Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
File:                     882209E37356E0512FBE4E81B00E4F2481865087.mft (raw, json)
Hash identifier:          +i/+nqcj6DlMvsJAJzmaYPftqXcLPyKD8H4d3MxLMBU=
Subject key identifier:   4E:DB:88:BF:6F:78:80:40:14:D1:7B:A0:0A:CC:39:43:FF:9D:E4:3B
Authority key identifier: 88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87
Certificate issuer:       /CN=882209E37356E0512FBE4E81B00E4F2481865087
Certificate serial:       31F8090D0E1F4304FCE4AC927160C144CA4138
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
Manifest number:          0430
Signing time:             Mon 20 May 2024 15:01:51 +0000
Manifest this update:     Mon 20 May 2024 14:56:51 +0000
Manifest next update:     Thu 23 May 2024 18:52:51 +0000
Files and hashes:         1: 3130332e31342e32302e302f32332d3233203d3e20313331373137.roa (hash: bzPvrnaNQUoSB+SWzjdqJSSTom3pB4NvVXcYiHqcZ6U=)
                          2: 3130332e32352e3136372e302f32342d3234203d3e20313331373137.roa (hash: orvRbX8Qi4mxg4qv5apZeu0gYlAJlOPDZdjoJPeDjgc=)
                          3: 3130332e31342e32302e302f32342d3234203d3e20313331373137.roa (hash: 5XZK7F7w2VPEpq8hok3C+UE2feMf4mMOUw0NiACNu1Y=)
                          4: 34352e3131382e3131322e302f32322d3232203d3e20313331373137.roa (hash: BZPcNISQ1cIDmQmFdtu6Zj2xrAQnYVfbuYA9ztkFEHo=)
                          5: 323430313a313063303a633030303a3a2f33342d3334203d3e20313331373137.roa (hash: V2Dp0ijNWpuMgZ76JHxOBz9Hg+9DAI6s8ylR7gkPLBA=)
                          6: 34352e3131382e3131322e302f32332d3233203d3e20313331373137.roa (hash: yF6+Qe1B+0yDjiIgrS3RPefHFPW68AuvmjEgCvapmsU=)
                          7: 3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (hash: IxWtbRQPcrgEHgd9BHASblnkhBsP5AGgEOrGSGidO8g=)
                          8: 323430313a313063303a343030303a3a2f33342d3334203d3e20313331373137.roa (hash: tb5ix4/rpAM8quJsHYAvVqVGf/Xo8zPu+CW62lIhG/U=)
                          9: 34352e3131382e3131352e302f32342d3234203d3e20313331373137.roa (hash: 5Pmn1hgkj7WQ7Rpqmckg9Pwxy2hYI4IsGUl7gaJKCIo=)
                          10: 3130332e32352e3136362e302f32342d3234203d3e20313331373137.roa (hash: fAIovrjTlexnPzz9bt2VOgLm39n1pWPGDarcks+BA0Q=)
                          11: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (hash: qi53Xem5gZt6tKglavQ53Hnqn14XmOR/1XbwBWFkcpI=)
                          12: 323430313a313063303a383030303a3a2f33342d3334203d3e20313331373137.roa (hash: MfIGgmjQK7dA3sMImjATuOaEyST7GjqMj2Q4Ue7g/4Q=)
                          13: 323430313a313063303a3a2f33322d3332203d3e20313331373137.roa (hash: n+sWaLQ7QvZWP5713NKoQOGIQEnxS+/D0IsByO3BXCI=)
                          14: 3130332e31342e32312e302f32342d3234203d3e20313331373137.roa (hash: sUf02YGkqf7JhiKPytFZr5fmBjAUFuZ/CyYHJQAW9ss=)
                          15: 34352e3131382e3131322e302f32342d3234203d3e20313331373137.roa (hash: ip4lj2bQAOrC8dlgJ2PkNkBe3WMptDo4zU/zPL0p4xg=)
                          16: 34352e3131382e3131332e302f32342d3234203d3e20313331373137.roa (hash: zJjyZvPa9QD0M6xDBPYeoJfPIu36bfdzPqNknIK5jDg=)
                          17: 323430313a313063303a3a2f33342d3334203d3e20313331373137.roa (hash: Ag7mu77YJyaGwQ7viWNmthaYJeRdVnsA4M/L//Qqmco=)
                          18: 34352e3131382e3131342e302f32342d3234203d3e20313331373137.roa (hash: 2lzZTqv8w1r4F6pMpadx2JpD8WBpEdb9zvQ3d+EpMgQ=)
