Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
File:                     29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json)
Hash identifier:          BqtVsj4darmboYHTl2i0aebF70+XF5aygkMrOog96rY=
Subject key identifier:   09:FC:F7:C2:BA:D5:05:22:9D:96:CB:40:DF:FB:B1:B9:EC:29:F2:2F
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Certificate issuer:       /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial:       15AED1EDE5B378B5D8CE93A7E65AB5E9C70CF2C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
Manifest number:          F8
Signing time:             Sun 19 May 2024 17:20:47 +0000
Manifest this update:     Sun 19 May 2024 17:15:47 +0000
Manifest next update:     Wed 22 May 2024 20:47:47 +0000
Files and hashes:         1: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: 0JkcCSx1Fttj5vNpn7xKgkVCS0YlV48EvLc4hniK3xo=)
                          2: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: 9D+4myYOisFGjOQPtqfzIXvubGtnrHACZE77HsWs9N0=)
                          3: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: 7qusHinD7yGu3yRHFbfUFahecP6csfaCnVL/WleyFIk=)
                          4: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: 0YroxpjltM6+fQi0BtWpEsMMvcWbZIc2y16Ung4yo5k=)
                          5: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: cEyk3s3kcx3ZnbcrXumCh+IM0usu7E/XqUnZ2ZHdCDE=)
                          6: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: Ou61IztSzmlQHhp+lA7XYQBq1omADkYRsb8JYK8z4TI=)
                          7: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: BeGQkLCW6Ir9DJFmfLHlNCxVnjWJ0PiPU5WjwjtXnzY=)
                          8: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: FFu99HrzoQ/rjsJN+bhNYWyxbVr9Td9FmkfiKchPvN8=)
                          9: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: RmAQyMsYtVZHjgR23j1ih1itgziuQ1diytx0aUau+X4=)
                          10: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: TLaO6KI7SG1lpUCP/r6jMX+pB8+hhGtmV0X1fOQNxSI=)
                          11: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: Pu7Ft6E1QILSpX/PyDlZEhm54/v9R6OK0Jq7YTJePzU=)
                          12: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: s/euz86gX5xq5QMjacpBptIN1xZg6m7QcbGLPh/tOig=)
                          13: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: udELhfzkwj9Idh95vusLXPot/wrU/Nvq2FHBjBoZDKE=)
                          14: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: tM3VG/ts2KgjpCE9LT1+3YPXiMsYsuVTZqFv7N8Yjkw=)
                          15: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: ZdWbLgkVJGLo/kBl+Bv3IjcDL7081GhXGKzw9hOifvs=)
                          16: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: s5AF5NTF10Ao/EXJfRiI3K0h3VFHYebqrko7Nfz+Twk=)
                          17: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: oJmnsgRLq3sxIIgQ0NSv3sCf5/2+spqW9JYG49PZuoA=)
                          18: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: dGQ3SQUcm8XaTxTtFaJMgbOFiSMWRee0fuXwt3xAZJ8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
                          rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 19:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ae:d1:ed:e5:b3:78:b5:d8:ce:93:a7:e6:5a:b5:e9:c7:0c:f2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
        Validity
            Not Before: May 19 17:15:47 2024 GMT
            Not After : May 22 20:47:47 2024 GMT
        Subject: CN=09FCF7C2BAD505229D96CB40DFFBB1B9EC29F22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:15:a6:73:05:f8:82:d8:38:51:60:db:44:83:
                    72:84:4b:34:aa:4d:72:ea:df:12:1c:2f:7e:49:7a:
                    a3:7a:62:7c:12:23:54:b8:1c:65:20:74:b6:9d:e8:
                    b8:ea:ac:82:50:9d:4a:df:87:25:66:dc:6e:05:ec:
                    3c:66:3d:e3:66:11:37:fb:71:15:2b:93:a8:18:13:
                    ce:f4:09:cf:b6:c1:b6:29:52:f1:6d:fe:3e:00:e4:
                    a5:b8:a6:c7:5d:88:11:c7:bf:84:68:0e:c1:a4:77:
                    e5:9b:55:cf:20:bb:5e:44:2e:84:97:8a:ba:4c:fb:
                    5f:fc:95:b9:0d:b6:09:04:55:2e:01:ae:12:a8:d4:
                    0d:6f:eb:4f:15:c0:11:38:b5:51:e7:1f:7b:05:4c:
                    c5:80:55:c5:35:66:8f:98:e0:29:ba:e3:b6:22:83:
                    0a:19:0d:72:35:f2:1c:47:4e:ea:7a:fc:23:24:29:
                    76:fe:11:13:53:0d:b3:c6:ea:c4:65:61:45:5e:9c:
                    8d:6a:fc:e3:2e:32:74:de:12:9e:dd:2e:da:5b:32:
                    fd:48:ec:c4:e6:6b:d3:18:b4:9c:2c:c9:4f:69:05:
                    76:e5:bb:64:b3:4c:b1:70:ee:56:e3:2b:da:48:78:
                    4f:8d:b7:6c:f3:27:56:75:cc:37:e8:44:13:1a:8e:
                    21:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FC:F7:C2:BA:D5:05:22:9D:96:CB:40:DF:FB:B1:B9:EC:29:F2:2F
            X509v3 Authority Key Identifier:
                keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:6f:ef:f3:f1:c9:03:fa:d9:07:3c:3d:50:a0:4a:ca:c1:d4:
         3d:0f:88:d4:f8:0b:94:ae:c0:56:4c:8c:96:82:32:02:66:4c:
         66:44:07:79:d0:21:72:90:ed:a4:c4:33:06:1f:82:11:13:29:
         cb:27:60:60:e9:e2:d6:bc:d5:3c:85:ce:4d:27:2a:77:aa:e4:
         74:41:82:2b:f2:b6:fa:9c:67:81:1f:27:5b:88:c5:da:17:95:
         2c:65:65:18:b3:b2:4d:b1:4f:a8:b7:d9:e4:56:4d:0e:80:0c:
         33:fb:d6:50:f0:f3:83:24:3f:f8:b9:47:3a:7c:97:d4:b8:c1:
         eb:27:99:40:d9:18:fd:4b:2f:0b:4e:00:69:a5:c4:a7:0f:21:
         9e:e6:94:6c:01:9f:70:de:83:aa:38:29:59:60:06:21:02:86:
         d6:ee:99:5b:20:13:30:23:cb:bf:93:9d:f2:07:21:78:b2:39:
         b2:fd:91:cf:32:db:9c:10:75:6a:0a:c7:7a:d6:60:04:da:13:
         1b:fa:e4:a7:0c:90:72:90:98:72:39:ef:4f:f8:ba:02:e6:ea:
         96:b1:e3:3d:d8:a7:e5:02:9f:12:b9:20:6e:89:cc:0a:98:03:
         57:3b:72:be:23:1a:6a:55:a1:a3:4e:6a:ab:6c:73:e4:1b:6e:
         47:a6:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:53:54 2024 by rpki-client on console-fra.rpki-client.org