Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
File:                     83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft (raw, json)
Hash identifier:          C4mtElL8OqEXJE+On5mjmXTfVU1l6oQgIVfARs6X7xc=
Subject key identifier:   B9:20:4F:45:DD:52:1D:21:C5:F4:BA:C0:62:AE:A4:35:17:0F:74:CE
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       49E0787C3D527BED5D9DCE0827267DEB033D794D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
Manifest number:          0451
Signing time:             Wed 29 May 2024 21:12:10 +0000
Manifest this update:     Wed 29 May 2024 21:07:10 +0000
Manifest next update:     Sat 01 Jun 2024 23:48:10 +0000
Files and hashes:         1: 3230332e3135332e3132342e302f32332d3234203d3e203338353035.roa (hash: Mpi+gOpiKUrDBtxSMf7LrOKjaA020QPEeqr2hXrvB0w=)
                          2: 323430313a316430303a3a2f34382d3438203d3e203338353035.roa (hash: eRkqfUoGL9i+Ui5BmFOd2pwiZFmA3eE945Zbvk6zcOw=)
                          3: 83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl (hash: HxbVFk/K+fw5DSRocwOPKSA0JdfAyjVlC+Pj+h39HW8=)
                          4: 3130332e3233332e3134322e302f32332d3234203d3e203338353035.roa (hash: 319xaLCsr1yheVz2kiJy6cmj8XiOjJPXujq5NfiiH1g=)
                          5: 323430313a316430303a313a3a2f34382d3438203d3e203338353035.roa (hash: tjEzuJPjZoClnzb2BmViJiauL/UTXbtOTyh+LRY+yMk=)
                          6: 3230332e3135332e3132322e302f32332d3234203d3e203338353035.roa (hash: x5FohtHwnxt7beeEV+6xOS9UzQmf2LL5r67bmmGQEOc=)
                          7: 3230332e3135332e3132302e302f32332d3234203d3e203338353035.roa (hash: /BSYhfo0Z3GNchaLBx/P41OY1rs0KgqRIMcxfqpX8dg=)
                          8: 323430313a316430303a3a2f33322d3332203d3e203338353035.roa (hash: 4koootgASGSzk6ohBjirdcqPZUKGpUXcpyKXpLo8TlI=)
                          9: 323430313a316430303a323a3a2f34382d3438203d3e203338353035.roa (hash: ba4bJYXBff1ZIW7uRMVK89B0B0NTcS6y5u8OtGS36Ks=)
                          10: 3230332e3135332e3132362e302f32332d3234203d3e203338353035.roa (hash: s1J5gM7V6uQOzDg1X6Dn7pJkFEDEp+hUeNwc5gZriIg=)
                          11: 3135302e3130372e3130342e302f32332d3234203d3e203338353035.roa (hash: a4ytfhrxBR6hjtGzSMXM1RVRSQfhM2RmhGbtPuCCF8k=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
                          rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 23:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e0:78:7c:3d:52:7b:ed:5d:9d:ce:08:27:26:7d:eb:03:3d:79:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: May 29 21:07:10 2024 GMT
            Not After : Jun  1 23:48:10 2024 GMT
        Subject: CN=B9204F45DD521D21C5F4BAC062AEA435170F74CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:27:46:81:fc:56:20:cc:c4:13:d4:50:f3:
                    43:5d:ad:97:fe:4e:8c:be:35:ea:56:4a:f4:6f:d3:
                    10:8a:51:45:88:c1:29:e9:17:d1:c0:f4:c2:f7:9d:
                    89:f2:da:60:ea:4c:31:d8:73:52:6f:a1:6d:d8:e2:
                    aa:ac:d4:66:41:b1:88:24:1e:2d:dd:e6:03:b1:f9:
                    27:38:d7:cc:1c:84:75:69:40:db:52:fd:46:1c:a6:
                    a4:a7:84:4d:c6:5b:90:d4:c7:82:bd:43:64:69:6e:
                    b3:1d:a5:cf:d9:b1:c1:7c:43:58:98:b6:36:fe:d3:
                    e7:6c:63:59:c7:ed:f9:3f:3f:a8:49:cb:86:77:cf:
                    69:98:ae:b2:b5:11:f5:0d:23:46:b1:75:e3:c6:c6:
                    cb:6a:d6:78:f9:4e:44:84:ea:2a:8c:12:8e:ba:58:
                    0f:3a:c9:bb:51:2d:17:d3:83:36:a0:e1:04:d6:3e:
                    fc:64:df:a9:63:3f:ec:8d:3d:db:8a:5d:06:ec:a2:
                    5a:ba:30:15:79:c4:8a:f9:78:00:5f:87:15:7d:e3:
                    e9:77:0c:e8:26:de:0a:1f:57:14:ba:02:08:06:41:
                    0c:b3:de:11:be:d0:62:54:b4:cc:c4:cf:8f:32:a3:
                    07:ab:7b:94:a5:f0:24:9f:4e:2b:a5:b7:4e:de:93:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:20:4F:45:DD:52:1D:21:C5:F4:BA:C0:62:AE:A4:35:17:0F:74:CE
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6f:34:38:11:f5:66:d2:9b:88:d3:a2:9a:90:22:f8:c0:9a:
         c2:35:58:62:9e:64:ea:b2:ed:5b:c5:a4:04:ed:b8:c5:3e:b5:
         14:48:45:1b:f6:44:8e:89:9e:52:29:77:40:1e:b0:84:43:bd:
         9f:0f:f7:4d:86:31:09:51:61:22:9a:b4:7f:e0:f0:ea:71:72:
         1c:52:06:63:b0:6f:82:cb:c4:50:10:c5:0b:7d:eb:81:3a:6f:
         ad:63:a3:6e:fc:7b:49:0a:e3:ac:4d:06:4e:06:cd:c7:4e:1a:
         ae:3f:4d:ef:3a:7f:6f:d4:9c:4d:f2:ed:9c:2b:dc:e8:d1:23:
         7c:9f:c2:62:cc:f2:97:11:b4:83:e0:e1:ff:66:1c:47:d0:b9:
         b0:49:ab:83:b0:5d:d7:66:26:fd:1f:c6:94:91:2e:e7:74:0d:
         68:ce:e0:aa:b5:33:12:78:f6:b9:2d:a9:76:22:ed:b5:8a:55:
         86:33:cc:ff:3f:4a:e1:12:13:b2:07:2a:c1:bd:bd:3c:8e:e3:
         fb:a3:cb:21:65:ba:8e:3e:0e:76:ac:da:50:e1:31:e7:ad:a2:
         5d:4f:b5:11:92:f2:c1:7f:8c:0b:30:d7:eb:ae:4e:d6:60:9b:
         58:2e:38:4e:1e:b1:db:2b:bb:ed:fc:4b:9d:d4:f8:7e:a6:ea:
         f1:98:cb:d6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUSeB4fD1Se+1dnc4IJyZ96wM9eU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVE
MTFEMzNBNjAeFw0yNDA1MjkyMTA3MTBaFw0yNDA2MDEyMzQ4MTBaMDMxMTAvBgNV
BAMTKEI5MjA0RjQ1REQ1MjFEMjFDNUY0QkFDMDYyQUVBNDM1MTcwRjc0Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1CdGgfxWIMzEE9RQ80NdrZf+
Toy+NepWSvRv0xCKUUWIwSnpF9HA9ML3nYny2mDqTDHYc1JvoW3Y4qqs1GZBsYgk
Hi3d5gOx+Sc418wchHVpQNtS/UYcpqSnhE3GW5DUx4K9Q2RpbrMdpc/ZscF8Q1iY
tjb+0+dsY1nH7fk/P6hJy4Z3z2mYrrK1EfUNI0axdePGxstq1nj5TkSE6iqMEo66
WA86ybtRLRfTgzag4QTWPvxk36ljP+yNPduKXQbsolq6MBV5xIr5eABfhxV94+l3
DOgm3gofVxS6AggGQQyz3hG+0GJUtMzEz48yowere5Sl8CSfTiult07ek+pvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUuSBPRd1SHSHF9LrAYq6kNRcPdM4wHwYDVR0j
BBgwFoAUg9OYbFy9Vr0M6QPRtR6tZdEdM6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
M2QwNzg2ZC0zZDNlLTQ1YjctOTY2NS04ZDQ3NGZkMTRhZWEvMC84M0QzOTg2QzVD
QkQ1NkJEMENFOTAzRDFCNTFFQUQ2NUQxMUQzM0E2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVEMTFE
MzNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNkMDc4NmQtM2QzZS00NWI3LTk2
NjUtOGQ0NzRmZDE0YWVhLzAvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFE
NjVEMTFEMzNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAtvNDgR9WbSm4jTopqQIvjAmsI1WGKeZOqy
7VvFpATtuMU+tRRIRRv2RI6JnlIpd0AesIRDvZ8P902GMQlRYSKatH/g8OpxchxS
BmOwb4LLxFAQxQt964E6b61jo278e0kK46xNBk4GzcdOGq4/Te86f2/UnE3y7Zwr
3OjRI3yfwmLM8pcRtIPg4f9mHEfQubBJq4OwXddmJv0fxpSRLud0DWjO4Kq1MxJ4
9rktqXYi7bWKVYYzzP8/SuESE7IHKsG9vTyO4/ujyyFluo4+Dnas2lDhMeetol1P
tRGS8sF/jAsw1+uuTtZgm1guOE4esdsru+38S53U+H6m6vGYy9Y=
-----END CERTIFICATE-----
Generated at Wed May 29 21:54:56 2024 by rpki-client on console-ams.rpki-client.org