Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
File:                     41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft (raw, json)
Hash identifier:          mubkmus0TtsUId8R7uvUFiPTdQPJqh2UNl5/gz+17/c=
Subject key identifier:   6A:43:4B:5A:4E:FF:C9:20:A0:03:09:45:17:6E:27:16:29:FD:05:37
Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C
Certificate issuer:       /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
Certificate serial:       0C55C76D5B42A6D592B82562B4CAC00873800C1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
Manifest number:          D1
Signing time:             Sat 18 May 2024 16:11:22 +0000
Manifest this update:     Sat 18 May 2024 16:06:22 +0000
Manifest next update:     Wed 22 May 2024 00:22:22 +0000
Files and hashes:         1: 3230322e3137332e36382e302f32342d3234203d3e203233363935.roa (hash: pM4KoVee+o5dteKGKycDf6CyDdLLV2OhlUAjtGPpp+E=)
                          2: 3230322e3137332e39302e302f32342d3234203d3e203233363935.roa (hash: ogRPERA6BgRl+u76w6ColchBlmQ6FGlbW3wjh9ouE/k=)
                          3: 3230322e3137332e36372e302f32342d3234203d3e203233363935.roa (hash: uZ2pZj71vQlWvPB9G58laO8JKdoEDrJVIaVmYS8hnF8=)
                          4: 3230322e3137332e37362e302f32342d3234203d3e203233363935.roa (hash: jEdGmerc/5/wIue+9oAo2nzB+q/0vVn073G0+4VbF7Y=)
                          5: 3230322e3137332e36342e302f32342d3234203d3e203233363935.roa (hash: 3aiTSOniJhEY8Mr0OLyeGh0zfiOrPNMWuSKQRs6Yp84=)
                          6: 3230322e3137332e38362e302f32342d3234203d3e203233363935.roa (hash: /Lh2+UAfj3Gr5fx4WFcJ+bMjKkyh14NWjaIn6EGnoIo=)
                          7: 3230322e3137332e38372e302f32342d3234203d3e203233363935.roa (hash: pyq2xC8r3WDJM5WFw+/PnXJemmDlFWbbhpBwBiup4js=)
                          8: 3230322e3137332e37382e302f32342d3234203d3e203233363935.roa (hash: T/nGsYRb+Qw8pn4F+ZA0kNzD5B68fcApwnxai9ahmmY=)
                          9: 3230322e3137332e37332e302f32342d3234203d3e203233363935.roa (hash: yN4ujxRz14Yqvaz6gP6fqrC0vw6JETf+XITbL4rSPWQ=)
                          10: 3230322e3137332e36392e302f32342d3234203d3e203233363935.roa (hash: UcgvCu3KBo75ufDRI+ZCJ7z6mVUEzZSA9uZglGV/MQI=)
                          11: 3230322e3137332e37302e302f32342d3234203d3e203233363935.roa (hash: 3fD+msLGh/qLzWJmXDmW1GQ/7utXrl6N37iK0C3ms7o=)
                          12: 3230322e3137332e39312e302f32342d3234203d3e203233363935.roa (hash: c69GWOTzcTWKYVWYETcY3n1GQl1wIXV6fUk/exD+8eQ=)
                          13: 3230322e3137332e36342e302f31392d3139203d3e203233363935.roa (hash: /yZCz3cQD5H0U6JsLwmGkChPr0s5oThoWu3evHym3Mg=)
                          14: 3230322e3137332e36362e302f32342d3234203d3e203233363935.roa (hash: PNORB43elcSW80Yl6RL38nzYWWkI6wYy4p+h39kzB+E=)
                          15: 3230322e3137332e39332e302f32342d3234203d3e203233363935.roa (hash: RtPUfUG0E/2HeRvPJg2j8eLFVegGTp9mFDbAuuWi4ZY=)
