Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
File:                     4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json)
Hash identifier:          oZIlVI4XFScE/VMh8pj5xL9i0b97Dzr0MSGSWK3QUVo=
Subject key identifier:   63:5B:CC:EB:B7:23:1B:44:DE:A1:A8:0C:95:CE:99:E1:BC:88:29:FF
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Certificate issuer:       /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial:       49A0C3C033F59B729BEFFF90637A9B2618C96B31
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
Manifest number:          043C
Signing time:             Thu 16 May 2024 17:40:50 +0000
Manifest this update:     Thu 16 May 2024 17:35:50 +0000
Manifest next update:     Mon 20 May 2024 04:06:50 +0000
Files and hashes:         1: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: VnwQNKGST3423f7ROowdWhnGGks1pox92ZjveSETg8c=)
                          2: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: EiocqLCh5acMXbZ6HiEfGJEU3SziY2qRKhtAWMOQoeA=)
                          3: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: 5TL2HsiRY0J5tCiDuwP5I5G6VKjQwHWtSJpLgBKSl9s=)
                          4: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: LswmJUjYBSTxdSF08XDdiFJuzeMGnUv66qN622jV+Tw=)
                          5: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: tTtOZwNqgtZ9fU9bfFpA02ro42TLFgc50YZABl4JRcA=)
                          6: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: KdISJidQDc4jZsrLQ64o2Ghh+PQHeauIXcY0IwAp9SE=)
                          7: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: qX8gePdtOM473piPBMTP7kWrRHBc8lexc0ZQr/Op85s=)
                          8: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: rCOH3xxAAfj1pNlzN0wjwUk5FjWuLhDJdIwrQTwN1l8=)
                          9: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: BldE+n5ZR7XiM6wKM0WepxdkcTTnAMsaALvhtQVLZgA=)
                          10: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: f4K2SZ1tBIDPBW4R2sqb/6PSvfT8KDt8uhQxMWAFF4A=)
                          11: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: cZBWmyJVcEruYTz5jZxkeBKZPSWY8Hb8VWSWCgiAjvI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
                          rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 20:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a0:c3:c0:33:f5:9b:72:9b:ef:ff:90:63:7a:9b:26:18:c9:6b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
        Validity
            Not Before: May 16 17:35:50 2024 GMT
            Not After : May 20 04:06:50 2024 GMT
        Subject: CN=635BCCEBB7231B44DEA1A80C95CE99E1BC8829FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:5b:b1:ee:c5:15:ac:3b:e8:15:0e:38:75:
                    71:d9:c7:51:e1:60:d8:4a:d3:99:fd:45:68:46:46:
                    5a:a0:e6:7a:41:dd:a9:11:55:d6:32:5f:1f:0f:9f:
                    dc:51:19:e6:06:d5:b4:b2:e7:7d:83:ed:2e:c3:65:
                    a8:92:3b:f4:67:61:fc:a9:44:5e:3a:43:cf:5c:16:
                    a5:d6:b7:03:9e:52:1b:47:2f:90:b4:ce:47:21:e2:
                    ef:fd:b9:8a:88:e1:34:84:4d:f3:fd:a1:ed:df:f1:
                    8b:c5:b9:13:f9:ad:55:a8:de:96:59:11:7b:e3:69:
                    a1:37:95:38:ee:82:dc:49:c8:7d:08:46:ce:0e:b0:
                    50:58:f4:3b:b8:c8:af:d8:ee:f2:2d:de:f6:bc:e9:
                    4e:d4:02:e6:f2:45:66:09:52:50:34:81:ef:d5:cb:
                    b1:81:1a:9d:83:67:28:4f:2a:5f:88:00:57:0e:2a:
                    59:0b:f0:61:69:e1:03:ca:58:9e:10:48:cc:09:82:
                    f5:9b:8d:4b:c6:86:8f:35:d1:78:89:9a:59:9f:8c:
                    e0:ea:18:8f:bf:28:41:06:d7:8c:4e:82:8e:4e:fd:
                    35:08:c5:fd:05:89:25:0a:25:06:72:32:c3:80:d9:
                    7b:b5:fe:63:1a:5d:87:66:04:90:bc:22:61:1c:0a:
                    95:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5B:CC:EB:B7:23:1B:44:DE:A1:A8:0C:95:CE:99:E1:BC:88:29:FF
            X509v3 Authority Key Identifier:
                keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ca:00:2d:0a:93:7b:7f:23:c6:d3:66:18:c7:98:d1:95:89:
         a5:e3:b3:bc:f8:54:9d:e4:2d:95:6b:50:39:8c:c1:ca:e4:cc:
         13:58:42:9a:c0:3d:74:c3:c1:5c:77:94:0d:33:29:bb:9a:a8:
         81:85:ee:aa:f2:9f:e1:78:a1:61:e1:d8:1c:6e:9c:b0:bf:a1:
         af:d2:53:15:f5:75:ea:01:85:a8:44:92:fa:d8:d4:92:f2:0a:
         be:9c:c8:63:93:88:46:bc:63:64:a4:98:7e:b0:59:7a:4b:16:
         3c:d9:10:71:e6:12:d8:15:23:6f:fd:e6:86:c3:f8:45:c8:bb:
         27:2c:83:3c:67:a9:af:60:a4:a6:b3:7b:34:63:8b:12:0f:99:
         79:d2:e4:ae:f6:b5:50:5a:b3:32:35:8b:8e:65:e6:72:6b:9a:
         64:b9:d2:b6:21:5a:34:0d:f0:30:e9:f5:26:20:52:cc:ba:38:
         e3:80:73:34:6c:61:b4:1c:c7:64:29:32:40:c6:6d:7a:ab:44:
         1f:65:82:e4:73:62:7b:00:9e:f4:84:fa:34:54:14:c1:4d:a8:
         7f:c0:28:e0:17:bd:33:54:83:d4:53:b3:47:7f:ce:b1:ce:e2:
         ca:fb:3b:c2:b8:4c:d4:6b:89:33:0b:59:2b:28:66:e2:be:84:
         e4:5e:4d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:25:18 2024 by rpki-client on console-fra.rpki-client.org