Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
File:                     1976DD7D4FBDFBEB355F0B96690613959E106872.mft (raw, json)
Hash identifier:          FdVqPH4pQjTmGSPr90A5PSq9Y98W4Uq6jOGMVvlhxUQ=
Subject key identifier:   E0:D0:2E:7D:C1:A4:D8:50:95:3D:5C:08:37:8E:1B:F3:1B:A0:42:2F
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       7E630D3A6C7FA2703F68DA7739F64E1A0ED6132E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
Manifest number:          0488
Signing time:             Wed 20 Nov 2024 19:12:00 +0000
Manifest this update:     Wed 20 Nov 2024 19:07:00 +0000
Manifest next update:     Sun 24 Nov 2024 02:47:00 +0000
Files and hashes:         1: 3135302e3130372e3234342e302f32322d3232203d3e203535363939.roa (hash: 2Xzrd99gfWjLyXPyVFPR6/hDG8K/iUOh9y8qCTgaWaM=)
                          2: 1976DD7D4FBDFBEB355F0B96690613959E106872.crl (hash: kOdDQV06RAfGtzcHZXZX8tKfve4S7pDCMYkwKrVTtnw=)
                          3: 3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (hash: Xt7X2bDgMkDTBBHqsSxamiZR8k2GuMHWvJZy4/PpiEE=)
                          4: 3130332e3235352e3135362e302f32332d3233203d3e203535363939.roa (hash: QKJnBYsa48aeQstLVfndf8/+iYcSarM3RMNHB08BXNY=)
                          5: 3230332e3231302e38342e302f32322d3232203d3e203535363939.roa (hash: S14Z6UvQgxm3zvnB7IqJQnjifft19IGaxbuliv63HPA=)
                          6: 3131332e3139372e3130382e302f32322d3232203d3e203535363939.roa (hash: AkhktkyJIyCLLreKUWD/ZxrgDzrbrWRbyI+iKLWwlw0=)
                          7: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (hash: VUWhftZCz6t5WvzC4+/sPlF0zMj6ttLXWdYMj0+uIE4=)
                          8: 3136302e31392e3232342e302f32322d3232203d3e203535363939.roa (hash: ehMw7XipDXtku35OIScfEFa1n231s20Vh+1JJFGZJOg=)
                          9: 3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (hash: acQbJQpWqGWIfvq9W6fl9QpMJKA8AlxG/taJBCqg2AI=)
                          10: 323430343a613163303a3a2f33322d3332203d3e203535363939.roa (hash: qLMqaWG01btU4DjLVKlNjSmJQeLYWY8XvQDF/McekDU=)
                          11: 3136302e31392e36342e302f32322d3232203d3e203535363939.roa (hash: x+/p3Q5ADGqhUvhLNv+geBcsDnQ0jyijDiW56RBXbO4=)
                          12: 3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (hash: n0idqAAuE50Cj/bGGCbY0uwiIVXsU1cdHPDhEeqJtd0=)
                          13: 3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (hash: M04lbY81cSgReu/x5nMfcW4XL5j03JobsQGzMj/Vmmw=)
                          14: 3130332e32332e33322e302f32322d3232203d3e203535363939.roa (hash: +QbrV6etFGpBQNbf+3ULQNDoI74EGacs/J66k/55qRA=)
                          15: 3132312e35322e3133362e302f32312d3231203d3e203535363939.roa (hash: y1d0G8T+Y3oi/U7zYsXxsMEdHM9mWNptYCytl+n7OUQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:63:0d:3a:6c:7f:a2:70:3f:68:da:77:39:f6:4e:1a:0e:d6:13:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Nov 20 19:07:00 2024 GMT
            Not After : Nov 24 02:47:00 2024 GMT
        Subject: CN=E0D02E7DC1A4D850953D5C08378E1BF31BA0422F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:59:b6:b5:b5:22:82:ab:87:0f:c0:91:43:
                    2c:fb:84:df:8f:ca:99:48:13:22:46:cf:f9:38:7e:
                    73:f9:84:0e:36:65:d2:5c:a9:08:de:4f:56:02:2b:
                    38:2f:c9:3c:86:1a:b6:ef:a2:de:41:e1:b7:5e:cb:
                    1a:c8:f1:54:5b:28:46:f1:04:1f:7f:ad:8d:fd:fa:
                    38:85:10:21:a6:45:91:c1:70:14:46:2d:bf:8c:6e:
