Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
File:                     1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json)
Hash identifier:          nlXrmYi5tadEPh+Q3u8abe11ppwV/1y1dQ+958amYX8=
Subject key identifier:   8F:E3:ED:5C:71:33:34:21:7D:EB:4A:F3:44:5E:94:9B:D4:8E:05:BA
Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3
Certificate issuer:       /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
Certificate serial:       736F34737D1919AE12F8ECEDBA709A52FCB9A33F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
Manifest number:          AE
Signing time:             Wed 29 May 2024 07:21:20 +0000
Manifest this update:     Wed 29 May 2024 07:16:20 +0000
Manifest next update:     Sat 01 Jun 2024 08:27:20 +0000
Files and hashes:         1: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: A86c2krP+Gsh4IRnQuBULZYSkoKzW1AI1uD4weG3HmY=)
                          2: 3130332e3130372e3137362e302f32332d3234203d3e20313530393434.roa (hash: /vVJsz9H1rrdPu3+MBJisVglzroKo7J977BqjWWW1JA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl
                          rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 04:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6f:34:73:7d:19:19:ae:12:f8:ec:ed:ba:70:9a:52:fc:b9:a3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3
        Validity
            Not Before: May 29 07:16:20 2024 GMT
            Not After : Jun  1 08:27:20 2024 GMT
        Subject: CN=8FE3ED5C713334217DEB4AF3445E949BD48E05BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:17:ca:b6:44:75:74:40:88:94:72:14:c3:f0:
                    21:20:4b:b9:4d:2b:96:35:39:f2:2d:b5:3e:41:46:
                    ec:8a:bc:6f:e6:4d:7a:62:83:27:8d:3b:57:03:08:
                    6f:20:0c:80:39:08:38:9e:96:f1:0b:8f:cf:0f:d8:
                    10:3c:1a:d7:9c:36:76:3a:94:5d:5f:66:44:93:17:
                    77:c0:29:91:a3:4d:3a:9c:de:08:83:3d:6d:6c:3a:
                    fb:e7:b9:5b:b7:8c:7c:e2:0f:c6:cb:16:c8:60:d9:
                    bd:3c:e8:9a:80:05:74:7b:a8:29:67:c7:96:dc:1d:
                    7c:d8:e1:9f:e7:f5:a9:ac:f7:e8:af:43:51:85:17:
                    f5:7d:b3:89:eb:e2:7c:2e:f7:56:14:dc:d8:37:34:
                    78:fb:74:26:b3:89:15:3d:b1:b3:a8:2d:09:37:83:
                    ca:02:c5:a7:94:dc:0e:13:c1:23:94:7e:71:fe:de:
                    2e:82:20:22:b6:41:d0:d6:d5:47:ca:cb:eb:81:0e:
                    02:ae:2a:48:af:9f:f0:fa:5d:36:a9:3c:1d:40:88:
                    2c:ce:da:ec:be:fe:31:13:a5:f2:98:fd:cc:b9:73:
                    64:05:9c:95:b3:05:fe:48:92:67:65:30:b3:4a:0c:
                    8f:4e:4c:7a:59:48:4c:43:88:92:dc:06:cf:25:55:
                    2a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E3:ED:5C:71:33:34:21:7D:EB:4A:F3:44:5E:94:9B:D4:8E:05:BA
