Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
File:                     108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json)
Hash identifier:          U61HoentIayp+CpcWAyq1ypo2ef/QuKzXoLNIMp5H7E=
Subject key identifier:   EE:C3:B9:8F:FA:38:91:9B:FF:89:CD:06:9E:AC:37:F4:0A:3E:81:2A
Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53
Certificate issuer:       /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
Certificate serial:       7B4CB34E5C328A0DC34398FF673512FE78B846CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
Manifest number:          4D
Signing time:             Fri 27 Sep 2024 11:21:32 +0000
Manifest this update:     Fri 27 Sep 2024 11:16:32 +0000
Manifest next update:     Mon 30 Sep 2024 16:31:32 +0000
Files and hashes:         1: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: Kv9XshcpB7TZvzMgSiRNinGPZ8vMcr00PAHAYOovTjc=)
                          2: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: 0+EzwHsPjCbV8QJ6bq8ccNZiZucHK/n8MBUE8T98GMc=)
                          3: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: KjMxjvExxv5WM0e+RcleaNj9WGu1qc5KM8bCCHJf5mE=)
                          4: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: TtVQpNcN9pyvxVZrkWNdb8Qawm5+d784a9qp+uVf74s=)
                          5: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: 3YmVYCRoqYFKWuEsCMHpjQbrzfUppnYkdN1P8sml9nk=)
                          6: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: i5zly9PaOc7kAYF2TnzC/Z1Eo88r/IPlotZqEKYct7w=)
                          7: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: nEfFT0wh2/O+65J6AAun5DCt3rcacULUOhZBBgFYKyQ=)
                          8: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: 83nhHmHwP+GjlXSyh7L16KZaxHdpQ1noRI9N6mSZt+E=)
                          9: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: 5QmBgtR4oxoWyv+pDSaUBxvCGSef+sF2loWrmoll8N4=)
                          10: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: 5fow4ijKoI1KVvcf6YC/HJbpKTVGon96DwXzzm6+a+4=)
                          11: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: sZlo9f1EsLMeYktfV+ZGzFa0M9EDgUgsMgX5pnPF/LY=)
                          12: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: C4RD7yWpQLN/zIKEeL7gOdqXppRBKPVIwhC99j3g7Cg=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl
                          rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 30 Sep 2024 06:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4c:b3:4e:5c:32:8a:0d:c3:43:98:ff:67:35:12:fe:78:b8:46:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853
        Validity
            Not Before: Sep 27 11:16:32 2024 GMT
            Not After : Sep 30 16:31:32 2024 GMT
        Subject: CN=EEC3B98FFA38919BFF89CD069EAC37F40A3E812A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:c2:20:23:11:1a:0e:79:5e:8f:fe:bb:c1:
                    bc:49:68:d7:1d:51:64:75:38:a4:24:20:33:c4:91:
                    59:01:c7:f4:02:2b:90:14:36:e4:8e:7d:08:ff:0b:
                    8e:30:0f:ea:26:36:2d:6e:d1:22:32:11:c8:a9:4a:
                    9a:06:5a:51:fb:a5:fe:ad:a2:b9:71:d5:91:27:1b:
                    0a:8a:5a:d9:e6:3e:80:81:d6:f7:c4:44:c1:18:2c:
                    a8:20:c2:ec:2f:16:a8:5c:e3:1d:dc:1a:ad:21:10:
                    7d:99:fb:fc:60:f1:c5:0a:e7:0b:23:4b:e1:ce:d6:
