Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
File:                     BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft (raw, json)
Hash identifier:          3Lcmpt1afKmxlsud3YHq5NDD3zSHAqrkEeSbeaJBO88=
Subject key identifier:   F2:04:77:C7:81:83:CE:1A:98:47:D3:56:AC:7E:69:DF:84:AE:BE:C1
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Certificate issuer:       /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial:       34A9A3156F7A0C051915DD4689BEE37A06BFD4B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
Manifest number:          0484
Signing time:             Thu 21 Nov 2024 22:21:14 +0000
Manifest this update:     Thu 21 Nov 2024 22:16:14 +0000
Manifest next update:     Mon 25 Nov 2024 08:32:14 +0000
Files and hashes:         1: 323430333a323730303a353a3a2f34382d3438203d3e203338353030.roa (hash: LXf44cMnNVFP6u5UuVgj4UoOkAZLG+aK8bv6iSUrY/w=)
                          2: 323430333a323730303a343030373a3a2f34382d3438203d3e203338353030.roa (hash: nljH86LWGwNNEN8fF5rImf9pAnYykihyJGG8ZFJ+rSc=)
                          3: 3130332e3234342e33372e302f32342d3234203d3e203338353030.roa (hash: GnLkLzOfHrzVpCo9EVpojNnBRcJGfhEOaWQ3uOYze6U=)
                          4: 323430333a323730303a323a3a2f34382d3438203d3e203338353030.roa (hash: pao+/ACSlKwWgRv7dZTLnj5A4K1efIV+FgAQdtaK93U=)
                          5: 323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa (hash: U9S7Wfb5zmkUSyfuvsvwyxT7R2cqY8tNxH5lmf7HAjY=)
                          6: 3133372e35392e31352e302f32342d3234203d3e203338353030.roa (hash: nl48j1D6iX1/Yru+wGEu5dOcsUS0RrCwuDZD9KggzB8=)
                          7: 3133372e35392e31322e302f32342d3234203d3e203338353030.roa (hash: 9ZD4XjjXO7B3DBSExvL2GyZwmYeeqEO+IiQe0UZ79o0=)
                          8: 323430333a323730303a343030323a3a2f34382d3438203d3e203338353030.roa (hash: 6448WemLHIVZfrOzbR3dn3hegLev10xukOgMBJb2KIU=)
                          9: BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl (hash: oFanKq1t0id0IV7oT/PvKnEmzaBaRBR9kM+P0asRitk=)
                          10: 3130332e3234342e33382e302f32342d3234203d3e203338353030.roa (hash: HP8cAO1Y1V/3QSDDjMm70Q9sc22XjILTjKRvN4TIkFk=)
                          11: 323430333a323730303a333a3a2f34382d3438203d3e203338353030.roa (hash: BCXILGY3+AYcUnLR4JiFrEPueD/W7wiynZYypP8MMqY=)
                          12: 3131362e36382e3235352e302f32342d3234203d3e203338353030.roa (hash: LDzgPO5EmJpkOf/0ZWdnOJ6z/tacGIM96iSoqG1ikwA=)
                          13: 323430333a323730303a383a3a2f34382d3438203d3e203338353030.roa (hash: op5bT2L1N0sHmZSjZcqK0jvfD4qLLHRy+eUbnuqHBLQ=)
                          14: 323430333a323730303a343030303a3a2f34382d3438203d3e203338353030.roa (hash: Zb7rPFf6VF+jGYmpydtnDSz3SvzOUS22N5NJon2+iz4=)
                          15: 323430333a323730303a3a2f34382d3438203d3e203338353030.roa (hash: JAWW9TR5qdXEQheEQ6Pi0DKQmsSqwOVr9zv7aeHhx34=)
                          16: 323430333a323730303a313a3a2f34382d3438203d3e203338353030.roa (hash: 2W51nh5SvC7wVRVUPJUQdl2ayXHuGQ/7zMnZ4Pq0DZM=)