            X509v3 Authority Key Identifier:
                keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c9:fc:6c:54:e2:ff:eb:17:11:26:5b:f8:20:b2:17:a0:81:
         9e:4d:83:dc:9d:67:03:33:a5:a3:61:39:0a:9d:e8:bd:d2:6d:
         fd:8a:c6:8b:19:95:1f:f9:a3:96:3e:f5:7a:97:30:a3:15:fd:
         e8:07:8d:4e:9d:6e:69:49:f1:2b:8b:5e:8e:fb:f2:45:04:89:
         ca:26:0e:bb:b8:29:6a:c2:ce:72:b6:ad:26:f8:d4:bc:27:e4:
         0a:3d:f6:bd:f6:e9:45:5f:8f:d7:a2:bc:8e:c7:ef:57:2d:ee:
         2f:01:7b:ec:4d:28:01:a9:cb:09:9f:ce:37:fd:5e:3b:18:9d:
         3f:9c:12:de:ef:dd:03:65:f5:5c:02:ed:ed:93:54:c5:95:35:
         86:32:bf:54:ff:74:01:30:f1:58:c7:ac:b8:78:cb:63:2e:34:
         ce:50:0f:d3:22:8b:52:18:c5:fd:7e:be:8c:45:05:62:9b:ba:
         dd:a8:00:cf:24:bf:73:56:e5:4f:c3:1c:a1:9b:5f:0e:c5:84:
         89:f3:24:92:0c:38:2f:8e:fb:02:cf:0e:66:0b:9a:c5:82:60:
         d2:a8:a8:11:e1:eb:f3:83:ec:37:bc:5e:bf:8c:57:46:67:68:
         86:96:50:be:46:74:55:e2:5e:35:42:d8:3c:b5:70:8d:68:fb:
         2e:32:f3:e8
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc280c30ZGa4S+OztunCaUvy5oz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVB
RTA5RTdGMzAeFw0yNDA1MjkwNzE2MjBaFw0yNDA2MDEwODI3MjBaMDMxMTAvBgNV
BAMTKDhGRTNFRDVDNzEzMzM0MjE3REVCNEFGMzQ0NUU5NDlCRDQ4RTA1QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqF8q2RHV0QIiUchTD8CEgS7lN
K5Y1OfIttT5BRuyKvG/mTXpigyeNO1cDCG8gDIA5CDielvELj88P2BA8GtecNnY6
lF1fZkSTF3fAKZGjTTqc3giDPW1sOvvnuVu3jHziD8bLFshg2b086JqABXR7qCln
x5bcHXzY4Z/n9ams9+ivQ1GFF/V9s4nr4nwu91YU3Ng3NHj7dCaziRU9sbOoLQk3
g8oCxaeU3A4TwSOUfnH+3i6CICK2QdDW1UfKy+uBDgKuKkivn/D6XTapPB1AiCzO
2uy+/jETpfKY/cy5c2QFnJWzBf5IkmdlMLNKDI9OTHpZSExDiJLcBs8lVSqRAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUj+PtXHEzNCF960rzRF6Um9SOBbowHwYDVR0j
BBgwFoAUHUp1YvCW8/dT44jBRZS6da4J5/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MzZhYjA0ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMC8xRDRBNzU2MkYw
OTZGM0Y3NTNFMzg4QzE0NTk0QkE3NUFFMDlFN0YzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVBRTA5
RTdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx
MDktNDZiMjhjZjgwM2YzLzAvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJB
NzVBRTA5RTdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACjJ/GxU4v/rFxEmW/ggsheggZ5Ng9ydZwMz
paNhOQqd6L3Sbf2KxosZlR/5o5Y+9XqXMKMV/egHjU6dbmlJ8SuLXo778kUEicom
Dru4KWrCznK2rSb41Lwn5Ao99r326UVfj9eivI7H71ct7i8Be+xNKAGpywmfzjf9
XjsYnT+cEt7v3QNl9VwC7e2TVMWVNYYyv1T/dAEw8VjHrLh4y2MuNM5QD9Mii1IY
xf1+voxFBWKbut2oAM8kv3NW5U/DHKGbXw7FhInzJJIMOC+O+wLPDmYLmsWCYNKo
qBHh6/OD7De8Xr+MV0ZnaIaWUL5GdFXiXjVC2Dy1cI1o+y4y8+g=
-----END CERTIFICATE-----
Generated at Wed May 29 09:15:14 2024 by rpki-client on console-fra.rpki-client.org