                    13:a6:1e:5a:00:c1:59:91:d6:6c:77:2a:5e:2d:ca:
                    7c:1e:e4:8e:60:25:b4:9c:50:a6:c4:57:7c:79:0a:
                    22:b0:48:0a:ae:c5:16:6d:a9:85:57:f5:84:7e:85:
                    3e:7c:62:74:af:f6:00:4b:f8:0b:2d:fa:a8:9e:a2:
                    cc:67:de:8d:36:3d:c9:b4:c5:00:5f:5a:cf:82:51:
                    35:a3:f3:8a:8a:45:7d:e4:1e:08:f1:a0:aa:00:50:
                    d9:ac:ce:cc:64:77:fb:53:af:be:2f:c2:eb:0d:d6:
                    cd:4a:80:52:ce:00:e4:0f:3f:9a:15:09:86:2e:c0:
                    05:e9:a2:14:9e:62:02:dd:33:24:40:9f:57:d0:51:
                    e2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C3:B9:8F:FA:38:91:9B:FF:89:CD:06:9E:AC:37:F4:0A:3E:81:2A
            X509v3 Authority Key Identifier:
                keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1b:c9:e6:ae:f1:10:96:30:e9:63:c5:39:6b:dd:74:13:23:
         56:3c:1b:63:39:be:21:9f:aa:55:03:4a:d0:e6:b0:e6:42:84:
         bd:a0:94:83:96:4d:13:80:48:58:dd:06:5a:88:b8:77:81:fd:
         69:91:a8:04:30:34:15:b2:2a:8f:f0:c6:81:b8:96:94:32:70:
         95:8a:1a:c1:52:c4:b0:57:25:1c:ce:22:15:9e:49:1d:75:be:
         1c:87:e0:0f:59:8f:98:a2:9d:c5:b3:74:0e:e9:c8:2e:1f:55:
         8c:4c:12:61:34:64:7c:af:2f:8f:40:7b:b4:7e:01:26:67:ba:
         62:16:34:f9:97:f0:ec:84:76:13:f4:84:31:99:4b:f5:c5:99:
         0c:6a:29:d0:3a:a8:f8:96:cc:f3:35:7f:2d:cd:8d:25:a5:56:
         d3:c5:88:e9:73:34:3f:5f:5a:2c:6f:71:ff:5f:30:02:25:0a:
         c9:ad:b2:c6:4d:21:bb:54:a8:c6:58:20:e3:64:d8:cb:f9:94:
         b6:56:df:c7:07:96:80:70:9e:45:9e:e3:9d:6e:6e:b6:4a:50:
         96:ab:b8:68:c8:f1:53:e5:b3:3c:d9:36:49:b6:76:1c:a3:26:
         56:ed:79:af:c1:46:7b:fb:cc:e4:54:c7:ef:8e:48:cd:17:78:
         ce:38:bb:4c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUe0yzTlwyig3DQ5j/ZzUS/ni4RsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD
MTIwMjg1MzAeFw0yNDA5MjcxMTE2MzJaFw0yNDA5MzAxNjMxMzJaMDMxMTAvBgNV
BAMTKEVFQzNCOThGRkEzODkxOUJGRjg5Q0QwNjlFQUMzN0Y0MEEzRTgxMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HMIgIxEaDnlej/67wbxJaNcd
UWR1OKQkIDPEkVkBx/QCK5AUNuSOfQj/C44wD+omNi1u0SIyEcipSpoGWlH7pf6t
orlx1ZEnGwqKWtnmPoCB1vfERMEYLKggwuwvFqhc4x3cGq0hEH2Z+/xg8cUK5wsj
S+HO1hOmHloAwVmR1mx3Kl4tynwe5I5gJbScUKbEV3x5CiKwSAquxRZtqYVX9YR+
hT58YnSv9gBL+Ast+qieosxn3o02Pcm0xQBfWs+CUTWj84qKRX3kHgjxoKoAUNms
zsxkd/tTr74vwusN1s1KgFLOAOQPP5oVCYYuwAXpohSeYgLdMyRAn1fQUeK/AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU7sO5j/o4kZv/ic0Gnqw39Ao+gSowHwYDVR0j
BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1
QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw
Mjg1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I2M2Y3NzEtYTk1Zi00YjUzLTg3
YmMtOGJmZjUwNGRhMWY0LzAvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0
REZDMTIwMjg1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKYbyeau8RCWMOljxTlr3XQTI1Y8G2M5viGf
qlUDStDmsOZChL2glIOWTROASFjdBlqIuHeB/WmRqAQwNBWyKo/wxoG4lpQycJWK
GsFSxLBXJRzOIhWeSR11vhyH4A9Zj5iincWzdA7pyC4fVYxMEmE0ZHyvL49Ae7R+
ASZnumIWNPmX8OyEdhP0hDGZS/XFmQxqKdA6qPiWzPM1fy3NjSWlVtPFiOlzND9f
Wixvcf9fMAIlCsmtssZNIbtUqMZYIONk2Mv5lLZW38cHloBwnkWe451ubrZKUJar
uGjI8VPlszzZNkm2dhyjJlbtea/BRnv7zORUx++OSM0XeM44u0w=
-----END CERTIFICATE-----
Generated at Fri Sep 27 12:47:17 2024 by rpki-client on console-fra.rpki-client.org