Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
File:                     2042008AEC80152F373D2A04DFD3893EE2F92166.mft (raw, json)
Hash identifier:          z/nXZ+Hbyy+sT6ikZCKdKZGqqhFlj8t/OLZU7ZQAPM0=
Subject key identifier:   9B:7C:02:A1:29:96:B7:F5:8F:6B:AF:1F:AB:24:C1:FD:1D:B6:B4:0D
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       2D8731BEE88AAAD8931254DAC68A40452B003132
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
Manifest number:          D5
Signing time:             Sun 19 May 2024 16:01:17 +0000
Manifest this update:     Sun 19 May 2024 15:56:17 +0000
Manifest next update:     Wed 22 May 2024 20:35:17 +0000
Files and hashes:         1: 3230322e37332e31362e302f32322d3232203d3e203538383136.roa (hash: 2DnArTQ2x8AYPb+2dxd7oZRXJsX8oW64vEwQxp0G9Bk=)
                          2: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (hash: 7NLroYSD9v06Wgghu4TFlZ55IAZFVZ/FFfvnOPBLAUQ=)
                          3: 3130332e3234382e35372e302f32342d3234203d3e203538383136.roa (hash: ytbHPwQVwaPWZsqSPKSdX/DSMM0ekCiRrpXkBTQ/3+M=)
                          4: 3130332e3234382e35382e302f32332d3233203d3e203538383136.roa (hash: Q3sAB6lEFo6eJ+ZtUed3/26pHP+mf0hItiSeLsLoC5Y=)
                          5: 34332e3235322e3138352e302f32342d3234203d3e203538383136.roa (hash: bb5PvZ2xlUonKi/nGyemRopzCcxXWTug8aqDrAW+3yI=)
                          6: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (hash: cm73JAuUCZkKzXUWJboWhK5REq3NH6mjebxXmqE6/8o=)
                          7: 3230322e37332e31382e302f32342d3234203d3e203538383136.roa (hash: Fas3+WUDV1JekXFnK+JFMPTcVQYtvX89MBNaToE37Vg=)
                          8: 34332e3235322e3138362e302f32342d3234203d3e203538383136.roa (hash: /5/ESbT7O37ryfK/p8c9OXJC0THippl1a3sqbO+lcZ4=)
                          9: 3230322e37332e31362e302f32312d3231203d3e203538383136.roa (hash: wSfAp/MILQ8qsjgcoSobVSjQ+LgmtNfIU9pJCyfkOHY=)
                          10: 3230322e37332e32312e302f32342d3234203d3e203538383136.roa (hash: fwQEmzhM5wMLnYCsUPy7ZPMzzhFXgCU2kKCFqQ3/1ZY=)
                          11: 3230322e37332e32322e302f32342d3234203d3e203538383136.roa (hash: +YnTzdf6PTUOd5tzHuJNC3yk4qsRuVyyhryi9WsX0zg=)
                          12: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (hash: R+WCPqZnVyvuE/WlmuoQdgrrmFi79PJTAJGHStmWWN8=)
                          13: 3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (hash: Ed2Sv/dYuW9ofsPZWsop6QIvsVjruGEIOHOEm+g8zvM=)
                          14: 3230322e37332e31392e302f32342d3234203d3e203538383136.roa (hash: ZHPkKuDh7o+co+zyt5xKxAjUhiv1G6ko9mERbbbnw3s=)
                          15: 34332e3235322e3138372e302f32342d3234203d3e203538383136.roa (hash: XZxE7qCxMNUmrqxCgDOpR0SWDCzykGde0dsCzEm8ITY=)
                          16: 3130332e3234382e35362e302f32342d3234203d3e203538383136.roa (hash: yd5bM+nDFdZT+isPJ92nf64V55PeWs3g95FHkArb2jk=)
                          17: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (hash: kMxC7iGTQs+V+PO1o0OJ15xAywnZ+OPHezlrbRDuMFA=)
                          18: 2042008AEC80152F373D2A04DFD3893EE2F92166.crl (hash: 8uvflqAPv3RMHIcI5gOJ9pPZxJu2V7oENxFShKnOMxs=)
                          19: 3130332e3234382e35392e302f32342d3234203d3e203538383136.roa (hash: 7IRJH+X6Ms0H+gKS1MmdGccwpKSQ+tYAG6bxWKASzZM=)
                          20: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (hash: T/Ka7j7C4WWsDUo9fgu90cr6T8G54gDMAo0lcHcbAb8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 19:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:87:31:be:e8:8a:aa:d8:93:12:54:da:c6:8a:40:45:2b:00:31:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: May 19 15:56:17 2024 GMT
            Not After : May 22 20:35:17 2024 GMT
        Subject: CN=9B7C02A12996B7F58F6BAF1FAB24C1FD1DB6B40D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d9:73:39:93:bf:f2:55:f1:3a:a3:83:a2:8d:
