Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
File:                     C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft (raw, json)
Hash identifier:          FsJ3hJE6uycaEaUuI/EEOxdtob+6Ak71XcPms0VbuXU=
Subject key identifier:   17:BC:DD:70:90:F3:49:85:9B:76:2B:13:7F:70:B1:08:B4:AE:E1:06
Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
Certificate issuer:       /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Certificate serial:       5EA0555BDBA4AF2B85784F411DCCE8BB08AC49A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
Manifest number:          0127
Signing time:             Sun 19 May 2024 01:51:38 +0000
Manifest this update:     Sun 19 May 2024 01:46:38 +0000
Manifest next update:     Wed 22 May 2024 09:53:38 +0000
Files and hashes:         1: 3230332e39392e3130302e302f32342d3234203d3e203130313337.roa (hash: zZNA2q6QFjBBA7mCFPNmy0V6ZsMEkKjLcdisKxfzJI4=)
                          2: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (hash: RNWAcjukcIFzypP8HUb2HvkKk/aIiZ2O9ikVClLNb6Q=)
                          3: 3230332e39392e39362e302f32342d3234203d3e203536323431.roa (hash: Qn9apBGjQBVCcad6HISv3b7df2u+b4JoEgV/5o9l6f8=)
                          4: 3230332e39392e3130382e302f32342d3234203d3e203130313337.roa (hash: QdPpiBoS7318pqmZrIwJJzjdvs2gV+HQNn02jhmFLlk=)
                          5: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (hash: WK/9tCLcJnRcbU+50tyEFTr/nj+Dtp/5oGH7V8xp+QQ=)
                          6: 3230332e39392e3132332e302f32342d3234203d3e203130313337.roa (hash: 9BLgfcaovngukiXQieFT8SanGS9oNgT1Lcfb6zx7vUc=)
                          7: 3230332e39392e3130342e302f32342d3234203d3e203130313337.roa (hash: 41Ay+18TCg+Cn3xS1b976gUd0O2dfuMuU1cvAr823Io=)
                          8: 3230332e39392e39372e302f32342d3234203d3e203130313337.roa (hash: Hx66439BOAk+jboJFNY2ZgOjgab5OohOa2d5HcV3VgE=)
                          9: 3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (hash: 1qIL7U8EDLYYtvG3cArJt2IHEbOGanio58ilCZKhq5s=)
                          10: 3130332e33372e3232372e302f32342d3234203d3e203536323431.roa (hash: HakYGdi1IF5oYuexzQTB0ri38xcvvBqG9lnq4Vg27No=)
                          11: 3230332e39392e3131302e302f32342d3234203d3e203130313337.roa (hash: n3qlIkAj+TifAEE+GJQ3ORIzmvb8mSYOyPPYJ7KeEbE=)
                          12: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (hash: ydFWe4bSdEElox6j4RSHMk3ms/7yqzIC7Z+bBzx4fmQ=)
                          13: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (hash: 0sZs33xy3QGHSLEzyX4lOreYXsIRIgjdtI/gpDuYU4s=)
                          14: 3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (hash: D2cRBcVNTksEG2kp+RGChkVtM81DmiRMehkkJKl8MU8=)
                          15: C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl (hash: o4pZBYQtssFD87RPq13amzsOIwqUjAMdn+Fpel2Jb4Q=)
                          16: 3130332e33372e3232352e302f32342d3234203d3e203536323431.roa (hash: v7Y8qgjF1MnrUv5RkHXnRnaFsdjPMSPJuLlTrtfixTY=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl
                          rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 23:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a0:55:5b:db:a4:af:2b:85:78:4f:41:1d:cc:e8:bb:08:ac:49:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
        Validity
            Not Before: May 19 01:46:38 2024 GMT
            Not After : May 22 09:53:38 2024 GMT
        Subject: CN=17BCDD7090F349859B762B137F70B108B4AEE106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:22:bc:2e:88:6c:8e:48:6e:be:e6:32:82:91:
                    c7:5c:bc:bc:65:25:bf:84:a6:62:50:8f:db:18:e8:
                    a8:ad:7d:86:64:02:b5:25:29:30:08:d1:27:67:95:
                    14:9e:7c:02:65:25:71:02:bc:52:74:a8:e0:f2:6d:
                    2e:40:69:04:6a:6e:fe:dc:c9:01:c6:37:e3:11:53:
                    6a:c3:a8:20:24:04:14:e5:7d:26:a9:68:89:64:06:
                    53:4b:01:e4:0b:30:6e:20:bb:79:1f:1d:47:f4:4b:
                    4d:57:08:4b:41:b9:22:0b:b3:0c:d6:07:2c:b3:94:
                    84:f0:ad:ec:eb:01:d4:be:0c:cf:34:19:20:34:a6:
                    eb:aa:77:dc:b5:40:a2:e6:f0:5b:c8:ff:5e:05:42:
                    49:8d:85:b1:54:84:52:f7:4e:e6:38:9e:3c:88:93:
                    70:d2:dc:4b:97:27:48:ad:18:02:47:8d:67:57:1a:
                    de:33:15:b6:f3:de:23:6c:fc:07:b8:ac:0b:34:19:
                    32:55:2e:5b:58:07:b6:93:a5:3b:af:10:1b:bc:05:
                    0b:bc:c0:1b:50:f4:fd:71:78:2c:42:24:59:5f:79:
                    58:24:4a:ca:51:a3:7c:40:82:1f:15:2f:ae:68:5a:
                    2a:6a:4c:77:14:63:1e:ce:e2:1c:49:79:1f:0a:80:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BC:DD:70:90:F3:49:85:9B:76:2B:13:7F:70:B1:08:B4:AE:E1:06
            X509v3 Authority Key Identifier:
                keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4d:bb:dc:b4:54:9a:f4:8d:8e:64:0e:f6:2d:ae:8f:d2:e5:
         e0:5e:4b:0b:0f:1f:b0:73:27:1e:5d:b5:ec:58:8f:d0:11:b4:
         90:16:3b:50:81:35:3a:86:50:b3:6e:24:50:9c:e0:3e:5b:8b:
         56:73:79:45:63:22:bf:9b:f6:b9:e7:90:83:83:77:f1:be:f6:
         7a:41:72:be:bf:c2:97:3b:e7:1b:39:d6:00:d0:f2:e3:31:48:
         19:5f:c9:c0:ca:43:b3:3c:84:ea:8a:30:be:1b:ec:f1:5f:ce:
         d7:3d:cb:cd:5b:2e:e0:c2:b8:71:d4:97:fc:34:a4:b4:ff:94:
         57:32:f0:3d:f4:f9:83:9d:2a:9e:e3:b7:8e:31:4d:52:7a:89:
         8f:71:84:06:b5:c5:04:2e:4b:9e:95:b3:b7:ca:70:d5:00:4a:
         94:02:da:90:80:bc:53:d7:2b:d4:55:42:a5:a5:92:e5:19:93:
         68:fe:eb:2a:d5:b0:ab:c0:ea:61:94:7a:3e:12:cb:61:8c:e8:
         cb:f5:98:05:e8:b5:9c:76:4e:8e:6d:8b:c4:49:a1:22:27:0e:
         f0:e9:8a:68:fd:27:30:35:cb:98:05:7d:12:3b:d6:e5:f7:d7:
         7e:51:d7:e3:c1:58:72:e3:22:c9:73:9b:23:c9:da:71:1f:13:
         6b:b8:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:10 2024 by rpki-client on console-ams.rpki-client.org