                          17: 323430333a323730303a31303a3a2f34382d3438203d3e203338353030.roa (hash: PbO4pvqV6ufqqC3g+CqdnYAN9NhycPdf5LSVOD0gDQI=)
                          18: 323430333a323730303a343030343a3a2f34382d3438203d3e203338353030.roa (hash: bJxVEFJqkVbKOiwNNB4H5sD/W8/g/dcBZzqgF/Ln6iY=)
                          19: 323430333a323730303a363a3a2f34382d3438203d3e203338353030.roa (hash: kXT0CcauRa/phxDKjJChLeDVPhaM1fa9c1d2uU4Km94=)
                          20: 3131362e36382e3235322e302f32342d3234203d3e203338353030.roa (hash: WCsuTYDgM8V1XJPLJZrw+K1YiriuEzFnSizfvsZ4QnM=)
                          21: 3131362e36382e3235342e302f32342d3234203d3e203338353030.roa (hash: sqXKysj0fZFVuk+mIqTT6h3SqroUnTVlNsOViQQ3BHg=)
                          22: 323430333a323730303a343a3a2f34382d3438203d3e203338353030.roa (hash: pcjXDYHI1yc76HolbrMi/oz3RSekhdCYyflXUlZg9iQ=)
                          23: 323430333a323730303a343030383a3a2f34382d3438203d3e203338353030.roa (hash: 873yEHn43Xn509+z+8XPyIe4punEA7hzTdd4moYwQ8I=)
                          24: 323430333a323730303a343030393a3a2f34382d3438203d3e203338353030.roa (hash: hzLEDwoPZQV97Y1ZJUECMuJAkL9ERyV8181k4NZC4Ac=)
                          25: 323430333a323730303a393a3a2f34382d3438203d3e203338353030.roa (hash: pSi/i88W62l+90rS3oGlyj942vaAtjozHI+TQUQdl3Q=)
                          26: 323430333a323730303a343030313a3a2f34382d3438203d3e203338353030.roa (hash: ubtrKNhwXXcr0ETIWIdxgHH4b+DjI98JUXi9y4XDjsA=)
                          27: 323430333a323730303a343030363a3a2f34382d3438203d3e203338353030.roa (hash: rt/eUImSHktBNKKYB4+n6Rxzcr6tD09gargsb9zc+EM=)
                          28: 323430333a323730303a343031303a3a2f34382d3438203d3e203338353030.roa (hash: CYyov54HIizse2X1caxwUAoGE1hXD3ZT5cny+gNbbYs=)
                          29: 3133372e35392e31332e302f32342d3234203d3e203338353030.roa (hash: pKmM0l86N45KZwm0JkC8SRYwfYrkQMOuJfS+kKCp8do=)
                          30: 323430333a323730303a373a3a2f34382d3438203d3e203338353030.roa (hash: 9Va+9fvyqyWhSaKKKkowC02TdLLn07mUstrmppit8fk=)
                          31: 3131362e36382e3235332e302f32342d3234203d3e203338353030.roa (hash: Zya17nvgTzQYKkg+JiBbWtmrVOxRraKb1wqBVLHeMC0=)
                          32: 3131362e36382e3235312e302f32342d3234203d3e203338353030.roa (hash: oNldCdNwmQKeuv55YdfbzMLeVu7HtQ0SBVdOcMyELnQ=)
                          33: 3130332e3234342e33362e302f32342d3234203d3e203338353030.roa (hash: l5czVuVopqzNHFatDNFlv4PSjmFiS+T99enXAHNMN58=)
                          34: 323430333a323730303a343030353a3a2f34382d3438203d3e203338353030.roa (hash: 6+oj/u52qOmkqsF5utRKJ8ePcdxQ82y9Sa7f96/sE74=)
                          35: 3131362e36382e3234382e302f32342d3234203d3e203338353030.roa (hash: F4tFSHRlMedtfZGNmeyngJUkPlEO+pT9H13rSOwjrYQ=)
                          36: 3131362e36382e3234392e302f32342d3234203d3e203338353030.roa (hash: doz0syypEeupoVAOwQQlcwSdntvReHRWO19LrOE5tlw=)
                          37: 3130332e3234342e33392e302f32342d3234203d3e203338353030.roa (hash: kmzkO4Zysl02z2GLnKAdGhK6A7UAIsm1OzMaIkZeuFg=)
