Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
File:                     D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft (raw, json)
Hash identifier:          ulQSJQR57IU5y0IUtoyVNtzRnuLKIxp5hOlZZguBxNQ=
Subject key identifier:   4D:33:F8:65:7D:67:C6:C4:25:26:F8:58:1B:7E:74:71:7D:0C:BA:CB
Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B
Certificate issuer:       /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
Certificate serial:       22A964EF8E8E02A0FCC3594440AF5698CE94080B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
Manifest number:          C3
Signing time:             Sun 19 May 2024 16:31:35 +0000
Manifest this update:     Sun 19 May 2024 16:26:35 +0000
Manifest next update:     Thu 23 May 2024 03:16:35 +0000
Files and hashes:         1: 3230322e3137392e3138392e302f32342d3234203d3e203338373530.roa (hash: m9dbaStcfoMcnbQ2EvyGtONb2+RlTZBzSLZQCQv3Axk=)
                          2: 3230322e3137392e3138362e302f32342d3234203d3e203338373530.roa (hash: T13MJOyi+VIUd8siJFmWdLjNg7RY7YaVb/A45lEig8s=)
                          3: 3230322e3137392e3139312e302f32342d3234203d3e203338373530.roa (hash: FHDUGQTU0diOzNr5qqhiINaNgRVrTtBmD9bpslBnoeg=)
                          4: 3230322e3137392e3138372e302f32342d3234203d3e203338373530.roa (hash: DFEON+s6VXND/ADpS96jhr0/NG/0pdF2ttbqA0GmDBY=)
                          5: 3130332e3231332e3131382e302f32342d3234203d3e203338373530.roa (hash: Jv+g2+Lk/i4Knb7HbCITI1EWmDXM7E/fYUJKfCzABA4=)
                          6: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (hash: ymCXbc0WfxGA0n1cBEpe4P+JzRDakWrUWvWcqvfVqFA=)
                          7: D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl (hash: eA8Gaj2/OwdhkncaqeDPRgGjgWH0r1YPyo9sXPlkM+s=)
                          8: 3130332e3231332e3131362e302f32342d3234203d3e203338373530.roa (hash: hpSYpdOYbxvK3Mwj23VYDwcpv1csmfSqREkFZTJiMSo=)
                          9: 3130332e3231332e3131392e302f32342d3234203d3e203338373530.roa (hash: YsuzfSj4e12tPxCkaVoFtNLPTOMkUgYu8dLMvRo32WQ=)
                          10: 3230322e3137392e3138352e302f32342d3234203d3e203338373530.roa (hash: epr+giGcqXCIZBP0dXuOGyJ7ohwBdmGxfkinIAv08DE=)
                          11: 3230322e3137392e3138342e302f32342d3234203d3e203338373530.roa (hash: P2UtWlNH8oPj8gnDOaVrMd2XRw8dp5Kn7H0oA7aAoys=)
                          12: 3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (hash: LCsoLknUnU7G3Bc9jFbXSlpNBFmtmkPh2RKSBWWrYSk=)
                          13: 3130332e3231332e3131372e302f32342d3234203d3e203338373530.roa (hash: GyvGlrhnOeMWzn9GKydEhQ5nJsBQu044QjY35Z2GV3s=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl
                          rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 19:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a9:64:ef:8e:8e:02:a0:fc:c3:59:44:40:af:56:98:ce:94:08:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
        Validity
            Not Before: May 19 16:26:35 2024 GMT
            Not After : May 23 03:16:35 2024 GMT
        Subject: CN=4D33F8657D67C6C42526F8581B7E74717D0CBACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:0f:c7:d8:0a:6d:aa:65:23:ac:a9:8d:bf:
                    8a:45:5d:81:da:ab:77:a9:df:ea:ee:8e:71:60:a5:
                    dd:b2:d9:77:eb:fa:2e:a6:ff:eb:59:9c:5b:ba:14:
                    09:f4:5e:e1:fe:f7:12:57:89:a8:36:e1:ca:d4:21:
                    8e:1b:a2:62:15:2e:ae:4c:94:a8:c7:e0:ad:f6:94:
                    f9:ad:0e:3b:53:7f:da:01:46:7e:fc:43:b2:c1:64:
                    54:3c:b8:1a:81:b9:b1:3e:51:71:81:91:f7:80:66:
                    5b:6b:5c:fe:0c:25:e9:97:6b:17:1a:30:06:79:b4:
                    79:76:fd:28:76:a6:fc:35:39:60:fc:d8:47:e1:ec:
                    19:d5:de:8f:1a:22:44:f4:a6:a6:10:02:b2:92:4c:
                    93:9d:23:d2:cf:2f:db:3e:3c:dc:87:27:51:82:c5:
                    d7:ec:1b:c6:43:04:71:12:17:82:e5:d9:d8:a3:ee:
                    60:43:21:65:e9:ad:dc:ad:1a:3d:d8:6d:74:45:bb:
                    1a:6e:d2:e2:69:5c:13:c9:2d:85:b2:64:07:f0:c2:
                    75:4a:ee:97:85:86:41:aa:c7:12:f9:b6:fe:71:d4:
                    d3:1a:00:d4:c8:33:0d:27:90:cd:09:c0:21:26:e4:
                    1b:54:c0:4b:3e:67:91:f3:16:68:25:97:6f:c9:e7:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:33:F8:65:7D:67:C6:C4:25:26:F8:58:1B:7E:74:71:7D:0C:BA:CB
            X509v3 Authority Key Identifier:
                keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7c:ea:d3:8b:8f:1b:2a:d9:41:25:9d:d8:fb:79:d9:20:f4:
         d7:d1:2a:50:a4:91:cf:7a:3b:7d:5e:be:55:fa:71:54:f6:e3:
         b5:dd:1a:55:b3:18:5a:68:3e:b1:c5:57:96:35:80:70:9c:47:
         e2:7a:c2:58:3a:33:7e:eb:51:ca:c7:8e:a1:b7:c0:61:3e:75:
         55:dd:73:24:f9:94:89:e4:e4:eb:43:ad:0d:e6:32:56:81:ef:
         45:fd:b1:47:4b:07:c9:eb:48:20:b0:ed:fe:34:e3:d5:ee:ec:
         38:44:1f:b6:01:22:19:63:5b:59:09:66:77:8b:46:8e:40:df:
         3f:42:bd:0a:bf:c8:8f:ac:2c:d6:5e:fd:e3:dc:ed:e3:bc:09:
         65:13:f7:c9:ae:f2:09:c5:e6:b3:e4:d4:0e:dd:e7:e3:3a:2f:
         19:09:38:a0:03:92:7e:49:08:03:8d:e7:77:8f:9e:bd:62:89:
         83:2c:c8:cf:ea:1e:a5:ac:f1:46:c7:9e:d2:ad:c0:6f:83:44:
         8c:0b:2d:3e:d5:68:c9:a4:2a:46:36:e5:81:6a:35:d3:9d:a1:
         bc:40:86:90:d2:89:b6:8d:1d:0c:39:e7:ee:30:d5:a3:47:ab:
         af:96:36:12:e3:e0:20:da:a4:d8:3a:84:e3:8b:52:5c:99:3a:
         51:3e:d7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:20:42 2024 by rpki-client on console-fra.rpki-client.org