Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
File:                     DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft (raw, json)
Hash identifier:          B8tYSES9PCXe5+bm5BloZlO+0R2q77kaFKigo6iOyxY=
Subject key identifier:   46:21:C2:22:8E:F1:54:89:E9:58:63:85:A4:BE:8A:DA:8C:A8:A1:96
Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B
Certificate issuer:       /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
Certificate serial:       40DAED9865CA52048327EF0E5949443F035396A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
Manifest number:          0433
Signing time:             Thu 09 May 2024 06:51:13 +0000
Manifest this update:     Thu 09 May 2024 06:46:13 +0000
Manifest next update:     Sun 12 May 2024 14:56:13 +0000
Files and hashes:         1: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: BXTLDxrw+GYZQ/FJd7HLi2uEqO0SbSnJeB5mRS0/eiA=)
                          2: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: KNm4G5GM1gZZqmxkvI+vthvENxFGkuZ2YSCF58tqv8k=)
                          3: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: FZhHtxb5rTlAf0HxaALzn7HQsyFA4CB9+F+MmOU4Ao8=)
                          4: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: bUh3XYRRCzZ7As5mm2MKQKz+3P5VPbhXCmPAGUpWsco=)
                          5: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: JDQJ5MZd7OSbQ00Yf3MtTVlKucR+SBl9C49jQFdXDBA=)
                          6: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: YsA+/j1tFCB9bsSj+JNaO34WfNn2CY7KmvnD3wujoE8=)
                          7: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: 6USpnm/t9VPis7xrY17Gn1DxTkI3bm7AR9AISm2aQkc=)
                          8: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: WBr4V54hTipP22BH3LFS608ipKiviFySmDv88qVJvoA=)
                          9: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: XBUkclmpieogKWTTtjWvNZY4iVFNat1xp1TM6np0RlY=)
                          10: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: udHMTRX+D4t15Ml1SQ4rATtWqCz/Nc1ZtyueVWz5alI=)
                          11: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: UOAh2I5/CJBR3HlDeOuYRU1R2eKZSMBlMXWOs8FFUdk=)
                          12: DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl (hash: pZmY/nZwp/EHthbMCuH4nHcuJTQXCruNsu/dV3aSGDA=)
                          13: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: g1W1fbAAntyshZjuJZfaFhGj+tUw3AHNMJ24ABWFkPI=)
                          14: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: osRmKn7FScKzb2daWT8/MvxVRyMF/MJC8QyNa3WXVZA=)
                          15: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: ER7xpU4/Ug9QdOWr3/kEAto7PyXpFcrlkgPF8gswvWA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl
                          rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 14:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:da:ed:98:65:ca:52:04:83:27:ef:0e:59:49:44:3f:03:53:96:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
        Validity
            Not Before: May  9 06:46:13 2024 GMT
            Not After : May 12 14:56:13 2024 GMT
        Subject: CN=4621C2228EF15489E9586385A4BE8ADA8CA8A196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:08:80:84:e1:4b:87:a5:88:b2:ed:b0:3d:9d:
                    83:0c:47:99:bb:77:d2:8d:42:d1:d4:8a:4c:fd:10:
                    8f:0b:d1:1e:e1:3a:c5:3e:d6:4d:00:e7:8e:69:10:
                    55:fb:28:96:ab:4e:14:72:13:48:47:a5:09:3d:fb:
                    28:f3:48:54:b6:8a:fb:9b:35:a6:d1:9e:5e:f4:80:
