Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft
File:                     AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json)
Hash identifier:          A5XOtJMZPxfLNVQcswwjv+cdNyV0TFDkJfkEh+TM05g=
Subject key identifier:   49:52:DA:AD:68:2E:70:35:7B:F8:4E:70:F7:ED:9F:88:BA:77:F6:F1
Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB
Certificate issuer:       /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB
Certificate serial:       220B6704EE0F6090C77E8B8037D08A18782A7EAC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft
Manifest number:          0434
Signing time:             Wed 29 May 2024 02:11:03 +0000
Manifest this update:     Wed 29 May 2024 02:06:03 +0000
Manifest next update:     Sat 01 Jun 2024 11:06:03 +0000
Files and hashes:         1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: LOsUtW5amJs0dwJvoMbpxMDeeHnBreRX/yVd8Cx/hIw=)
                          2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: 3nZrJy840+u/rDNTE6kHUr3pTu6sKAG+u1T0Ft6yh2s=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl
                          rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 04:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0b:67:04:ee:0f:60:90:c7:7e:8b:80:37:d0:8a:18:78:2a:7e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB
        Validity
            Not Before: May 29 02:06:03 2024 GMT
            Not After : Jun  1 11:06:03 2024 GMT
        Subject: CN=4952DAAD682E70357BF84E70F7ED9F88BA77F6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:ba:c7:c8:36:d5:00:93:7b:6e:72:f8:7f:
                    2e:0c:f4:c2:8b:c9:f5:f7:a9:81:73:52:1f:12:22:
                    2d:c4:d6:99:a7:94:8d:db:7b:1b:d5:05:cb:c7:94:
                    05:54:f6:9b:0b:b5:07:1e:87:72:e4:f3:5f:55:a1:
                    43:f5:1c:f0:bd:3e:df:8e:5f:66:e2:ca:f3:d3:86:
                    fb:a8:4d:f1:bd:fa:3a:be:17:16:2e:6a:6a:06:69:
                    3b:c4:8e:01:9c:3f:a7:f6:8e:b0:0d:0b:ea:7b:d6:
                    78:49:80:3b:31:f9:86:a2:08:96:fa:d4:64:59:e0:
                    cf:d5:45:27:6e:81:9b:d9:3c:ed:55:96:d9:57:32:
                    53:db:98:c4:2b:b8:d0:4c:2c:a3:a6:ba:57:34:e5:
                    bc:eb:d3:8e:2a:1a:c2:72:a7:34:cb:fd:d3:64:9a:
                    12:9d:2f:43:4e:6b:8e:61:e8:73:f6:bf:17:3b:53:
                    31:2a:29:ad:4f:d5:1a:b1:e3:dd:eb:11:b8:42:c6:
                    b8:fd:36:3c:56:a0:b1:34:93:29:86:a6:6d:66:64:
                    fb:5b:90:34:be:a8:72:8c:a5:32:e9:5b:4b:3c:5e:
                    d8:37:58:d4:2f:b1:cd:ed:25:be:96:d3:1d:fe:26:
                    d6:ee:93:2e:0f:bf:13:70:73:7d:0d:a8:42:ac:03:
                    99:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:52:DA:AD:68:2E:70:35:7B:F8:4E:70:F7:ED:9F:88:BA:77:F6:F1
            X509v3 Authority Key Identifier:
                keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:09:a9:d4:95:f3:96:d4:85:c0:72:81:cc:de:9d:8e:62:60:
         eb:c8:4c:f7:7f:47:c8:9c:d4:6a:74:a6:97:cb:9b:23:d0:8d:
         cd:69:8d:8a:02:14:b8:06:25:b8:4a:9d:cb:75:29:d4:05:0e:
         b7:90:eb:e0:af:de:d3:28:1b:b1:8c:96:51:00:7c:37:14:be:
         b0:62:ee:29:ea:ec:bc:0f:0b:be:d3:e7:98:e0:46:ae:d2:6e:
         cf:19:a6:d6:f7:dc:87:96:8d:b7:ca:28:d3:c0:0c:b0:2c:8f:
         11:fe:7f:70:ad:c9:34:06:b4:e5:09:38:d3:72:6f:82:74:94:
         8a:58:72:25:91:28:30:b7:d3:7e:d0:4a:3f:6e:ce:e8:09:a4:
         2d:60:09:c9:bc:42:92:f1:bb:a3:92:ec:2e:dd:31:42:8d:f5:
         e1:7e:17:ad:74:b7:8b:55:c4:1f:15:de:ae:8a:00:73:3e:03:
         e6:a5:51:87:43:db:54:c2:c1:fc:06:5c:3e:e7:62:e1:0d:0d:
         0e:e9:e2:b7:1c:f8:11:f3:4f:73:e4:a2:27:2e:f3:63:dc:b5:
         93:93:f9:46:a4:bb:15:f0:e3:27:c2:e1:6e:6b:17:25:c2:5c:
         2a:f7:cd:6b:d1:14:d0:94:10:e3:d7:79:b2:48:8e:16:d9:2d:
         99:30:ad:b9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIgtnBO4PYJDHfouAN9CKGHgqfqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1
NDQ4Q0NEQjAeFw0yNDA1MjkwMjA2MDNaFw0yNDA2MDExMTA2MDNaMDMxMTAvBgNV
BAMTKDQ5NTJEQUFENjgyRTcwMzU3QkY4NEU3MEY3RUQ5Rjg4QkE3N0Y2RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvrrHyDbVAJN7bnL4fy4M9MKL
yfX3qYFzUh8SIi3E1pmnlI3bexvVBcvHlAVU9psLtQceh3Lk819VoUP1HPC9Pt+O
X2biyvPThvuoTfG9+jq+FxYuamoGaTvEjgGcP6f2jrANC+p71nhJgDsx+YaiCJb6
1GRZ4M/VRSdugZvZPO1VltlXMlPbmMQruNBMLKOmulc05bzr044qGsJypzTL/dNk
mhKdL0NOa45h6HP2vxc7UzEqKa1P1Rqx493rEbhCxrj9NjxWoLE0kymGpm1mZPtb
kDS+qHKMpTLpW0s8Xtg3WNQvsc3tJb6W0x3+Jtbuky4PvxNwc30NqEKsA5k1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUSVLarWgucDV7+E5w9+2fiLp39vEwHwYDVR0j
BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0
RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4
Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli
NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG
OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGwJqdSV85bUhcBygczenY5iYOvITPd/R8ic
1Gp0ppfLmyPQjc1pjYoCFLgGJbhKnct1KdQFDreQ6+Cv3tMoG7GMllEAfDcUvrBi
7inq7LwPC77T55jgRq7Sbs8Zptb33IeWjbfKKNPADLAsjxH+f3CtyTQGtOUJONNy
b4J0lIpYciWRKDC3037QSj9uzugJpC1gCcm8QpLxu6OS7C7dMUKN9eF+F610t4tV
xB8V3q6KAHM+A+alUYdD21TCwfwGXD7nYuENDQ7p4rcc+BHzT3Pkoicu82PctZOT
+UakuxXw4yfC4W5rFyXCXCr3zWvRFNCUEOPXebJIjhbZLZkwrbk=
-----END CERTIFICATE-----
Generated at Wed May 29 06:10:47 2024 by rpki-client on console-ams.rpki-client.org