Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
File:                     B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft (raw, json)
Hash identifier:          eyZvnbigbEy8/NBPJY5ix+NUAyANmjxodFqepCQko3Q=
Subject key identifier:   D6:3A:A6:7F:D6:98:02:57:68:BF:1A:BD:C9:0C:F9:20:B4:C7:7B:6D
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       24D18403BA87B8618164500C2DE51B93F842F934
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
Manifest number:          0444
Signing time:             Wed 29 May 2024 15:01:47 +0000
Manifest this update:     Wed 29 May 2024 14:56:47 +0000
Manifest next update:     Sat 01 Jun 2024 15:06:47 +0000
Files and hashes:         1: 3230322e31302e36322e302f32342d3234203d3e20313337333633.roa (hash: BWBkvGKJVEUR6qigx4mSlNse0k2gPu0zhVhYn27u/5c=)
                          2: 3230322e31302e35312e302f32342d3234203d3e20313332363334.roa (hash: zi8rRm5oIKEKnE8kP9VKx6LXAH8MoDxhh7gkXXwnmE4=)
                          3: B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl (hash: bXkxgAXh4xB0cj5jdlwTDKdvT4hvT9kIczswViPowl0=)
                          4: 3230322e31302e33322e302f32332d3234203d3e2039343632.roa (hash: 1YEju6c+++Fkto/Cat2HdN/6yiXLMO3dGvZWghWr/eU=)
                          5: 3230322e31302e35322e302f32322d3234203d3e20313337333633.roa (hash: 76i6JqRPOwnHfz2nalB/Pr/llZmjsHVWEK8YM+4BlfI=)
                          6: 3230322e31302e35302e302f32342d3234203d3e20313332363334.roa (hash: V4x45qixtJTbxuX+QWYZaifYD0Nguh/nlMuK1R/uiCY=)
                          7: 3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa (hash: EkbFVN7Rpp0TJpBRv7AVNhmEi67Q82jd7BgbYFFP8Gk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
                          rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 15:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:d1:84:03:ba:87:b8:61:81:64:50:0c:2d:e5:1b:93:f8:42:f9:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: May 29 14:56:47 2024 GMT
            Not After : Jun  1 15:06:47 2024 GMT
        Subject: CN=D63AA67FD698025768BF1ABDC90CF920B4C77B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:4a:70:aa:7b:48:0b:a4:df:bb:7c:ff:d3:
                    4f:02:e4:77:62:9b:5b:06:87:4a:8b:fe:63:37:1e:
                    57:2f:f2:cf:dc:36:ad:50:11:3f:6d:ed:78:7c:4d:
                    97:9c:df:b8:ea:d9:11:64:2f:aa:01:bb:d8:58:5e:
                    ab:1d:35:39:ac:fc:61:a3:bf:4e:b2:f1:cf:22:b1:
                    b1:a6:f5:a7:24:8e:49:db:b1:8c:76:df:e0:16:30:
                    16:fb:6c:5c:fc:b3:bb:5b:a5:be:f5:25:7a:1a:3f:
                    0c:70:4f:40:62:e8:11:48:45:f4:5a:7c:ca:5b:d9:
                    18:2d:69:9b:a1:9c:8b:66:c0:f8:f8:3f:2b:45:0e:
                    5f:24:f6:6a:db:52:5e:0b:94:d1:59:07:12:4b:cf:
                    48:55:b3:97:ec:09:28:a7:29:22:5d:47:86:50:60:
                    d8:c3:75:02:39:94:99:16:bd:2e:c0:b4:d0:d8:07:
                    69:50:d6:23:85:cf:b5:6a:06:15:da:7a:65:a3:5d:
                    41:a3:6e:74:8d:35:b7:e6:58:98:39:0f:31:ad:4a:
                    9e:a7:43:3f:a6:e8:99:a1:8a:2e:41:32:95:0f:1f:
                    b4:f4:01:59:28:a0:4f:c8:30:a6:42:ad:89:10:c1:
                    68:f3:fc:48:89:4f:ca:64:ba:59:29:45:6e:16:9d:
                    7a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3A:A6:7F:D6:98:02:57:68:BF:1A:BD:C9:0C:F9:20:B4:C7:7B:6D
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f6:86:97:b3:53:d9:e1:8d:8b:17:e1:5d:02:49:73:ae:71:
         57:21:a5:ce:aa:74:2b:00:53:f7:be:1f:8d:48:a9:d2:06:1b:
         ac:f2:c6:6f:cf:dc:57:60:d1:bc:e8:08:ce:f3:81:20:a9:ea:
         e5:23:57:49:2f:80:b7:2c:6c:b3:6d:5e:e9:c6:57:28:4e:91:
         36:7f:9a:9a:4c:b1:4c:5b:b2:d2:22:1b:42:67:86:68:89:1a:
         76:68:01:28:de:86:58:ac:5c:c6:fd:f9:4c:e2:2a:9a:30:78:
         b4:39:65:0b:52:52:1f:9a:36:56:71:1e:91:c5:e1:32:b7:6b:
         97:5c:a7:ca:38:45:a3:96:8e:d7:b7:d7:38:d0:fc:07:89:55:
         05:9c:e8:c3:27:57:a3:11:69:86:f8:44:e7:d0:79:f8:6b:97:
         56:f3:ed:9e:60:af:65:06:fb:dc:76:9e:90:0c:a9:47:28:6e:
         2a:c5:77:84:e0:e7:6e:0d:60:81:b7:c6:55:80:2c:67:2b:20:
         ea:c0:ed:cc:77:ca:3f:9c:1a:dc:b6:02:ac:8c:4d:ad:5a:be:
         0a:e8:d6:5e:5c:9f:27:a4:bc:12:06:c8:91:de:31:60:9c:6c:
         7d:b2:25:f5:5d:e7:17:5d:d0:b4:53:79:31:88:b9:d3:3d:8f:
         37:aa:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 16:03:45 2024 by rpki-client on console-fra.rpki-client.org