Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
File:                     3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft (raw, json)
Hash identifier:          3/nT6KipegsUzKOYARwjnoINsIWZGH5fJc4i0wOkGBE=
Subject key identifier:   14:E6:D2:3A:95:7C:20:2C:84:A9:B3:98:10:3B:AD:1E:F7:E7:81:3A
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Certificate issuer:       /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial:       352092BCE317C1906B6F736E3FA1B8548AAD16AF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
Manifest number:          0149
Signing time:             Sun 19 May 2024 13:32:02 +0000
Manifest this update:     Sun 19 May 2024 13:27:02 +0000
Manifest next update:     Wed 22 May 2024 21:24:02 +0000
Files and hashes:         1: 3230322e35312e35372e302f32342d3234203d3e203338353039.roa (hash: /CE2dyukbZxN5U2aEWLS03d8snn3cah29hAXwUi9xlU=)
                          2: 3230322e35312e35382e302f32342d3234203d3e20313333383039.roa (hash: cqeQwHrHLnmtE9TbQ4Wl2rA2Jr2qCQd6H1k09S8SWJY=)
                          3: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (hash: 9JhEsf7Rfj1/1sGwyn9vXBFLhDThBdCundD/yJmVoGk=)
                          4: 3230322e35312e35362e302f32332d3233203d3e203338353039.roa (hash: qtUXHZ87LD0aBRbn8mrn1HuY5dOV1CGmhwM1Xcmahws=)
                          5: 3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl (hash: KNB3CE6zv3S9PVqV68nlFyf2CmacfNsUVvvhsn6ySY8=)
                          6: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (hash: 11MC5FJV81eDF0hmXmIGlCvYBfxe8/B4DDfC+bAnVcc=)
                          7: 3230322e35312e36322e302f32342d3234203d3e20323031333431.roa (hash: ZFZXeihhDtU9k6tut8B1YVi1rve9EUj2x0+wMaAyKco=)
                          8: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (hash: tTjtOKY8yjArzXbGhB1oeW+9WISeqtj3QSBeBi3CWWU=)
                          9: 3230322e35312e36312e302f32342d3234203d3e20323031333431.roa (hash: bYBSmiXHENZ5+D4aLwRMCseg/Jz198HvpjZSlRQRk/A=)
                          10: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (hash: sYwxxrs+ant0TIjouWA1d0UxBBez3RXDFXjayUc8GiQ=)
                          11: 3230322e35312e36302e302f32332d3233203d3e20323031333431.roa (hash: N1py/UmfH5qu4YQZhj2saYLPpWLMYrpOtfBIgfSfLLE=)
                          12: 3230322e35312e35382e302f32332d3233203d3e20313333383039.roa (hash: COZW8A4Pidp1jJOZZMmu1poRCI9vlE7GBLYblpRpRmU=)
                          13: 3230322e35312e36302e302f32322d3232203d3e20323031333431.roa (hash: etaBPciFEwBhaJvis2tVUGBI+EfK6LR3Mmz7DfvWUkY=)
                          14: 3230322e35312e35392e302f32342d3234203d3e20313333383039.roa (hash: pTS0l+eaws7qtvCg5sJfGYoPDTVDYWi86V9EN0fMVqo=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
                          rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 19:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:20:92:bc:e3:17:c1:90:6b:6f:73:6e:3f:a1:b8:54:8a:ad:16:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
        Validity
            Not Before: May 19 13:27:02 2024 GMT
            Not After : May 22 21:24:02 2024 GMT
        Subject: CN=14E6D23A957C202C84A9B398103BAD1EF7E7813A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:d4:a4:ac:a5:f6:4e:27:bc:f2:4f:06:3a:
                    e9:f6:55:cf:2b:e6:c0:ba:02:ca:b6:db:47:0b:9b:
                    69:15:f3:7d:ee:a9:7f:10:fa:34:f3:42:77:1c:cf:
                    f6:bc:a3:1a:ba:23:38:bf:ef:84:fc:6b:92:3b:e0:
                    ec:01:15:bf:20:26:1a:eb:6e:46:f2:a7:1e:5e:67:
                    0a:c2:39:78:55:23:bf:b8:ce:e1:ca:04:75:f8:f2:
                    16:58:5b:f6:bd:27:db:02:8c:86:83:d3:4f:9d:7b:
                    61:bc:dd:38:2f:31:ab:e2:31:84:5f:93:e7:1a:3b:
                    ad:90:da:87:54:08:7f:ce:6f:26:4a:4b:61:3a:86:
                    be:8b:c0:7f:6d:b0:3f:ea:72:82:27:14:0f:8f:3d:
                    54:03:1e:18:ee:74:31:f6:b4:9f:2b:42:51:87:26:
                    10:33:a6:d3:9d:5b:e3:c5:49:45:ca:c9:01:3c:a4:
                    dc:c2:8c:3f:ee:ef:cf:7a:7f:08:9b:9d:fa:65:56:
                    86:04:23:4c:61:17:d8:ee:dc:0e:cf:2c:41:50:e3:
                    bc:a1:53:60:74:6e:da:6f:34:eb:2b:35:fa:63:d6:
                    10:bf:7f:ae:a4:a1:21:7e:1f:4d:26:40:ec:9d:89:
                    2c:c6:50:5b:ab:09:80:e2:fe:0f:92:87:01:9f:9f:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E6:D2:3A:95:7C:20:2C:84:A9:B3:98:10:3B:AD:1E:F7:E7:81:3A
            X509v3 Authority Key Identifier:
                keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:df:d4:7c:c7:6c:55:d2:da:cc:ec:0a:92:8d:f4:70:cd:a4:
         2a:3c:fa:bc:90:d4:ba:22:6d:63:74:7e:83:2f:ec:c0:dd:a6:
         2f:24:31:7a:3d:3f:0f:5d:a8:3a:d4:04:2a:17:a1:0a:75:09:
         78:2c:67:b5:68:92:76:61:15:19:37:66:8a:cb:0e:eb:17:00:
         ff:84:55:6e:ba:f7:6b:dc:05:a2:ab:28:8b:39:bf:fd:cc:4d:
         0a:d7:22:f2:9a:d6:44:e4:b4:83:a6:9d:09:e8:7e:c7:99:1b:
         20:2b:39:df:58:4a:db:6e:85:28:85:b6:f4:11:70:65:50:0c:
         2a:45:d0:ea:5d:b2:27:24:01:dc:c2:71:03:ce:b9:de:4d:e4:
         86:da:51:31:0e:23:a5:96:23:74:75:ed:99:c7:dc:c5:c7:6f:
         94:bc:ed:a2:3f:7b:d0:16:75:f8:f2:10:f2:ac:dd:80:0c:41:
         57:83:77:89:aa:1d:31:40:75:e0:37:0c:67:f8:ad:b1:a6:c8:
         85:4e:a7:ee:ec:1b:d2:9a:9a:03:e6:ae:6d:cb:35:01:c7:ed:
         e4:d0:7b:7a:be:b6:76:45:88:32:fa:60:0a:20:91:51:e8:d8:
         0f:c4:44:78:da:0a:98:3e:f8:4e:26:fd:b4:dd:96:b2:94:c1:
         8a:f7:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:45:36 2024 by rpki-client on console-fra.rpki-client.org