Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
File:                     38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json)
Hash identifier:          g739vo092FS/gCXwdZu/PIWUJuVURhmJ7lfWnWgGIzQ=
Subject key identifier:   43:2E:EB:42:DA:31:3A:F0:B1:18:AD:98:B7:08:1E:50:16:50:AD:02
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       3788486FECA717FE608D24C15ADFBE8FB57B1C07
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
Manifest number:          AE
Signing time:             Tue 28 May 2024 13:30:48 +0000
Manifest this update:     Tue 28 May 2024 13:25:48 +0000
Manifest next update:     Fri 31 May 2024 18:48:48 +0000
Files and hashes:         1: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: GkqP1tBJ/9agxHYe5ncZgwuG8VITyEYL/kjDUwj5Bhk=)
                          2: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: q1fdKnTRqStAT3YE15vq79E+QpTxFHgvWmiz6yZ6fcY=)
                          3: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: 8F7fiU7vGe9Vc51zIc4bJZmRh9Cp4cIynPTyrqXxjiA=)
                          4: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: rMCEoNf1wNtL9Xq0GiwFXvxNeoAWHkOBKr6mSPuhUTo=)
                          5: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: PNswnDB59dy0WIKijBxTcNq2tOLHRD7Xyj3sC7yk3sw=)
                          6: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: roos5ENsoEbj1dO7wreaWwNNwIzXMbzwL27Q2YUM0+k=)
                          7: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: y4CphY2Eja4IBmaWSAMBzGabm9Rl4RkxNrghgS2laKY=)
                          8: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: iTOGXrpbMeNc55/3DoD+VDgZo5uJSgIixPQ4Fa5DV8c=)
                          9: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: mY9nGHKi7YFpk7+fwd7/qH+h6ARI4z2zuLTwZFPNXjI=)
                          10: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: StKm/EBjyCtOBBqyOJASJhUXfaj5Ik+i6XQwhkj3F9Y=)
                          11: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: Aee1Gbvr0vnI5GFSyf+LnZ8/t7rv6DOLKw6Sm7B4cvg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
                          rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 17:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:88:48:6f:ec:a7:17:fe:60:8d:24:c1:5a:df:be:8f:b5:7b:1c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: May 28 13:25:48 2024 GMT
            Not After : May 31 18:48:48 2024 GMT
        Subject: CN=432EEB42DA313AF0B118AD98B7081E501650AD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:79:c7:b4:32:39:01:20:76:ba:51:bc:c5:7a:
                    57:8a:89:3d:b8:ec:f0:a7:b8:7b:e5:9d:33:19:80:
                    7c:20:58:2c:03:e9:b1:03:a1:08:63:4f:1f:90:3b:
                    77:6f:bb:45:a1:36:ed:c4:5f:2d:6c:1d:f1:bd:40:
                    a6:d6:0e:fe:11:3f:03:38:75:0f:50:c2:03:28:88:
                    69:c8:85:26:aa:c9:fa:4a:36:aa:87:88:ea:fc:56:
                    3b:09:77:a8:64:29:f4:80:d9:91:49:5e:eb:78:cb:
                    d2:da:c0:94:55:71:52:c3:c5:aa:66:2f:85:fa:93:
                    2e:91:8f:48:e7:26:ce:c6:cf:cc:44:ab:d9:70:b9:
                    70:09:b5:9a:1b:d6:13:6a:6c:66:36:f3:60:d2:3a:
                    2c:49:6f:c0:d8:53:d3:49:de:3f:5b:25:3c:05:ce:
                    c5:2b:d0:83:e5:e6:05:bc:2a:b9:48:3b:d2:84:a8:
                    27:56:5a:98:09:a9:c0:fb:c2:5a:a2:07:8c:35:0c:
                    51:fb:31:13:20:ae:1e:78:90:05:b4:c4:9d:df:ee:
                    72:39:a7:b5:64:70:4f:d6:45:9c:aa:ac:a7:2b:02:
                    79:2d:ee:98:cc:75:4b:c8:16:51:1a:ee:5d:b3:9b:
                    d1:fc:ac:fe:46:63:49:aa:8b:4c:b9:80:5f:d6:ae:
                    6b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2E:EB:42:DA:31:3A:F0:B1:18:AD:98:B7:08:1E:50:16:50:AD:02
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:b3:5b:02:a4:53:37:15:e6:a1:37:f4:26:36:b9:aa:78:
         2e:1a:d1:29:ec:f0:20:ec:f8:02:73:a3:5b:d5:11:cb:bc:1b:
         21:37:4a:8e:f2:d0:2e:de:c6:07:2a:43:2c:e2:d8:9e:b6:a6:
         71:d1:6f:f8:3f:dc:34:95:77:43:8a:da:1b:a6:1d:24:32:d8:
         50:d2:d3:a8:83:21:64:f0:58:69:33:f1:cd:84:9b:01:ff:c1:
         47:ab:a4:e9:1e:2c:3d:47:b5:2c:b3:52:53:22:d4:1b:85:d3:
         1e:a2:35:0c:52:b7:fe:78:59:e0:2e:81:9c:b1:9d:4c:3d:d3:
         19:3f:df:4a:71:9b:2d:b6:a4:1c:67:bc:d8:36:7c:80:46:e2:
         3c:23:44:ef:a4:15:c0:e4:dc:6a:41:d4:82:5f:d5:12:50:a1:
         80:44:ad:a1:0f:80:2f:c4:99:ab:68:4d:e2:b1:bf:6e:30:9f:
         fa:49:27:2c:ce:ac:44:75:76:a1:3c:0c:5f:b5:a6:7a:00:bc:
         e8:bf:fc:b4:de:92:94:2e:d6:2c:f1:13:f9:65:cc:62:85:60:
         2c:a6:e1:4c:83:65:cf:4c:10:22:0f:95:39:20:cd:8d:20:db:
         ef:97:0e:43:99:6d:2c:24:34:84:c8:59:a9:ab:5e:71:04:16:
         69:2c:c4:c2
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUN4hIb+ynF/5gjSTBWt++j7V7HAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3
MjJDMjk0RDAeFw0yNDA1MjgxMzI1NDhaFw0yNDA1MzExODQ4NDhaMDMxMTAvBgNV
BAMTKDQzMkVFQjQyREEzMTNBRjBCMTE4QUQ5OEI3MDgxRTUwMTY1MEFEMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1ece0MjkBIHa6UbzFeleKiT24
7PCnuHvlnTMZgHwgWCwD6bEDoQhjTx+QO3dvu0WhNu3EXy1sHfG9QKbWDv4RPwM4
dQ9QwgMoiGnIhSaqyfpKNqqHiOr8VjsJd6hkKfSA2ZFJXut4y9LawJRVcVLDxapm
L4X6ky6Rj0jnJs7Gz8xEq9lwuXAJtZob1hNqbGY282DSOixJb8DYU9NJ3j9bJTwF
zsUr0IPl5gW8KrlIO9KEqCdWWpgJqcD7wlqiB4w1DFH7MRMgrh54kAW0xJ3f7nI5
p7VkcE/WRZyqrKcrAnkt7pjMdUvIFlEa7l2zm9H8rP5GY0mqi0y5gF/WrmsPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUQy7rQtoxOvCxGK2YtwgeUBZQrQIwHwYDVR0j
BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD
ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD
Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk
YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw
NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAVPs1sCpFM3FeahN/QmNrmqeC4a0Sns8CDs
+AJzo1vVEcu8GyE3So7y0C7exgcqQyzi2J62pnHRb/g/3DSVd0OK2humHSQy2FDS
06iDIWTwWGkz8c2EmwH/wUerpOkeLD1HtSyzUlMi1BuF0x6iNQxSt/54WeAugZyx
nUw90xk/30pxmy22pBxnvNg2fIBG4jwjRO+kFcDk3GpB1IJf1RJQoYBEraEPgC/E
matoTeKxv24wn/pJJyzOrER1dqE8DF+1pnoAvOi//LTekpQu1izxE/llzGKFYCym
4UyDZc9MECIPlTkgzY0g2++XDkOZbSwkNITIWamrXnEEFmksxMI=
-----END CERTIFICATE-----
Generated at Tue May 28 15:24:02 2024 by rpki-client on console-fra.rpki-client.org