Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
File:                     9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft (raw, json)
Hash identifier:          fgrub0v6FhlfZe0YM/FxeqXye4zBJPnA7M7dfzX/Dkw=
Subject key identifier:   8C:C9:0D:0D:04:5F:89:E8:1E:21:9F:51:15:D4:41:81:2E:3E:8E:FC
Authority key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF
Certificate issuer:       /CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
Certificate serial:       2E8A44E0E71C2AE1F366AB0A7C8A97DA85FBCD1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
Manifest number:          02AA
Signing time:             Wed 29 May 2024 01:50:46 +0000
Manifest this update:     Wed 29 May 2024 01:45:46 +0000
Manifest next update:     Sat 01 Jun 2024 11:20:46 +0000
Files and hashes:         1: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl (hash: vW2XVZtQZGHbP8Y+07HieH6gSpu78IqLi/Ca2eSA6Uk=)
                          2: 3130332e3136392e3139342e302f32342d3234203d3e20313432333536.roa (hash: mdcoyjfXTj5zKlqt2+BARpB8Ne7nSF/K9FFaPhv5anY=)
                          3: 3130332e3136392e3139352e302f32342d3234203d3e20313339393637.roa (hash: 9/cl6A5sV+JF/ML+mNQ+5eQtQPiH4xG802RzlIwIQvg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl
                          rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 04:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8a:44:e0:e7:1c:2a:e1:f3:66:ab:0a:7c:8a:97:da:85:fb:cd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF
        Validity
            Not Before: May 29 01:45:46 2024 GMT
            Not After : Jun  1 11:20:46 2024 GMT
        Subject: CN=8CC90D0D045F89E81E219F5115D441812E3E8EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:c4:59:f2:82:9a:79:66:dc:d9:ba:b7:65:
                    1d:78:2c:76:53:ce:cd:cf:6c:65:a9:8f:36:63:12:
                    b9:d6:c1:a5:6e:67:ec:d4:17:5d:24:4a:86:23:cb:
                    88:0e:f6:18:4b:74:a6:53:5b:79:db:e2:e0:c2:0e:
                    1f:ea:30:89:15:df:de:40:93:50:02:0c:07:71:ef:
                    0b:c0:4d:52:72:64:a8:0e:fa:04:49:76:22:50:c5:
                    77:57:f7:33:bf:2d:af:1b:4e:1d:20:9a:9b:d5:bc:
                    a9:2c:aa:e0:92:b4:2d:63:d1:c2:9d:2a:3c:27:48:
                    48:96:19:8d:92:fd:72:8c:39:bc:f0:ba:64:2b:32:
                    8a:7f:5a:7f:01:9e:f3:dc:01:db:3b:2c:d5:0b:d9:
                    71:82:d5:c8:a0:2b:4e:20:f2:9a:4a:c6:c9:87:69:
                    65:21:33:a5:12:f8:fa:7e:18:06:dd:ee:16:7c:3b:
                    09:3f:40:ef:d2:b6:51:66:31:94:67:6f:f4:69:0c:
                    03:14:8d:8a:dc:65:a9:78:89:28:76:48:09:7a:c2:
                    bf:5b:6d:6c:f8:5b:fa:02:f4:93:e5:96:35:ff:55:
                    b7:09:09:1e:93:ba:ee:26:58:23:d2:21:80:db:6c:
