Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
File:                     7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json)
Hash identifier:          IG0ix5zVdjmssV7wTCOG7V3OIPMGk3rBfg4t17uSJLA=
Subject key identifier:   72:94:3E:1D:1E:36:60:35:C3:75:71:BD:C6:A0:B9:D0:BC:FE:E8:26
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       0636A6D77AFCEE264C6C0A105A81D2B05722B54B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
Manifest number:          0445
Signing time:             Thu 23 May 2024 06:31:51 +0000
Manifest this update:     Thu 23 May 2024 06:26:51 +0000
Manifest next update:     Sun 26 May 2024 07:31:51 +0000
Files and hashes:         1: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: yP1TAkw2TW6/+pnSePAUIDHCW6FKsnRjCPjPYzv7kq8=)
                          2: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: fCLtH63XHef23XJpqpHfRy4HZxlv7dPLgS80XrkYx0k=)
                          3: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: sY9vGlyucSxgaOLfCvOLUedhXuURH56B3R5je15TfYY=)
                          4: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: TweHsnwYTZJNRDapWYbX3bkK7Ez5NmNqQmfOElapmkc=)
                          5: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: gmvaIJPpCzVhgz7cFO42u4hoxoXz/uk2JEoHGVjST1k=)
                          6: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: 4Hm4WnusfCBYxfpxzUJUTi2ngcR2xlQx9uMM6h03e6c=)
                          7: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: n0m6aJwhpZilRfjYTr+NRhS1afS/t8GPaSVPZGuVgCo=)
                          8: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: Gi8pXuaHvIjRFGEOcjqpkp/ITy5FzjLcXXMmxYMHE20=)
                          9: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: /6sZbeOVx/pIR9agGUBF8/TlZPjh4yvQlHKjKVwAvvY=)
                          10: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: HsMo3Fxk5F8yDEpO8mvjVwYtEfstOJXy+ScS8/+6hFE=)
                          11: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: JeTZeiHc0ObZ6NTa9su8J3fL4BDL7P59zUbcfeYDg+8=)
                          12: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: QlkHB1Jq6OrecBFUY1B7JhWI4H6A8g4E+BWeduGpGog=)
                          13: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: 5leq3WQ1j3uC/yh6caiPHP4oda691+YpS+PNWtHfmA8=)
                          14: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: 3toGe5r9jiLqlMM+4jFtzSD90kCRcftf6RpXKtiFoZI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
                          rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 07:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:36:a6:d7:7a:fc:ee:26:4c:6c:0a:10:5a:81:d2:b0:57:22:b5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: May 23 06:26:51 2024 GMT
            Not After : May 26 07:31:51 2024 GMT
        Subject: CN=72943E1D1E366035C37571BDC6A0B9D0BCFEE826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9e:79:a5:77:d8:6a:42:e0:91:db:45:b2:94:
                    77:c9:de:aa:42:a0:d9:30:c6:c4:e3:1b:33:e3:f1:
                    cf:c4:67:aa:4e:66:0f:75:86:82:d6:bc:9e:4e:2a:
                    d4:b9:d1:04:a6:ba:de:af:da:8d:56:ee:fc:81:58:
                    e3:af:d5:39:cd:45:a6:38:9a:7c:2d:78:f1:cd:b7:
                    58:22:09:02:df:c4:15:9c:54:41:c8:ac:83:5c:0b:
                    2e:01:e8:85:c2:86:a5:5f:52:fe:c2:7c:19:fa:21:
                    a5:b4:d3:f3:60:be:19:dc:40:49:18:98:f4:0a:a2:
                    95:23:0c:b2:aa:c2:d7:97:9a:fa:13:6c:3a:4e:02:
                    6d:a2:cf:03:9a:ad:64:60:66:59:f2:5a:87:7e:4d:
                    a7:2a:24:7e:81:5a:8b:c6:a1:89:2f:2d:73:b3:6a:
                    05:1f:fc:87:4b:fe:b8:3c:b3:39:7f:f3:46:a2:38:
                    99:f2:ce:7a:45:bf:c0:92:bc:03:ee:45:21:97:45:
                    36:61:bd:4d:25:5a:63:8b:01:10:46:d8:24:8c:c9:
                    da:54:17:d5:15:0c:f5:89:e4:5f:e7:1a:52:e9:72:
                    d6:d7:3d:d7:25:e8:61:76:71:25:7d:4e:d4:f9:3e:
                    db:96:30:2b:f6:86:c1:f4:86:ee:7a:a9:34:84:e2:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:94:3E:1D:1E:36:60:35:C3:75:71:BD:C6:A0:B9:D0:BC:FE:E8:26
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:76:99:96:ce:72:af:3d:97:ac:49:49:11:df:77:b7:e4:3f:
         93:f4:d9:4e:08:ef:75:1d:93:e1:b0:f4:e4:23:62:e1:77:ee:
         f8:5f:37:64:bb:28:dd:8c:ec:88:8a:fc:8c:76:4f:db:f9:51:
         56:43:a7:71:71:f7:cb:1d:7f:fe:2e:20:37:c2:7a:9b:29:29:
         a0:b5:4f:43:03:09:b8:62:19:e2:0e:f1:66:3d:cd:b5:43:14:
         6a:d2:1e:60:4f:87:0e:01:dc:23:41:22:99:38:7c:64:05:b1:
         3e:0c:63:97:79:ce:25:54:b8:ab:f3:65:e9:6f:19:1b:bc:92:
         42:8a:ac:0a:05:58:d6:36:b8:38:63:6b:13:a5:94:ae:75:e5:
         b3:6c:34:a1:53:e6:7e:21:8a:cd:ba:91:0b:ec:4d:b2:5a:7f:
         be:ff:f8:ef:42:72:55:54:91:ad:90:a8:fa:4a:5d:21:12:88:
         55:0d:b7:6b:15:d1:27:df:85:65:71:51:7c:7f:28:f9:c5:24:
         b4:0f:a5:83:e5:dc:2e:1a:f6:58:9a:3e:09:20:d5:a6:75:f8:
         ee:4e:3a:f1:a9:db:76:93:f7:1b:b2:da:86:55:0f:7a:cd:6f:
         26:b3:11:37:0c:2d:cf:2f:58:0f:c5:66:34:6f:ec:ce:2a:bf:
         86:7c:76:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 06:53:54 2024 by rpki-client on console-fra.rpki-client.org