                          19: 882209E37356E0512FBE4E81B00E4F2481865087.crl (hash: enDqXCR6X97jmfFC5RL3U8Ze+/AL0iPBUBpNDLPcNuU=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl
                          rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 18:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f8:09:0d:0e:1f:43:04:fc:e4:ac:92:71:60:c1:44:ca:41:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=882209E37356E0512FBE4E81B00E4F2481865087
        Validity
            Not Before: May 20 14:56:51 2024 GMT
            Not After : May 23 18:52:51 2024 GMT
        Subject: CN=4EDB88BF6F78804014D17BA00ACC3943FF9DE43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:46:d0:64:21:26:24:67:6a:f8:87:96:bb:
                    84:22:19:06:fb:c2:ac:c6:b3:ed:cc:d8:c8:90:91:
                    73:7a:68:8c:48:f6:5d:4c:35:89:b4:9e:79:db:ff:
                    e7:6a:99:f5:1b:6b:ff:d7:60:c6:84:4c:67:4c:7f:
                    fa:ce:b0:22:44:5a:cd:ac:30:98:b4:1d:30:f7:39:
                    ec:4b:ee:ea:11:c9:13:66:ea:03:13:e1:f0:23:48:
                    d5:22:9b:c8:ed:35:72:9a:8d:3f:48:0d:76:a2:3f:
                    0c:c6:9e:f1:ce:2c:8b:41:18:52:37:f4:40:51:e1:
                    29:54:28:0b:df:07:f8:8c:da:f0:04:cf:65:82:c7:
                    c2:29:89:0c:f1:ff:7f:46:42:22:cc:9e:db:63:de:
                    f9:da:25:4b:66:97:0c:57:bb:0d:83:2f:c9:11:83:
                    50:c0:ce:66:ef:e4:ff:c1:1d:94:1b:b7:e4:67:94:
                    e8:5d:e4:f6:a7:ca:fa:68:6a:b5:a1:cc:5a:5b:a9:
                    6a:c4:6d:6c:f3:f0:82:42:fb:32:e0:89:a7:06:e6:
                    10:f9:4b:18:42:6b:70:be:e7:97:05:9d:21:07:2d:
                    b3:a1:e1:57:d5:e6:d5:9e:3c:c0:17:8a:d6:c4:ae:
                    f3:95:75:ec:f4:94:d0:f3:4c:df:bc:2e:28:c0:07:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DB:88:BF:6F:78:80:40:14:D1:7B:A0:0A:CC:39:43:FF:9D:E4:3B
            X509v3 Authority Key Identifier:
                keyid:88:22:09:E3:73:56:E0:51:2F:BE:4E:81:B0:0E:4F:24:81:86:50:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/882209E37356E0512FBE4E81B00E4F2481865087.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/882209E37356E0512FBE4E81B00E4F2481865087.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a8:94:d5:fc:e1:5c:5c:83:be:a2:29:dc:d9:50:3f:44:f4:
         0c:18:ba:e8:b3:ae:6f:97:1d:33:05:e3:8a:c9:7e:b5:b3:50:
         fc:91:97:62:4e:4b:a3:d7:1f:1b:c1:6b:b4:60:95:6a:b3:19:
         3a:f3:8c:b6:18:69:5d:24:04:d5:7b:bf:c8:97:f2:fd:d1:c0:
         64:4c:ac:f9:f3:72:b0:32:09:86:1d:29:73:6e:d3:b4:6c:71:
         70:aa:c4:96:38:e1:e2:d1:0f:17:91:c1:7a:29:5a:67:c6:f8:
         29:c8:c1:aa:74:7a:81:18:21:e3:15:72:0d:22:b7:f9:4b:c0:
         ce:fb:e0:3a:79:9a:26:09:40:06:40:a9:48:84:99:19:bf:4c:
         06:13:6d:74:be:5a:ab:9e:2c:58:6c:e9:5e:93:82:dc:db:7a:
         64:bc:85:9a:01:bb:04:30:c4:04:25:65:7f:41:ac:80:3a:af:
         53:24:51:8f:75:fc:db:df:49:4d:4c:a6:04:d9:b3:f8:10:6a:
         30:17:0a:fb:69:7a:a2:5b:2d:c8:92:1b:1d:cf:74:35:39:1f:
         06:38:a5:51:35:9e:4d:d1:ac:cd:df:45:5b:1c:6a:98:81:64:
         89:3e:a6:bb:92:62:62:9a:98:8c:11:cd:8d:ab:17:e7:00:5b:
         2e:08:9e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:20:24 2024 by rpki-client on console-fra.rpki-client.org