                    5b:6c:8b:65:db:da:06:6b:d0:88:71:06:f3:23:40:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C9:0D:0D:04:5F:89:E8:1E:21:9F:51:15:D4:41:81:2E:3E:8E:FC
            X509v3 Authority Key Identifier:
                keyid:9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a3:fc:83:f4:ea:7e:24:6c:b9:43:f3:2e:4a:a9:a0:51:5c:
         4c:1e:b7:31:87:39:54:28:2d:59:b9:eb:f8:0d:76:91:25:ec:
         a5:0f:21:b0:86:76:90:3e:97:79:49:15:ad:3f:47:fc:99:42:
         dd:4f:71:cf:89:1c:91:83:fd:0f:90:e0:3c:a6:0f:03:c6:a8:
         0e:35:38:27:38:bb:90:d2:60:55:35:2d:15:e1:dc:11:a3:93:
         e1:18:db:a8:a2:c3:99:93:a6:34:b3:de:5a:6d:4f:44:18:75:
         0d:b3:28:86:ee:69:3e:34:77:54:58:d9:51:98:e6:ee:b5:fe:
         cf:5b:2e:3a:a3:dc:1d:d5:87:de:2c:61:3e:22:c7:5c:60:c7:
         de:7c:a3:fe:14:8b:f7:ab:68:b7:af:19:c9:4d:6a:b4:b1:b2:
         bd:83:3f:65:e6:91:69:81:e1:8a:e8:82:d1:16:65:fc:45:6f:
         31:51:4a:0a:fe:51:d9:45:8c:2a:02:e2:bc:28:3f:95:1d:c0:
         e6:8d:29:fc:ba:2a:28:9c:c1:17:cc:d0:bb:b4:20:1c:42:65:
         36:23:1c:49:a8:ee:6c:ae:0c:88:78:7a:18:1e:1a:95:bb:a8:
         42:ba:4c:c5:4a:9a:50:f5:e5:78:23:f3:35:1e:b5:c2:40:47:
         8b:56:87:3c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIULopE4OccKuHzZqsKfIqX2oX7zR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4
Mzg5RDdCRjAeFw0yNDA1MjkwMTQ1NDZaFw0yNDA2MDExMTIwNDZaMDMxMTAvBgNV
BAMTKDhDQzkwRDBEMDQ1Rjg5RTgxRTIxOUY1MTE1RDQ0MTgxMkUzRThFRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nMRZ8oKaeWbc2bq3ZR14LHZT
zs3PbGWpjzZjErnWwaVuZ+zUF10kSoYjy4gO9hhLdKZTW3nb4uDCDh/qMIkV395A
k1ACDAdx7wvATVJyZKgO+gRJdiJQxXdX9zO/La8bTh0gmpvVvKksquCStC1j0cKd
KjwnSEiWGY2S/XKMObzwumQrMop/Wn8BnvPcAds7LNUL2XGC1cigK04g8ppKxsmH
aWUhM6US+Pp+GAbd7hZ8Owk/QO/StlFmMZRnb/RpDAMUjYrcZal4iSh2SAl6wr9b
bWz4W/oC9JPlljX/VbcJCR6Tuu4mWCPSIYDbbFtsi2Xb2gZr0IhxBvMjQHuHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjMkNDQRfiegeIZ9RFdRBgS4+jvwwHwYDVR0j
BBgwFoAUm/4/L+l2d6WQrHcnjahmbIOJ178wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMC85QkZFM0YyRkU5
NzY3N0E1OTBBQzc3Mjc4REE4NjY2QzgzODlEN0JGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2NkM4Mzg5
RDdCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODMyYzgyM2QtYTRiNy00MDA1LTlh
YjgtZDNiMmM4YmJmNzYzLzAvOUJGRTNGMkZFOTc2NzdBNTkwQUM3NzI3OERBODY2
NkM4Mzg5RDdCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACij/IP06n4kbLlD8y5KqaBRXEwetzGHOVQo
LVm56/gNdpEl7KUPIbCGdpA+l3lJFa0/R/yZQt1Pcc+JHJGD/Q+Q4DymDwPGqA41
OCc4u5DSYFU1LRXh3BGjk+EY26iiw5mTpjSz3lptT0QYdQ2zKIbuaT40d1RY2VGY
5u61/s9bLjqj3B3Vh94sYT4ix1xgx958o/4Ui/eraLevGclNarSxsr2DP2XmkWmB
4YrogtEWZfxFbzFRSgr+UdlFjCoC4rwoP5UdwOaNKfy6KiicwRfM0Lu0IBxCZTYj
HEmo7myuDIh4ehgeGpW7qEK6TMVKmlD15Xgj8zUetcJAR4tWhzw=
-----END CERTIFICATE-----
Generated at Wed May 29 02:48:29 2024 by rpki-client on console-fra.rpki-client.org