Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
File:                     42042E672B688C3072FD4743B3E7DD81EC7CA306.mft (raw, json)
Hash identifier:          ePogHS+Tbr9+2d5MvdNFDsYuoobJqKz9tgF6cJKJOQ0=
Subject key identifier:   54:ED:4D:7C:65:EF:61:8A:73:80:90:D1:32:6B:CB:12:91:F9:9E:4A
Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06
Certificate issuer:       /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
Certificate serial:       23D35B92C7F777D22C3F537A4DB770AA6D7D3A22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
Manifest number:          024A
Signing time:             Sat 18 May 2024 23:50:36 +0000
Manifest this update:     Sat 18 May 2024 23:45:36 +0000
Manifest next update:     Wed 22 May 2024 08:00:36 +0000
Files and hashes:         1: 3230322e3138302e31332e302f32342d3234203d3e203338373539.roa (hash: odBJX+CLNTnYgKH5QlISWZlo4XYiXYtflxI0lbRaskU=)
                          2: 3230322e3138302e31312e302f32342d3234203d3e203338373539.roa (hash: 8fCxL4kzsTR9nVCFAoxxudpF0Ec382+ZvVA6xNKpLm4=)
                          3: 323030313a6436383a383a3a2f34382d3438203d3e203338373539.roa (hash: NofpD1sl8DXcTobPYZA70vZaLVMJLrRdwRdQN8Q2j3s=)
                          4: 3230322e3138302e382e302f32342d3234203d3e203338373539.roa (hash: sXHEpTkTxbuv4S3WUpZvjYIt+JarEBk8yxR0q/b1nK0=)
                          5: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (hash: jGbz8hEzrrbFfVagWBY87v30hbasmX3TQXRaoqzfZdg=)
                          6: 323030313a6436383a373a3a2f34382d3438203d3e203338373539.roa (hash: q4ufczHXWb8cQOmRkC7+JBAsYcnqb6OwClmIOw/Be0w=)
                          7: 42042E672B688C3072FD4743B3E7DD81EC7CA306.crl (hash: w//CF9BmosutycWLKLGbmQ3D6zuSeWD19H62Wl6B+6A=)
                          8: 323030313a6436383a393a3a2f34382d3438203d3e203338373539.roa (hash: LadsWpHmPGp97fDEgvjoN/YbXYDgT4jvh+k75V/COm0=)
                          9: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (hash: A3yaC5hNbOMQr/QWboU4GGIwqtKyoLelWNr2AJU+RPE=)
                          10: 323030313a6436383a31333a3a2f34382d3438203d3e203338373539.roa (hash: n2D9TsqBwNwkjRfN43M5UVWemfFfTtJxeUU9YI8zmdc=)
                          11: 323030313a6436383a31303a3a2f34382d3438203d3e203338373539.roa (hash: 5j74INw5X5Y3shm7BtJzBJ2P8kjDp1NYQcLdh80Tczc=)
                          12: 323030313a6436383a3a2f34382d3438203d3e2037353837.roa (hash: Pggp68pwOzQRz8ETbvUNpI/D8g02V7HiREYVtD7KQL0=)
                          13: 3230322e3138302e31362e302f32302d3234203d3e203338373538.roa (hash: Tic1OGq/fKlYPidSSlEIg9yftfnG3NxpauDHhGYjZDM=)
                          14: 3230322e3138302e31322e302f32342d3234203d3e203338373539.roa (hash: CLhED6Y0546mOZa01D/IYXj3uJEZd/Y8Od4+lX/JAmk=)
                          15: 323030313a6436383a31313a3a2f34382d3438203d3e203338373539.roa (hash: jDQT1l8xJmk1rrCSfSI7Dw3YM3KM+3lFyGd5dH8/PU8=)
                          16: 323030313a6436383a31323a3a2f34382d3438203d3e203338373539.roa (hash: +gtmbRf0i4IpG6isOdOHHbgq71nhiIWlNersn2mgTs8=)
                          17: 3230322e3138302e302e302f32342d3234203d3e2037353837.roa (hash: xnVrqwDDek+QEXLhrf4+tU/01UjwMMYl90TGFi+l6Aw=)