                    3c:7a:41:c0:c7:da:29:5c:54:9f:90:66:ec:43:3b:
                    0d:ab:10:cd:bd:28:03:74:03:db:55:8a:a4:3e:e9:
                    c3:2a:41:43:ae:fc:35:bf:d6:cf:27:51:08:45:ff:
                    84:94:08:7f:82:69:b4:20:39:b3:dc:ec:be:3b:a3:
                    60:8b:55:29:b0:f5:7d:64:bd:ae:b6:9d:ff:dd:eb:
                    63:de:d4:4e:cb:b6:83:24:1d:3e:69:4f:a4:8d:58:
                    2b:62:e1:85:78:f8:cc:00:57:df:73:34:be:ca:43:
                    6a:f4:cd:4e:09:f4:58:44:b1:26:75:b7:13:ba:2c:
                    7b:72:a1:3c:fc:67:90:da:ee:52:61:f8:a5:5d:63:
                    22:6e:ed:4a:9a:7b:a7:a6:f5:c3:9b:a7:4e:48:53:
                    a3:1e:83:d9:c0:2f:c6:36:38:96:a4:a2:26:6c:ad:
                    af:97:87:e5:dc:fd:bf:8f:27:26:13:1f:cc:65:f5:
                    d1:d7:35:b3:11:ad:44:be:cf:98:15:d9:ac:a8:63:
                    ee:af:cc:40:d0:b1:fb:78:45:58:5e:44:84:0a:9e:
                    3f:52:85:d8:34:b7:0b:69:ac:b0:6f:ef:d7:79:da:
                    b6:fa:be:65:0d:4c:71:43:45:41:1b:f3:2f:af:39:
                    a1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7C:02:A1:29:96:B7:F5:8F:6B:AF:1F:AB:24:C1:FD:1D:B6:B4:0D
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:fd:83:03:7d:26:76:a1:7d:c2:33:85:5a:a8:e9:c7:ef:cd:
         1d:56:8b:9c:36:23:be:3e:1b:6d:b7:e5:8a:56:68:11:4c:4e:
         c0:50:97:33:6f:93:bd:e7:9c:be:85:5c:f6:e5:0c:74:2d:8d:
         97:4e:03:be:85:bf:91:6b:83:1d:6c:0b:e5:5c:3f:32:60:06:
         29:41:5a:13:97:8d:79:6e:74:79:80:4d:95:b6:0c:44:38:b8:
         0b:51:2d:01:d6:01:78:52:ad:26:66:a4:a9:54:91:c5:96:35:
         79:53:62:64:0a:8e:cb:e9:66:87:ae:21:45:7a:50:63:ba:08:
         f8:17:74:79:8f:28:9c:76:b6:2e:6a:ce:2d:13:2c:6d:9d:e6:
         c9:67:48:fb:58:4d:b8:90:66:29:e2:f2:f2:18:0e:e1:8c:c9:
         c9:07:ba:6d:80:cb:4a:e4:45:ac:8f:bc:dd:d9:c9:a9:c3:e2:
         10:e1:e5:ef:9b:2d:39:c3:19:87:19:b8:ef:7f:31:37:a3:54:
         7e:e5:ac:42:a7:1e:84:3e:58:ca:ae:5b:4a:86:51:23:20:85:
         b9:9a:aa:0e:d9:17:69:ed:8e:e6:41:6d:22:4b:f6:62:49:0b:
         b5:3d:63:97:c8:68:e6:05:9a:b0:fe:98:43:4f:39:ce:f6:5b:
         23:0e:c0:37
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULYcxvuiKqtiTElTaxopARSsAMTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VF
MkY5MjE2NjAeFw0yNDA1MTkxNTU2MTdaFw0yNDA1MjIyMDM1MTdaMDMxMTAvBgNV
BAMTKDlCN0MwMkExMjk5NkI3RjU4RjZCQUYxRkFCMjRDMUZEMURCNkI0MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY2XM5k7/yVfE6o4OijTx6QcDH
2ilcVJ+QZuxDOw2rEM29KAN0A9tViqQ+6cMqQUOu/DW/1s8nUQhF/4SUCH+CabQg
ObPc7L47o2CLVSmw9X1kva62nf/d62Pe1E7LtoMkHT5pT6SNWCti4YV4+MwAV99z
NL7KQ2r0zU4J9FhEsSZ1txO6LHtyoTz8Z5Da7lJh+KVdYyJu7Uqae6em9cObp05I
U6Meg9nAL8Y2OJakoiZsra+Xh+Xc/b+PJyYTH8xl9dHXNbMRrUS+z5gV2ayoY+6v
zEDQsft4RVheRIQKnj9Shdg0twtprLBv79d52rb6vmUNTHFDRUEb8y+vOaHzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUm3wCoSmWt/WPa68fqyTB/R22tA0wHwYDVR0j
BBgwFoAUIEIAiuyAFS83PSoE39OJPuL5IWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZmMzY2JjNC04ODgzLTQxMWMtODc2ZS1lOWUyM2E4ZDhhZDkvMC8yMDQyMDA4QUVD
ODAxNTJGMzczRDJBMDRERkQzODkzRUUyRjkyMTY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VFMkY5
MjE2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjM2NiYzQtODg4My00MTFjLTg3
NmUtZTllMjNhOGQ4YWQ5LzAvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5
M0VFMkY5MjE2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEj9gwN9JnahfcIzhVqo6cfvzR1Wi5w2I74+
G2235YpWaBFMTsBQlzNvk73nnL6FXPblDHQtjZdOA76Fv5Frgx1sC+VcPzJgBilB
WhOXjXludHmATZW2DEQ4uAtRLQHWAXhSrSZmpKlUkcWWNXlTYmQKjsvpZoeuIUV6
UGO6CPgXdHmPKJx2ti5qzi0TLG2d5slnSPtYTbiQZini8vIYDuGMyckHum2Ay0rk
RayPvN3ZyanD4hDh5e+bLTnDGYcZuO9/MTejVH7lrEKnHoQ+WMquW0qGUSMghbma
qg7ZF2ntjuZBbSJL9mJJC7U9Y5fIaOYFmrD+mENPOc72WyMOwDc=
-----END CERTIFICATE-----
Generated at Sun May 19 16:36:51 2024 by rpki-client on console-fra.rpki-client.org