                    ca:b1:cc:fe:8b:4f:c1:6d:cf:66:35:8d:d2:87:3e:
                    e8:f4:e4:53:14:41:7d:ff:81:17:95:6b:d2:4b:48:
                    b0:e6:a5:8d:d0:22:c5:29:78:bf:8e:f0:e6:3c:15:
                    0f:c2:95:c1:fb:ae:da:98:42:0c:1b:78:fd:75:2b:
                    e3:f0:67:90:6d:e5:5e:68:ca:36:2e:95:cd:d7:ca:
                    0f:3b:fa:5c:65:c6:39:19:2b:ff:7b:03:c6:bc:50:
                    00:36:46:df:2b:fc:f6:87:e2:cc:dc:5d:a7:59:7d:
                    7f:12:f3:43:ec:76:e3:71:e9:bc:5e:8d:9d:94:c1:
                    23:0f:46:61:9e:be:a2:11:b5:01:52:b4:5e:3e:c5:
                    e9:7f:84:b6:9b:7e:0d:6a:21:03:4d:90:2b:09:26:
                    be:80:5e:91:4a:d6:7a:41:2c:3f:99:f5:dd:a3:00:
                    5f:6c:92:47:fb:87:3a:f3:4c:57:79:7d:3c:6e:21:
                    90:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:21:C2:22:8E:F1:54:89:E9:58:63:85:A4:BE:8A:DA:8C:A8:A1:96
            X509v3 Authority Key Identifier:
                keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2c:96:87:ab:c6:cc:51:ff:71:69:5c:a1:9e:e6:fb:bf:3f:
         84:2c:7a:dc:fb:d4:d8:b3:dc:1c:dc:8d:09:c6:b2:30:6c:50:
         3a:4a:94:08:04:58:63:d2:e6:12:a5:14:50:1e:9b:7a:68:d2:
         9e:03:6c:70:65:b5:35:b9:e5:ce:d4:cc:90:9f:bb:31:f8:6f:
         74:6d:c8:33:38:14:74:67:e5:91:53:20:19:40:64:b5:4a:49:
         7e:c2:b7:5c:bd:a1:cb:08:1e:8e:7c:d1:61:25:49:85:5f:d5:
         d5:4f:f1:7b:05:1b:d4:75:be:f9:1b:7c:29:a9:43:0d:94:75:
         88:e7:e7:c1:e4:7d:23:5d:09:46:6f:bd:88:b7:01:fa:61:f9:
         96:b4:5b:ef:c0:f0:65:3c:b4:26:7d:13:75:c9:f2:2f:1d:26:
         95:d8:77:54:71:50:4a:05:83:66:af:b1:ab:2b:a4:89:8f:4d:
         92:0a:a1:0f:2a:11:a7:01:72:96:e4:55:90:63:26:6e:92:fb:
         d3:84:28:7e:b7:32:f2:ef:53:b7:5a:a9:af:13:12:d2:9e:bf:
         6d:58:33:ce:4f:a9:1c:d2:f3:be:bc:27:b0:a1:7d:b4:6c:b9:
         68:18:70:d4:b0:aa:ed:b3:e3:c9:a8:9b:29:94:2d:18:30:32:
         78:de:d1:79
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQNrtmGXKUgSDJ+8OWUlEPwNTlqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3
MkFCNzY5QjAeFw0yNDA1MDkwNjQ2MTNaFw0yNDA1MTIxNDU2MTNaMDMxMTAvBgNV
BAMTKDQ2MjFDMjIyOEVGMTU0ODlFOTU4NjM4NUE0QkU4QURBOENBOEExOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5CICE4UuHpYiy7bA9nYMMR5m7
d9KNQtHUikz9EI8L0R7hOsU+1k0A545pEFX7KJarThRyE0hHpQk9+yjzSFS2ivub
NabRnl70gMqxzP6LT8Ftz2Y1jdKHPuj05FMUQX3/gReVa9JLSLDmpY3QIsUpeL+O
8OY8FQ/ClcH7rtqYQgwbeP11K+PwZ5Bt5V5oyjYulc3Xyg87+lxlxjkZK/97A8a8
UAA2Rt8r/PaH4szcXadZfX8S80PsduNx6bxejZ2UwSMPRmGevqIRtQFStF4+xel/
hLabfg1qIQNNkCsJJr6AXpFK1npBLD+Z9d2jAF9skkf7hzrzTFd5fTxuIZCfAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURiHCIo7xVInpWGOFpL6K2oyooZYwHwYDVR0j
BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz
MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC
NzY5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlmMDEzZjktYjRmNy00NThjLWFh
YzUtMDgwNDFiM2Y2NWU2LzAvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0Qjgx
MjU3MkFCNzY5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACwsloerxsxR/3FpXKGe5vu/P4Qsetz71Niz
3BzcjQnGsjBsUDpKlAgEWGPS5hKlFFAem3po0p4DbHBltTW55c7UzJCfuzH4b3Rt
yDM4FHRn5ZFTIBlAZLVKSX7Ct1y9ocsIHo580WElSYVf1dVP8XsFG9R1vvkbfCmp
Qw2UdYjn58HkfSNdCUZvvYi3Afph+Za0W+/A8GU8tCZ9E3XJ8i8dJpXYd1RxUEoF
g2avsasrpImPTZIKoQ8qEacBcpbkVZBjJm6S+9OEKH63MvLvU7daqa8TEtKev21Y
M85PqRzS8768J7ChfbRsuWgYcNSwqu2z48momymULRgwMnje0Xk=
-----END CERTIFICATE-----
Generated at Thu May 9 07:40:11 2024 by rpki-client on console-ams.rpki-client.org