                          18: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (hash: ftuxrsTdpAVDqROeCV15jYAaeb98ThoPwiyw3Mo3LRg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl
                          rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 23:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d3:5b:92:c7:f7:77:d2:2c:3f:53:7a:4d:b7:70:aa:6d:7d:3a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306
        Validity
            Not Before: May 18 23:45:36 2024 GMT
            Not After : May 22 08:00:36 2024 GMT
        Subject: CN=54ED4D7C65EF618A738090D1326BCB1291F99E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7b:a8:64:23:68:19:20:86:e9:5c:be:e2:ee:
                    4a:9d:7c:53:d8:a6:ee:35:c8:39:f8:8f:94:3f:ae:
                    c8:d4:c8:b2:b3:53:8f:85:d7:35:9a:13:7b:41:ea:
                    63:0f:c4:7c:bb:ed:5b:0b:44:47:99:1e:0e:1c:e2:
                    21:0e:7e:ef:ae:56:bf:ef:77:7c:dc:1c:ea:0b:8a:
                    cf:a4:58:5d:4b:62:71:09:7d:ae:76:85:a3:a7:32:
                    59:f7:b0:c1:d5:f5:7b:58:48:3a:0d:79:4d:5f:ea:
                    57:40:06:23:87:a3:56:cc:f3:d5:0b:4a:0a:c9:cf:
                    63:f0:31:77:af:76:ea:46:76:45:41:44:fb:43:e6:
                    24:91:98:af:37:c7:fc:7b:2c:88:8e:22:d4:37:b5:
                    41:5d:9d:d8:b3:73:b8:ca:9b:2c:17:b2:a6:2f:1f:
                    4d:89:8d:4f:db:db:75:76:b2:76:30:cb:3b:1f:8c:
                    03:34:aa:35:20:3d:cf:f8:e5:5a:6b:14:d8:60:11:
                    bb:48:49:4b:c8:61:48:10:76:cb:fb:2a:04:31:a7:
                    d9:28:e9:96:4a:25:75:d1:36:74:9f:73:cc:89:29:
                    cc:13:c6:8b:93:42:ab:0c:89:64:f5:99:42:df:17:
                    64:23:d0:8b:bb:ca:7f:ad:c5:f5:27:e6:fc:5e:53:
                    ec:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:ED:4D:7C:65:EF:61:8A:73:80:90:D1:32:6B:CB:12:91:F9:9E:4A
            X509v3 Authority Key Identifier:
                keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ec:c2:6e:56:7d:44:19:f2:40:d8:82:01:9b:9f:6d:f1:14:
         af:02:2c:e9:5c:70:75:39:d8:7b:83:c5:e6:ac:db:67:af:fc:
         c6:46:3c:a2:b8:18:ec:0a:79:02:e8:d9:cb:05:49:47:2e:cd:
         b1:51:89:93:0a:48:3f:86:ca:41:13:04:7c:71:6a:d8:da:5f:
         87:1e:08:bc:55:86:ba:a6:d8:5c:00:02:5b:4d:85:27:a8:13:
         48:fa:3e:34:1c:45:d2:e0:3c:ed:f7:50:e5:7e:6e:4c:19:85:
         c4:af:d3:87:a1:cd:ea:3e:4d:59:d2:45:ad:81:21:6e:1d:14:
         31:e2:9b:b8:03:c0:47:94:20:c5:ae:23:31:17:c3:aa:19:24:
         82:0e:e6:ee:1b:15:93:8d:c4:fe:44:19:a0:3e:ef:61:4e:6f:
         bf:fa:8e:d6:29:32:9f:62:9f:b4:51:5a:67:d6:12:83:c7:c1:
         07:1e:0b:b5:79:f6:8f:85:d2:53:d5:c9:c3:9e:ea:6e:12:50:
         c1:4f:72:41:07:71:35:0c:c5:e2:b9:20:91:10:d6:81:c0:e0:
         07:46:91:7f:39:99:91:b8:57:55:97:47:39:da:a2:f4:31:09:
         42:be:94:47:2e:bf:c5:e4:0e:21:12:38:56:79:96:9e:5e:5b:
         f2:cc:45:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:59:09 2024 by rpki-client on console-fra.rpki-client.org