                          16: 3230322e3137332e38352e302f32342d3234203d3e203233363935.roa (hash: Vf3u3LMpamrl7PJUsY+tHsL1Tf2nM8QDDQU1Mr/xFOs=)
                          17: 3230322e3137332e37312e302f32342d3234203d3e203233363935.roa (hash: /0fOIpdxqUPIyT6ny1zcq8+9fXvPs5GY3dI9MpfuND0=)
                          18: 3230322e3137332e38332e302f32342d3234203d3e203233363935.roa (hash: ut8uqWiuRI1fZodHrqsGXBW1LRWEYIqfNpaTV204WBk=)
                          19: 41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl (hash: DBZPgejJcB8VO4EH79oNydOkbB58XTlMfpY++WplEkg=)
                          20: 3230322e3137332e37342e302f32342d3234203d3e203233363935.roa (hash: k1WzNJfqVu50cDIqA1064SRwAcoOV/sKzbNS9+Ys41Q=)
                          21: 3230322e3137332e38392e302f32342d3234203d3e203233363935.roa (hash: fzFoYz4MCUZvBCL8xU5S3wD9jD7Y2JSg8zwEG+4f8bY=)
                          22: 3230322e3137332e39322e302f32342d3234203d3e203233363935.roa (hash: HPuWjGMqeK87nHueIXvS34jqP4ozXIug1nv9+ptYCf8=)
                          23: 3230322e3137332e38322e302f32342d3234203d3e203233363935.roa (hash: nBbE5pKEYz80UufZgNHJp0YXSQ3j+zkwnbag9BfW2Y4=)
                          24: 3230322e3137332e37392e302f32342d3234203d3e203233363935.roa (hash: I2QyzW0zJljs0UIr+pqHFgee9bzIUFYiwS3Egq9LyGQ=)
                          25: 3230322e3137332e38302e302f32342d3234203d3e203233363935.roa (hash: Of+uC6Rn7FlecrNuXzonBx8A2eH9cSewEV+JQtDDBy0=)
                          26: 3230322e3137332e39352e302f32342d3234203d3e203233363935.roa (hash: jxEMMYGBNdII16zwCA0sBOmnDBQ7QD1OmhBp1hVoydk=)
                          27: 3230322e3137332e38382e302f32342d3234203d3e203233363935.roa (hash: XVSUsA83Iu2vs5LGy1FnKzdM8JCczZZ0NS9rsFpBVDw=)
                          28: 3230322e3137332e38312e302f32342d3234203d3e203233363935.roa (hash: t67ncvlMVFp9QWI6GBEMyGKwW2xJuF10OMLHeQ3BHSM=)
                          29: 3230322e3137332e36352e302f32342d3234203d3e203233363935.roa (hash: B8z0jkkemFfPnoL5QQRUJXA706dn7mJbJMSKyCA4ySc=)
                          30: 3230322e3137332e39342e302f32342d3234203d3e203233363935.roa (hash: gyElvqgBqd08Kb3ve7C8oO4yOKEqoUoQ5bYu32G8VtA=)
                          31: 3230322e3137332e37322e302f32342d3234203d3e203233363935.roa (hash: E7HX0tiOX9E+QGKdVh59rTneR22iAYAMEnIqoaBrLPw=)
                          32: 3230322e3137332e37352e302f32342d3234203d3e203233363935.roa (hash: T54B7k7LWZJrJiEsF0J85BqNWYUVr2e/fAl2Lxl2xJQ=)
                          33: 3230322e3137332e37372e302f32342d3234203d3e203233363935.roa (hash: 3Ne496vjbfG9KlK/LqKPIj6I7cF9lmQT0A8f4SKPiXE=)
                          34: 3230322e3137332e38342e302f32342d3234203d3e203233363935.roa (hash: /M96/pws9kivlRYa0+i4BYNvDz/p2rZ90Io4VVOKQlY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl
                          rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 20:59:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:55:c7:6d:5b:42:a6:d5:92:b8:25:62:b4:ca:c0:08:73:80:0c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
        Validity
            Not Before: May 18 16:06:22 2024 GMT
            Not After : May 22 00:22:22 2024 GMT
        Subject: CN=6A434B5A4EFFC920A0030945176E271629FD0537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:34:bc:4e:c1:e7:db:15:a7:87:ce:c2:5b:
                    b1:1b:60:d0:05:ad:d2:b7:36:99:af:86:77:d8:08:
                    ae:1f:d2:c5:c3:ed:e7:7a:a1:7e:fc:40:4e:27:1a:
                    12:08:b6:16:67:20:cb:9a:ae:cb:c3:bc:4f:dc:5f:
                    7b:c2:04:f9:5a:4e:02:03:fb:42:f5:77:56:c8:54:
                    49:88:51:07:e9:16:78:94:04:e4:af:18:b9:42:ab:
                    02:6b:f5:01:69:a1:16:3a:fb:36:94:c6:10:ee:1a:
                    11:47:3a:76:e8:91:6b:4e:e1:1b:de:3c:9c:18:04:
                    13:db:7e:f3:ad:df:93:43:b4:01:fa:fb:d4:70:7c:
                    29:80:a4:fc:8a:13:63:dd:a7:82:9f:bd:24:54:6e:
                    72:2f:70:31:87:53:7c:22:ac:6b:af:fc:1e:7a:ec:
                    19:2e:23:3b:74:5d:60:2e:40:be:b1:25:5d:43:1d:
                    d1:6c:e8:10:a5:83:21:f7:51:e3:2f:1d:3f:46:a6:
                    98:f6:cf:2d:4e:2d:03:27:a4:df:c8:37:cd:5c:36:
                    24:41:1a:e1:3e:1e:2e:ac:d7:c2:99:ff:0f:06:17:
                    46:df:32:72:e6:28:3d:20:5f:c5:22:30:9d:e1:62:
                    02:6a:3a:ea:60:ac:db:a7:30:3c:8d:63:c8:c2:c1:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:43:4B:5A:4E:FF:C9:20:A0:03:09:45:17:6E:27:16:29:FD:05:37
            X509v3 Authority Key Identifier:
                keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:09:cb:1e:a1:2b:e9:6a:58:43:14:47:84:b1:11:a3:31:19:
         41:b8:5e:19:4b:82:3b:f1:b4:f1:07:cf:c0:ed:f8:da:b2:fb:
         e3:0a:4a:c7:b7:08:76:c9:b1:b0:d4:84:ad:2f:d9:af:09:08:
         13:37:8e:8e:c4:62:f1:e4:2a:ff:df:1d:2a:ba:b0:f9:a9:c8:
         b3:b9:05:ab:75:fa:41:72:13:bb:c3:9e:b6:93:6e:17:bf:26:
         de:5c:d0:fb:03:12:fb:50:99:f2:10:06:7e:6b:3b:0b:dd:4a:
         5a:0b:3d:eb:a9:22:78:5b:dc:2a:7d:05:1c:63:62:b4:2f:31:
         18:72:82:e0:3b:cb:76:a6:b6:a1:32:e0:37:47:c4:e5:d8:57:
         b4:57:d6:3f:ae:bc:24:94:f5:84:d6:8a:f2:c3:10:62:84:b9:
         eb:6f:e7:e0:33:c7:76:b6:e7:1d:5d:99:ee:d5:a6:c9:bb:34:
         cb:6f:d9:e4:19:7f:5c:83:5c:30:6a:96:1a:c9:81:de:81:58:
         29:8e:f9:1d:49:fa:43:f1:f0:eb:0c:07:cc:6d:28:62:87:07:
         5e:d3:f8:8f:ca:c3:ff:5b:df:6e:2e:aa:32:dd:2f:ed:95:97:
         63:b3:dc:ad:b3:0d:96:7f:14:f6:17:bb:91:4c:c5:16:c1:d3:
         6f:2a:16:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:57:11 2024 by rpki-client on console-fra.rpki-client.org