                          38: 3133372e35392e31342e302f32342d3234203d3e203338353030.roa (hash: wqxXgoPAkQNKaWpdoRcEwNeMU8YvEX1OVvWJwgaKZRo=)
                          39: 3131362e36382e3235302e302f32342d3234203d3e203338353030.roa (hash: S+6wOKwDjLjR3m73Q2xPhHCvBxjESU5/XpZqq8itLKc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
                          rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a9:a3:15:6f:7a:0c:05:19:15:dd:46:89:be:e3:7a:06:bf:d4:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
        Validity
            Not Before: Nov 21 22:16:14 2024 GMT
            Not After : Nov 25 08:32:14 2024 GMT
        Subject: CN=F20477C78183CE1A9847D356AC7E69DF84AEBEC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:d9:20:cc:6c:14:f3:72:2e:74:7c:2f:1b:
                    05:d3:23:31:f4:78:ad:40:27:2e:bc:dd:02:fb:c0:
                    75:b5:ff:e8:73:9a:96:f3:8d:d8:c5:cf:26:f3:85:
                    31:d1:42:d0:bf:d9:71:c7:10:9f:c5:b5:8f:c3:d2:
                    5a:56:47:b8:2d:88:ec:08:fa:62:19:de:96:f8:b5:
                    61:aa:82:50:bc:8e:56:33:b8:bd:55:85:2e:ec:01:
                    eb:b7:9b:88:6d:88:3c:4c:88:9e:96:10:ac:87:cf:
                    f6:5c:a5:3c:82:fe:07:1c:4a:0c:2c:16:46:51:34:
                    26:07:23:94:da:cb:1d:aa:6c:fe:53:16:33:60:e5:
                    7d:84:43:11:85:87:90:ce:50:05:ec:28:58:9f:41:
                    3b:62:f8:57:3e:be:e8:f3:7b:08:3c:6a:c0:3e:dd:
                    ca:1c:fc:48:2d:7c:86:fb:29:d8:28:d0:e8:aa:0b:
                    c7:e1:46:09:b0:e5:2a:29:7b:b7:27:6d:06:e3:58:
                    59:a4:4c:f9:92:19:a8:7a:b2:52:ef:17:0c:da:0a:
                    25:a7:95:ed:c7:bb:9b:35:b3:26:9a:3b:06:fc:bb:
                    d3:b3:19:49:76:09:10:2d:60:84:c9:f3:45:a9:38:
                    14:84:de:8d:99:a1:29:bb:95:80:a0:32:bf:78:01:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:04:77:C7:81:83:CE:1A:98:47:D3:56:AC:7E:69:DF:84:AE:BE:C1
            X509v3 Authority Key Identifier:
                keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d6:ab:87:6f:71:0c:81:ca:b0:a8:cb:77:70:db:07:e8:36:
         3d:78:87:a3:41:2c:49:e8:b5:28:e2:39:fe:65:88:b4:d7:1d:
         7d:a7:6c:0f:e6:d3:5c:13:43:ff:61:c9:77:fb:16:90:79:e8:
         33:5b:f1:40:28:11:c9:a7:26:d3:61:63:1a:a0:c3:1d:f1:82:
         df:03:ee:a9:22:37:8b:1d:62:dd:0b:74:23:41:dc:13:ca:cf:
         d9:7c:32:8d:82:46:68:07:a5:a0:78:c1:d4:43:74:5a:d5:25:
         6e:88:6e:84:ff:fe:0f:ee:f7:94:36:a1:1a:5b:95:e6:41:1c:
         a6:c7:ba:d9:4c:bb:14:22:4c:51:24:6c:1a:9b:2e:f1:70:98:
         2e:a2:ef:39:4c:a2:ac:d8:68:50:f3:3f:c6:8b:cd:2b:0c:1c:
         c6:95:49:22:68:9e:89:f4:01:25:c1:93:16:3a:a2:15:f5:19:
         68:35:b6:7a:7c:d3:a2:c5:08:fa:bb:31:36:47:cc:01:fe:1b:
         22:dc:22:b2:e3:42:52:bd:06:4d:68:99:0e:c3:20:49:90:25:
         93:ea:a6:a3:ed:23:59:8c:e4:0d:a6:c4:63:ae:35:e8:55:1f:
         85:0f:dc:ea:80:cf:56:4f:3f:ff:8b:44:cf:a7:6f:22:15:67:
         72:b3:0d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org