Hash identifier:          IOuayjRNg/XvVnU4BxKjnf3+vfpJSLSkMAPS88MWLS8=
Subject key identifier:   BC:D5:2D:B6:10:60:4A:F6:7E:AF:85:94:9F:E0:84:BF:E3:03:4F:FF
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       6D203B87901F511152DC91B0D94F75F3BC783592
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
Manifest number:          0436
Signing time:             Thu 09 May 2024 20:41:46 +0000
Manifest this update:     Thu 09 May 2024 20:36:46 +0000
Manifest next update:     Sun 12 May 2024 20:48:46 +0000
Files and hashes:         1: 323430323a626538303a323030303a3a2f33352d3335203d3e20313331373439.roa (hash: DXHHrR56q/VFhnEdLVNUD8gSSDdXE61ooWF2sxdNIBM=)
                          2: 323430323a626538303a363030303a3a2f33352d3335203d3e20313331373439.roa (hash: Khe2nDYLkpwBHCG0WqukUTDY42ecqXWqwYq9Z8AO0ts=)
                          3: 3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (hash: TK2zQ1lMAsO0e9vDJ9BmIb7hc/0xRtkEeDiCzeOXuRk=)
                          4: 3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (hash: recVvKDf/IQz7LjQvEukzcw15BxDZFe45XowFDusAg4=)
                          5: 323430323a626538303a343030303a3a2f33352d3335203d3e20313331373439.roa (hash: 9SWryQUd+CXURlcPfpJgiq1udHQeR6SjabwY5Ouon5s=)
                          6: 3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (hash: cbCMWmDy/SyxvggIQ8wPiksgaOatihhf6GyE/ZjF+qU=)
                          7: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (hash: eF3Q+UFp3ge/0bEgWaXKoWsbcdlGxAcxDG/grOV2AMY=)
                          8: 3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (hash: on6NmTLt0hyb59bhLv5loqW3SFDFGns5PC0v82xOVaw=)
                          9: 3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (hash: txV2TBpIrI4EhuMk5WEiKWOIUR7Gs9/rwkL2lA0I5tk=)
                          10: 323430323a626538303a633030303a3a2f33352d3335203d3e20313331373439.roa (hash: 4G3iqfCqEN+4SWMXOfThJ+Sel9W06PCHaPEEYt0CBWc=)
                          11: 323430323a626538303a613030303a3a2f33352d3335203d3e20313331373439.roa (hash: 968CzWonQYTJ7GgMUaFiS/1txipa9pjXVnTjFz8AMFo=)
                          12: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (hash: +TSMRwKz+lRFAMLOklh3r7iuDySdx2+lKRRr89+Jt0s=)
                          13: 323430323a626538303a3a2f33352d3335203d3e20313331373439.roa (hash: DYz+geixCut+kNzFdGgSPbbTBVse4eFHBKCC1KcuMMU=)
                          14: 3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (hash: mXhe1SOPGOjEujpFn4WYPdptH8833mG6Jmm9Pncq37c=)
                          15: 323430323a626538303a383030303a3a2f33352d3335203d3e20313331373439.roa (hash: YP8qWCqgtKA6QmR4HsPMzdaYHYhbODNmdZRF+A4g1XI=)
                          16: 10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl (hash: 1OE/Ps0B782kbCUUpDKaeRuVJAR9CAfqQREJlDdyJgg=)
                          17: 323430323a626538303a383030303a3a2f33342d3334203d3e20313331373439.roa (hash: 2uWWgMBXaetm1C12aXnRO25Ah7wdcRWFqlAFeewighE=)
                          18: 323430323a626538303a383030303a3a2f33332d3333203d3e20313331373439.roa (hash: L+qhwffYUDMH6t6zWolx2uE/H3qryW6jnClse7bWuyw=)
                          19: 323430323a626538303a633030303a3a2f33342d3334203d3e20313331373439.roa (hash: INl0dPkq2WNEj5GwIO9Nw1TcOhRUAY2qdisGM0J2eYk=)
                          20: 323430323a626538303a343030303a3a2f33342d3334203d3e20313331373439.roa (hash: lga8YFz2K/INsnjeCpjIZbIJnrlqp0ZoeupwLrLPcs4=)
