Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft
File:                     A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json)
Hash identifier:          GEmto/1F10C4B6iEX8gUkshbXSuCHwIpQrkL9r3FZ2A=
Subject key identifier:   75:6A:16:62:F5:FB:4C:F8:65:72:5E:E2:F3:BF:24:2B:DB:F5:4F:1D
Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14
Certificate issuer:       /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14
Certificate serial:       7FE9BBCC9E4F11E2FBA388A0A7D231AC6F842961
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft
Manifest number:          56
Signing time:             Tue 28 May 2024 21:01:54 +0000
Manifest this update:     Tue 28 May 2024 20:56:54 +0000
Manifest next update:     Sat 01 Jun 2024 00:40:54 +0000
Files and hashes:         1: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: 687sgQIt5wbREjUl5KOr7/QfreRcp4XTwy66Spd3QHs=)
                          2: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: ElHgAe2FpYPjsbXysq7/2rbiO3kcnBHgZaA5m6Bs0mI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl
                          rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 00:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e9:bb:cc:9e:4f:11:e2:fb:a3:88:a0:a7:d2:31:ac:6f:84:29:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14
        Validity
            Not Before: May 28 20:56:54 2024 GMT
            Not After : Jun  1 00:40:54 2024 GMT
        Subject: CN=756A1662F5FB4CF865725EE2F3BF242BDBF54F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:4e:b3:63:16:ee:b7:74:b9:78:3a:eb:f3:
                    bb:e6:26:0c:20:c5:a7:c9:94:5f:3b:9f:b7:5c:58:
                    5c:c0:7c:96:ed:9c:d7:d4:fc:1d:ea:45:d2:fd:22:
                    32:f4:65:2e:8e:28:f6:2d:4e:34:ac:71:50:1e:0b:
                    2e:7e:6c:c8:3e:7a:bf:33:28:99:73:f3:42:f3:e5:
                    35:d4:27:6a:7a:bc:8d:1b:43:7e:b0:3c:87:05:1a:
                    54:27:e2:af:e6:d4:e8:53:68:e4:08:32:93:36:c9:
                    27:57:11:78:eb:72:13:64:34:10:06:91:d4:4e:ca:
                    78:6a:83:b7:70:08:4a:6d:24:9f:0c:e4:35:eb:24:
                    28:82:c6:20:13:65:8b:9d:ee:e0:f3:a4:f7:b8:d3:
                    8e:37:9a:7e:35:2f:75:35:9f:6b:80:43:dc:3c:45:
                    ca:5a:e0:60:ed:f0:fa:c4:4b:4d:1e:57:b1:60:9b:
                    21:3e:4c:df:4d:d0:34:0b:0a:f8:23:77:aa:00:59:
                    9e:d0:27:e9:52:12:49:4c:c9:e8:e8:b9:65:b5:13:
                    c3:b5:10:c7:a8:ae:46:49:0d:40:00:bc:6c:5e:55:
                    03:e3:04:9c:7e:3b:fb:aa:1e:16:74:c9:b4:c0:4e:
                    92:15:0d:5e:99:ad:b4:b5:ed:72:15:59:28:e7:d7:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6A:16:62:F5:FB:4C:F8:65:72:5E:E2:F3:BF:24:2B:DB:F5:4F:1D
            X509v3 Authority Key Identifier:
                keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:93:41:10:9b:bc:d8:e9:33:7f:2a:2e:30:40:99:fd:11:4d:
         b0:17:c2:c9:31:e3:07:29:43:47:7f:90:65:ba:f6:b6:a7:64:
         5d:76:fd:12:38:e1:df:1b:6a:15:c1:d5:62:4c:00:4b:13:14:
         42:d0:f5:98:56:7d:0a:93:ca:54:e6:1f:bd:d1:11:7f:27:86:
         d8:27:77:8c:2e:44:3f:6b:96:81:9c:fb:ee:43:72:95:55:d5:
         c1:5d:74:29:05:16:c7:09:ea:87:60:d6:88:32:9f:b8:7c:10:
         bf:46:40:00:5f:d7:c8:c6:46:06:12:62:c9:2d:e4:08:79:a0:
         90:45:6c:33:86:e9:94:b7:df:65:17:e0:20:58:b3:1c:26:1e:
         f2:62:0e:cc:96:c5:3c:c4:ec:6e:a5:b4:57:00:94:23:c0:40:
         6f:43:c9:d2:a6:d2:f8:91:7d:e0:e7:57:26:3c:4a:db:a8:94:
         68:cc:b7:fc:a6:3f:7c:4e:1f:20:c8:26:4a:2c:13:29:89:a2:
         f1:d8:a6:0c:79:7e:8e:91:61:03:c5:fa:b6:86:62:e8:6c:e0:
         78:8e:7a:7c:f1:91:22:53:17:06:98:15:0c:29:11:9c:fa:9b:
         5f:0d:bf:c6:74:ec:67:63:5a:aa:2b:c7:af:26:27:68:c7:b9:
         94:e9:20:16
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUf+m7zJ5PEeL7o4igp9IxrG+EKWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVD
QjRBNUYxNDAeFw0yNDA1MjgyMDU2NTRaFw0yNDA2MDEwMDQwNTRaMDMxMTAvBgNV
BAMTKDc1NkExNjYyRjVGQjRDRjg2NTcyNUVFMkYzQkYyNDJCREJGNTRGMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8s06zYxbut3S5eDrr87vmJgwg
xafJlF87n7dcWFzAfJbtnNfU/B3qRdL9IjL0ZS6OKPYtTjSscVAeCy5+bMg+er8z
KJlz80Lz5TXUJ2p6vI0bQ36wPIcFGlQn4q/m1OhTaOQIMpM2ySdXEXjrchNkNBAG
kdROynhqg7dwCEptJJ8M5DXrJCiCxiATZYud7uDzpPe40443mn41L3U1n2uAQ9w8
Rcpa4GDt8PrES00eV7FgmyE+TN9N0DQLCvgjd6oAWZ7QJ+lSEklMyejouWW1E8O1
EMeorkZJDUAAvGxeVQPjBJx+O/uqHhZ0ybTATpIVDV6ZrbS17XIVWSjn14pBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUdWoWYvX7TPhlcl7i878kK9v1Tx0wHwYDVR0j
BBgwFoAUo10NCWcn/b4qTu1FGZRwjstKXxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZGVlZjIxOC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC9BMzVEMEQwOTY3
MjdGREJFMkE0RUVENDUxOTk0NzA4RUNCNEE1RjE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVDQjRB
NUYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRlZWYyMTgtMGQ5Yi00ZDBkLWE1
YzUtZjgzMmI4ZWI1YWJhLzAvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcw
OEVDQjRBNUYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKKTQRCbvNjpM38qLjBAmf0RTbAXwskx4wcp
Q0d/kGW69ranZF12/RI44d8bahXB1WJMAEsTFELQ9ZhWfQqTylTmH73REX8nhtgn
d4wuRD9rloGc++5DcpVV1cFddCkFFscJ6odg1ogyn7h8EL9GQABf18jGRgYSYskt
5Ah5oJBFbDOG6ZS332UX4CBYsxwmHvJiDsyWxTzE7G6ltFcAlCPAQG9DydKm0viR
feDnVyY8StuolGjMt/ymP3xOHyDIJkosEymJovHYpgx5fo6RYQPF+raGYuhs4HiO
enzxkSJTFwaYFQwpEZz6m18Nv8Z07GdjWqorx68mJ2jHuZTpIBY=
-----END CERTIFICATE-----
Generated at Tue May 28 21:48:38 2024 by rpki-client on console-fra.rpki-client.org