                    6a:0e:fc:d4:1f:26:08:85:2b:3e:1c:ec:e5:b6:81:
                    c5:ba:58:a7:e4:b2:6c:a0:df:e2:c4:95:d2:b6:7d:
                    86:a7:88:25:08:52:49:2d:9e:8c:fc:c8:b8:13:12:
                    6c:17:7f:d9:61:54:3a:7b:bd:b9:54:69:3a:7d:44:
                    e4:02:d5:8d:94:d2:a8:ff:6b:98:8b:32:d1:13:69:
                    5d:f6:13:67:b7:b5:46:c8:9d:cd:8d:15:92:b9:3d:
                    5e:fa:45:b4:1f:6a:4f:4b:9b:d2:87:7e:4f:cb:f7:
                    6a:85:50:d0:04:de:82:02:e8:52:a8:2a:b2:27:18:
                    f6:6b:7c:f6:f4:aa:f8:db:32:06:05:44:8a:e8:66:
                    ce:83:ee:ae:de:6b:77:5a:c2:53:c6:b1:96:d0:7d:
                    5d:67:26:e9:1f:f7:80:9f:d3:76:00:b9:64:f1:b7:
                    e9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D0:2E:7D:C1:A4:D8:50:95:3D:5C:08:37:8E:1B:F3:1B:A0:42:2F
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:6c:82:b7:63:ec:53:f7:34:1d:81:82:28:eb:1b:43:af:
         21:20:5e:76:25:75:44:6f:6d:69:94:2d:69:75:6c:95:11:47:
         f5:97:30:83:f4:18:85:83:57:a2:2a:3d:1f:44:1f:9f:2e:78:
         b5:40:f1:15:3d:bf:52:2c:03:a4:e9:5e:ce:d9:b5:20:c1:a2:
         af:73:85:ff:6a:c8:6c:03:61:06:7e:2d:cd:24:4b:62:94:6a:
         8f:19:be:06:88:f6:99:f9:1f:2c:28:03:05:84:36:ee:70:a8:
         6a:15:26:b7:f2:9a:16:23:7f:c3:31:5d:df:af:de:b2:dc:95:
         5c:75:3c:a6:98:e5:62:69:a6:db:0e:8e:a8:ec:c5:6c:06:9b:
         21:aa:9a:4f:03:87:8f:39:52:c3:fa:3b:31:9f:e7:19:3f:36:
         b5:f1:ff:38:e5:64:1e:92:73:ed:b8:95:d0:65:96:9c:be:3b:
         ee:fa:0c:b0:a0:12:01:07:d0:0c:29:fe:b7:45:00:64:b0:2f:
         c6:69:88:63:38:b4:af:96:a3:00:13:65:bd:94:e4:ff:7a:38:
         38:15:b0:f3:96:2c:21:c1:57:37:be:91:55:7e:29:7d:87:13:
         ba:c7:28:77:0a:b7:92:2e:08:60:cf:70:38:98:a2:4e:e4:4c:
         ea:d7:94:1b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfmMNOmx/onA/aNp3OfZOGg7WEy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5
RTEwNjg3MjAeFw0yNDExMjAxOTA3MDBaFw0yNDExMjQwMjQ3MDBaMDMxMTAvBgNV
BAMTKEUwRDAyRTdEQzFBNEQ4NTA5NTNENUMwODM3OEUxQkYzMUJBMDQyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBF1m2tbUigquHD8CRQyz7hN+P
yplIEyJGz/k4fnP5hA42ZdJcqQjeT1YCKzgvyTyGGrbvot5B4bdeyxrI8VRbKEbx
BB9/rY39+jiFECGmRZHBcBRGLb+MbmoO/NQfJgiFKz4c7OW2gcW6WKfksmyg3+LE
ldK2fYaniCUIUkktnoz8yLgTEmwXf9lhVDp7vblUaTp9ROQC1Y2U0qj/a5iLMtET
aV32E2e3tUbInc2NFZK5PV76RbQfak9Lm9KHfk/L92qFUNAE3oIC6FKoKrInGPZr
fPb0qvjbMgYFRIroZs6D7q7ea3dawlPGsZbQfV1nJukf94Cf03YAuWTxt+kbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU4NAufcGk2FCVPVwIN44b8xugQi8wHwYDVR0j
BBgwFoAUGXbdfU+9++s1XwuWaQYTlZ4QaHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NTk5ZWQ5Ni1kNDA4LTQ0MTgtYjgyYS01ZDVhOGU2NjU3ZjMvMC8xOTc2REQ3RDRG
QkRGQkVCMzU1RjBCOTY2OTA2MTM5NTlFMTA2ODcyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5RTEw
Njg3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5OWVkOTYtZDQwOC00NDE4LWI4
MmEtNWQ1YThlNjY1N2YzLzAvMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEz
OTU5RTEwNjg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEwrbIK3Y+xT9zQdgYIo6xtDryEgXnYldURv
bWmULWl1bJURR/WXMIP0GIWDV6IqPR9EH58ueLVA8RU9v1IsA6TpXs7ZtSDBoq9z
hf9qyGwDYQZ+Lc0kS2KUao8ZvgaI9pn5HywoAwWENu5wqGoVJrfymhYjf8MxXd+v
3rLclVx1PKaY5WJpptsOjqjsxWwGmyGqmk8Dh485UsP6OzGf5xk/NrXx/zjlZB6S
c+24ldBllpy+O+76DLCgEgEH0Awp/rdFAGSwL8ZpiGM4tK+WowATZb2U5P96ODgV
sPOWLCHBVze+kVV+KX2HE7rHKHcKt5IuCGDPcDiYok7kTOrXlBs=
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org