                          21: 323430323a626538303a3a2f33322d3332203d3e20313331373439.roa (hash: VuL8cLrZYA0A9GNXpYn6Cm8VpbMI7seT98EDaKhTy9A=)
                          22: 323430323a626538303a3a2f33332d3333203d3e20313331373439.roa (hash: 3BKkXgibhm8pWULoTZTy+SiAuO79roWhNVrClZPOyjM=)
                          23: 323430323a626538303a3a2f33342d3334203d3e20313331373439.roa (hash: vIkS+hIX4IxNmvOgKkkj3qx5Ih09iglE6aze9cxFQcQ=)
                          24: 3130332e33312e3133342e302f32342d3234203d3e20313331373439.roa (hash: 6TGsDadESPodekLj1OLVMuSwv6x+RznDB8miBbDpr5E=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 20:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:20:3b:87:90:1f:51:11:52:dc:91:b0:d9:4f:75:f3:bc:78:35:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: May  9 20:36:46 2024 GMT
            Not After : May 12 20:48:46 2024 GMT
        Subject: CN=BCD52DB610604AF67EAF85949FE084BFE3034FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:31:c3:32:50:61:9c:d3:8f:c1:91:43:ad:c2:
                    b6:35:f2:8e:e8:3b:97:1a:3e:1f:91:4c:15:be:ed:
                    0c:03:2c:6d:a4:07:80:6b:7a:a1:bb:fc:e8:70:df:
                    26:db:1b:f6:60:aa:89:ad:16:bd:b4:c9:b4:27:e3:
                    d3:b9:cf:f7:35:01:a4:37:4c:f7:24:91:64:fa:d8:
                    4b:35:bd:7d:4b:a1:3a:be:14:95:6c:fb:65:2d:27:
                    70:8f:75:03:cd:8e:8a:d2:c7:f2:32:ca:d4:15:28:
                    39:bd:76:34:63:d4:a5:be:90:f2:48:63:fb:6f:1f:
                    c4:03:3c:ff:64:3c:50:e4:a8:ee:63:4f:ae:33:45:
                    af:0f:3c:3b:a3:01:ff:3d:52:7a:53:f9:f6:65:86:
                    46:52:fe:aa:bd:04:0d:3c:67:e9:dc:3c:83:7f:a1:
                    aa:ee:9e:f9:f4:4b:b0:47:18:80:14:17:0b:bd:4a:
                    99:ec:4d:0a:8a:12:d5:e0:9a:c2:a5:cd:9a:cc:b5:
                    67:ff:16:e1:0e:82:09:36:bb:ef:86:55:40:73:fd:
                    bc:1f:38:4f:fd:88:3a:5a:d6:c5:32:ff:a5:d9:44:
                    16:a6:d1:23:10:05:13:90:e9:30:9f:dc:90:73:ab:
                    e1:57:a2:4a:86:09:f0:7e:b2:5d:c7:fe:28:70:0b:
                    7e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D5:2D:B6:10:60:4A:F6:7E:AF:85:94:9F:E0:84:BF:E3:03:4F:FF
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:64:be:cb:7e:54:61:d3:ad:eb:86:a5:85:3c:57:cc:c8:31:
         af:95:f0:81:be:99:2e:0a:d6:4c:82:a2:16:d4:1b:a0:f1:93:
         f7:f4:1f:17:ff:5b:d3:88:cf:dc:c2:06:6e:af:6c:03:16:8c:
         0f:75:e4:60:70:f0:be:e6:b8:d7:c7:cb:4c:50:c4:16:69:2e:
         cb:c9:b7:0e:d7:8a:f3:02:a9:5e:42:5f:30:58:79:a7:5e:12:
         25:08:6a:82:0a:c8:4e:e9:2d:f8:08:03:62:b5:e7:5c:28:5c:
         b3:b7:29:5d:34:9a:ff:75:7f:8a:57:8a:25:d8:e1:2a:23:d0:
         23:4a:cf:f4:bf:08:a8:a0:46:2e:bf:a8:c2:6c:e4:b6:cd:58:
         42:5c:52:0a:15:a7:2b:3f:a1:64:87:b1:6f:b3:6f:10:d1:94:
         21:30:69:43:29:3f:88:7e:fa:ad:50:99:ae:65:05:7e:a9:76:
         48:92:09:f5:f5:92:84:59:b0:d8:a3:8c:2e:c1:b6:9e:3e:c8:
         3d:a2:6b:04:a8:bf:c3:22:e8:77:5f:dd:bd:d8:56:34:15:21:
         b5:42:73:a2:72:1f:45:44:82:d4:e4:44:18:b4:f0:6d:2f:22:
         58:4e:92:a2:4f:41:0f:e5:c4:d8:5a:34:79:cb:79:d7:70:ef:
         29:18:26:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 21:52:00 2024 by rpki-client on console-ams.rpki-client.org