Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
File:                     DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft (raw, json)
Hash identifier:          S9lrYFLWObpKv/uW/23WXmLH9hWFqcMb+PgkhP2UKO4=
Subject key identifier:   9A:65:F6:51:9B:4F:A9:C0:84:29:A4:E0:7D:2F:92:99:F5:16:36:B2
Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B
Certificate issuer:       /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
Certificate serial:       1198AFEB008F4B802A5DD66B6E762937D607A7D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
Manifest number:          048B
Signing time:             Fri 22 Nov 2024 10:01:07 +0000
Manifest this update:     Fri 22 Nov 2024 09:56:07 +0000
Manifest next update:     Mon 25 Nov 2024 20:39:07 +0000
Files and hashes:         1: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: XuClycGrR46sx6e0k5i1gqFyr8XtkjJjo7XVCOwHej8=)
                          2: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: D73qWtixS2k2vo+e7xc07gepRtYm2z1PcaFmujji1Q8=)
                          3: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: rnq9VA9UYxMUHx8T910m/pq5BuKXy74cv5MKvie9m3M=)
                          4: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: 2FlS11/c/x3Ynfk/ZVrKJLiDsOp9Gs66TvBDURO1NdY=)
                          5: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: KORoMdmEFellsQ4EIixNWtMn2mdrwHcMnMt2u7bRdgA=)
                          6: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: fbwTq+MNHXCM846ONnkdFzthRjFibT/sGY17CU4maLM=)
                          7: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: eEzhgEkeswxEJB6cH8f720KKqD00kZq88ScuJtLKf4Q=)
                          8: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: VU7yTZJJzE9+CKf+7CWEBUbMLNLkqTfujFALCx1f38Y=)
                          9: DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl (hash: RZsooh6bfMtzmS4jHQIQdft2LIt09XLQiDfBc9LD8xU=)
                          10: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: Px+0ZRxXqTaYuiAQpr845u2JpmHBGtqVxsdEAa7WjAw=)
                          11: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: jn5ELD9d7J3S6Is4OuoIa81jRUPNRS7VH/L2BxODy7U=)
                          12: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: einwJ3TMLG60eX8vOb8BP75bS+iG2kasu0kVBXw/aA0=)
                          13: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: tDWHyBWQyv76eGBvUmmlMgh4YlyJb04q9W1lGaYrzss=)
                          14: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: rUMnL5o4jfF8Xk23x+nY13Og9gVdfKtim/VgsCTFYWA=)
                          15: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: da6VPzKks75GP7axUBrN1Ezhq6y+B/pfersv+H6tZ8s=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl
                          rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:98:af:eb:00:8f:4b:80:2a:5d:d6:6b:6e:76:29:37:d6:07:a7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
        Validity
            Not Before: Nov 22 09:56:07 2024 GMT
            Not After : Nov 25 20:39:07 2024 GMT
        Subject: CN=9A65F6519B4FA9C08429A4E07D2F9299F51636B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:bc:cb:cf:15:d9:90:d5:0d:b1:92:9c:d0:
                    e7:04:d0:ea:b6:d5:04:b9:1a:fb:f8:65:f8:21:03:
                    db:b7:fd:0a:bb:5c:6d:bd:8b:8c:5c:ed:60:79:54:
                    a6:0e:95:a7:e0:e9:3d:23:7d:ed:96:ab:23:3e:1c:
                    2c:62:16:40:da:70:ac:35:4e:af:56:e0:f4:1e:28:
                    09:26:3d:7e:02:91:a4:55:54:d8:08:f6:62:db:3a:
                    4a:08:24:de:2f:3e:5e:72:81:ef:50:75:ed:80:59:
                    93:a9:61:eb:7c:47:33:b6:2b:5e:51:07:f8:ee:4b:
                    91:47:11:c0:12:c6:62:49:88:01:97:80:1f:25:59:
                    d7:38:05:8f:d6:90:9a:8d:74:0d:1d:62:34:be:4c:
                    f3:d5:b0:63:bf:98:39:71:8b:bb:bb:cf:8c:46:cf:
                    d6:40:e0:ca:4a:79:a5:80:6a:c9:58:0e:2f:da:ab:
                    7f:88:6a:49:8d:65:1d:af:42:f3:d9:95:06:e1:ad:
                    73:49:b1:34:fb:a6:34:a0:43:8b:b7:b2:d1:dc:1c:
                    8a:15:e1:55:39:fb:0e:69:9c:6b:67:64:3a:d2:b4:
                    8f:51:80:02:fc:f3:4d:2b:d5:07:13:32:42:ba:28:
                    6b:fc:c3:a3:04:4c:0e:6e:29:47:c1:2d:02:4f:2b:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:65:F6:51:9B:4F:A9:C0:84:29:A4:E0:7D:2F:92:99:F5:16:36:B2
            X509v3 Authority Key Identifier:
                keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f8:0f:31:6c:72:62:2d:84:7c:ee:8d:62:66:0b:dd:25:9e:
         0d:8f:ab:7c:fe:93:b1:65:c4:77:68:ea:b2:b6:a2:f1:e0:75:
         67:c2:22:57:b9:b7:32:47:78:67:28:f5:fa:76:a4:ba:86:d4:
         c6:1a:40:29:e4:32:67:d3:20:37:1e:94:bf:dd:1a:8f:6e:df:
         58:85:58:4e:db:b5:bc:f0:db:df:27:95:37:df:1b:27:69:ec:
         93:ce:d5:d1:a0:ba:53:9a:63:27:0d:95:fc:1d:87:b1:f2:6d:
         6f:36:54:68:da:b5:1e:cf:4c:54:ff:3d:d4:72:d1:3d:57:44:
         89:33:6e:bf:d5:3b:f9:e0:c8:c7:cb:78:b4:31:26:62:dd:c5:
         fd:b2:d2:f6:88:32:fe:90:f9:f0:99:7c:22:ab:43:e0:fa:71:
         fe:d0:1c:13:f4:55:f9:c8:22:d4:fa:76:a9:47:ed:b2:ba:81:
         3f:d5:b3:af:8c:0b:42:03:e7:92:a4:ce:d6:8e:cc:46:c7:34:
         c5:53:b9:df:c4:2d:40:cc:8a:ec:16:bb:80:c5:99:f2:fd:89:
         3f:dd:2c:6a:d5:bf:c8:6e:58:45:f8:e4:da:ab:80:b2:28:b2:
         d4:d5:c9:c2:13:f3:9f:cd:cd:b6:8c:7a:3d:f2:3c:6d:df:75:
         ca:e2:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org