Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
File:                     229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft (raw, json)
Hash identifier:          XmOXfzf44q8IW7R98wByeoFd/AqvTBy22zf9QEZeja4=
Subject key identifier:   C6:8D:61:82:E9:37:E6:83:2D:C2:45:CB:91:01:D7:B9:FD:3F:41:10
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Certificate issuer:       /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial:       2ABBD483F5A523D791E64EA4349DE015D49C1F2C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
Manifest number:          0437
Signing time:             Wed 15 May 2024 03:02:23 +0000
Manifest this update:     Wed 15 May 2024 02:57:23 +0000
Manifest next update:     Sat 18 May 2024 13:51:23 +0000
Files and hashes:         1: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: x6SXa3lIWsragAFnbqwGDeAH/zDcp/7F256huME32Io=)
                          2: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: IBTSZozBEHYUkeE4m+FkjoWuRsYpQAm6eHVHYg1Fz60=)
                          3: 3130332e3130342e3133322e302f32322d3234203d3e20313333383233.roa (hash: IK9YaeKUkf4FaR7zo9UaJ6sJIm986CDaegOpeUSigw8=)
                          4: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl (hash: HFXXelSVrxeVzt3NCLPqk/BoPKo8k5aOYtYEXf+otPg=)
                          5: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: fSsOBYlxuYnH0+qA0e+Tb5xwW7bUSMK9yabTrlBiDF0=)
                          6: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: rYEN0EF59yxFj2LQd1dKhBmZSoVRwch2VFKhGcb3ky0=)
                          7: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: 7xtas/zgPmaVh5WLRPDoXSbPgphLFtzPv6iApP15bYo=)
                          8: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: 4hNydA2ao+SAdzNq5mE/FcCs6i1iD/UyZOAJffeSP0U=)
                          9: 34352e3131362e3135362e302f32322d3234203d3e20313333383233.roa (hash: Yefv3jbSOsfKTvdliG7ovig+BXYricC+HrtJH4IvcWw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
                          rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 May 2024 09:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:bb:d4:83:f5:a5:23:d7:91:e6:4e:a4:34:9d:e0:15:d4:9c:1f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
        Validity
            Not Before: May 15 02:57:23 2024 GMT
            Not After : May 18 13:51:23 2024 GMT
        Subject: CN=C68D6182E937E6832DC245CB9101D7B9FD3F4110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:57:b5:fa:4d:66:56:28:6d:d8:b6:27:77:
                    9a:7b:78:07:cd:0f:3b:84:96:9b:e7:2e:f7:c4:86:
                    b9:15:f3:d0:34:52:72:53:18:31:01:29:db:c4:de:
                    e6:db:4c:53:bc:a7:50:87:1b:a2:8c:ab:32:95:41:
                    8d:96:36:4a:d0:c7:4d:61:f2:b0:77:1c:19:a1:29:
                    2b:68:0a:b3:76:00:f8:88:42:c0:65:69:a3:f6:4c:
                    3a:36:83:fc:ff:ee:87:b7:a1:78:e3:c7:f1:87:f0:
                    92:a6:53:ea:de:da:73:8b:e2:c0:aa:4f:8b:60:d9:
                    41:3f:6f:52:a2:a5:22:c4:4f:99:ab:6b:0e:e0:0e:
                    c5:6f:3e:4c:6e:d1:cf:e9:c1:cd:c5:b8:ac:1f:e5:
                    e7:38:76:93:4d:08:04:bc:de:f4:47:6b:23:7c:ad:
                    8d:93:78:0b:16:fe:b9:92:bf:a2:db:7a:18:86:89:
                    e6:03:d7:a2:64:c4:bf:c9:d7:a3:05:9e:c2:b9:30:
                    6c:55:25:79:6b:5d:be:34:b2:89:a9:10:cc:c4:6b:
                    49:8a:4b:11:f7:e1:cc:4c:bb:f7:b7:21:52:14:1f:
                    d2:b8:0b:fc:2a:1c:9e:bf:fa:71:cf:b1:78:9a:90:
                    b4:bc:f0:a7:8a:c0:d3:8c:46:58:b9:9b:80:be:36:
                    db:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8D:61:82:E9:37:E6:83:2D:C2:45:CB:91:01:D7:B9:FD:3F:41:10
            X509v3 Authority Key Identifier:
                keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:87:fe:eb:1a:81:c8:ff:b8:c6:b6:b6:ce:44:ae:d9:fd:2a:
         67:09:c4:f6:d7:39:82:15:95:b6:44:c8:2c:35:09:74:f0:bc:
         97:d6:ee:ba:1f:a4:b4:44:59:8f:43:7a:3d:4a:9a:90:3f:4c:
         a8:fa:8b:c6:e9:33:d2:61:8f:81:52:99:66:52:db:1a:2e:16:
         6b:67:21:a6:6e:7b:6c:4f:8d:c5:61:57:ce:e7:45:de:aa:43:
         a2:94:1f:b6:93:b9:f2:86:b6:53:c6:4d:4c:12:44:f1:5e:79:
         fc:be:39:af:b5:2f:c8:69:92:c9:7d:6a:d3:e7:26:28:d8:ec:
         a2:8a:6f:7f:7a:68:61:cc:b7:a2:ae:f1:aa:29:21:3d:18:80:
         4c:5d:58:a8:0c:57:08:a5:5e:fa:a3:65:18:ec:a0:ef:f4:e0:
         a8:66:4e:66:ef:e9:45:6c:e2:35:5e:63:9b:e0:12:72:47:18:
         bd:0f:a9:58:0b:3e:22:de:4c:aa:f2:ae:b0:7a:b0:35:e8:b7:
         23:52:e4:aa:54:f4:10:92:1d:74:d0:8a:cd:a3:11:31:34:a2:
         a2:ee:43:37:a5:fd:5a:2b:99:7f:ff:18:0b:86:3f:e6:ff:c2:
         8e:02:62:6d:10:57:1f:24:86:bd:c1:70:f4:6e:bf:ce:fa:45:
         61:4c:04:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:47:21 2024 by rpki-client on console-fra.rpki-client.org