Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
File:                     BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json)
Hash identifier:          MOILRCDDwhoPZGnxufiFJP+yDMqGhRMtvVl/L+Nuz9A=
Subject key identifier:   EF:83:CC:F7:77:AF:4D:23:CA:BD:77:7C:EE:E4:5B:7B:23:28:25:4D
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       7C50DF0F5AA2B42DD729B4C3902B058B9B628EE9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
Manifest number:          043A
Signing time:             Tue 21 May 2024 08:32:11 +0000
Manifest this update:     Tue 21 May 2024 08:27:11 +0000
Manifest next update:     Fri 24 May 2024 11:27:11 +0000
Files and hashes:         1: 3131312e36372e38382e302f32332d3234203d3e203234353337.roa (hash: Xp8dn23F5LNZGfBH+DTiopZbUxwAQ2vm+9QTK6RAPsE=)
                          2: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: rPTtIDP8QV+FMkRqo/ageoGb4RNjbTQlqfmEIg+k3ps=)
                          3: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: jkOiC4NNTSmzLLBFxEQeS+Z4pvz5rqz2ZQTSnwXWI3A=)
                          4: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: v2c4vTwHeUS032kmsirkvc1Qxh9biT/nTGJ/lNqYLVA=)
                          5: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: HQw25xQ7xd2SPZ1LUyUvr5FiXrZAFv7oocrHaXWWG7E=)
                          6: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: YpDRw1trPe3bCzaw7uw5SlTpjuIuAx2RCuNmS4seDio=)
                          7: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: d/nqfh9KjSCBoSKL5tVi5kebF9CC7pSboNZy1YMrcnw=)
                          8: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: xJAJFT5sBGdAPYOIVpMxfAlUbXVUYeTheje3gaRysFo=)
                          9: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: Twp5y9LhX8RaanjZf3+r7pqHw1RlRnHTGTxXAB6sYoQ=)
                          10: 3131312e36372e38362e302f32332d3234203d3e203234353337.roa (hash: alOakpTD74uh4zYc7Zmni/z2aW5L7YU3GXP2Bm7Tjjw=)
                          11: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: ZPD2ujZxDSGT5XUaUHJZBFrkcldqTslmq7f1WCNTEqA=)
                          12: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: 8OTk2fEdLcSoD9zh1rudeXM7WMcvxjF/J2dkVN6+H1Y=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 11:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:50:df:0f:5a:a2:b4:2d:d7:29:b4:c3:90:2b:05:8b:9b:62:8e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: May 21 08:27:11 2024 GMT
            Not After : May 24 11:27:11 2024 GMT
        Subject: CN=EF83CCF777AF4D23CABD777CEEE45B7B2328254D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:1f:b1:c6:e6:a0:54:04:8c:61:53:40:ac:
                    d9:95:24:6a:ab:fa:a9:01:e7:01:d8:36:f5:ce:d2:
                    51:a0:fc:86:33:b5:c5:7f:60:5f:1a:e9:da:8c:91:
                    28:f0:62:bb:ff:4e:1a:63:ca:78:00:b1:69:a5:0d:
                    76:1d:21:95:21:39:c9:e9:b4:20:c9:e2:5e:e2:79:
                    2f:5d:69:50:c5:6a:24:be:ed:a4:c8:e9:08:8f:a3:
                    d9:98:86:de:9e:73:cd:ab:be:b1:cb:6a:58:25:0f:
                    d3:ee:2c:a8:d7:4f:89:cc:dc:94:d9:88:08:21:d4:
                    30:98:9e:6b:32:64:e2:d9:9d:32:5f:b8:b3:a8:7a:
                    dd:cf:ab:bf:fd:85:77:2f:5b:a6:b2:55:c0:ea:30:
                    c7:8a:fd:24:bd:1f:c3:8d:77:8e:cd:2e:8b:90:e1:
                    6e:75:a1:30:ea:fc:0b:ce:57:1d:77:6b:b8:4b:97:
                    6a:69:b0:43:4a:af:b4:48:bc:af:38:36:64:e6:a7:
                    9a:a2:1b:9b:70:ec:6a:96:2f:55:7c:d2:19:f5:9d:
                    b7:a4:75:27:d0:7b:ee:cd:54:88:40:7d:8a:f0:91:
                    54:51:8f:3d:54:2c:e5:3a:ad:54:6f:f6:b4:87:51:
                    3d:00:42:d5:38:4d:98:53:20:d9:c2:c0:44:0f:60:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:83:CC:F7:77:AF:4D:23:CA:BD:77:7C:EE:E4:5B:7B:23:28:25:4D
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ee:86:83:54:40:f3:7c:b3:63:63:3a:07:77:2f:31:26:53:
         a4:10:62:14:b1:ee:04:07:26:de:49:a6:05:cc:6e:02:e8:18:
         bf:fb:b2:40:8f:9e:1d:43:25:0f:63:0e:fd:63:bf:81:8d:2c:
         2a:b1:2d:38:1e:b7:56:78:eb:11:ab:85:d3:8b:ed:d2:f1:4c:
         cc:c6:7a:9b:a1:1a:2a:73:01:04:6d:24:a0:e9:6e:30:5d:9b:
         80:d6:73:bb:0e:e4:85:a4:e5:4a:78:a8:02:92:ba:3a:bc:f5:
         11:63:b3:a0:57:f4:88:c9:54:1a:ac:30:c9:fc:78:91:ca:e6:
         bd:88:7c:03:eb:79:e4:47:21:5e:f1:80:49:d6:92:d9:84:54:
         f8:8d:06:a6:6e:90:9a:ab:8a:91:23:7b:68:d0:2f:3d:40:03:
         d7:9b:9b:4b:0c:10:5c:52:65:b0:72:18:a4:d3:b8:a8:39:6a:
         9a:99:00:16:af:49:65:49:45:08:f6:f0:82:54:25:94:0a:39:
         92:27:e1:8e:8a:8d:04:c7:83:4c:0d:7f:ec:43:23:de:2c:4c:
         5c:90:15:84:32:4d:66:c0:02:d0:ec:ec:0b:30:c3:d8:bc:fc:
         34:4b:6c:c4:b6:97:1b:1d:70:a7:fd:b1:1a:ae:f7:77:8b:16:
         ea:47:0e:a0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfFDfD1qitC3XKbTDkCsFi5tijukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJB
RkU4QUEyQjAeFw0yNDA1MjEwODI3MTFaFw0yNDA1MjQxMTI3MTFaMDMxMTAvBgNV
BAMTKEVGODNDQ0Y3NzdBRjREMjNDQUJENzc3Q0VFRTQ1QjdCMjMyODI1NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGah+xxuagVASMYVNArNmVJGqr
+qkB5wHYNvXO0lGg/IYztcV/YF8a6dqMkSjwYrv/ThpjyngAsWmlDXYdIZUhOcnp
tCDJ4l7ieS9daVDFaiS+7aTI6QiPo9mYht6ec82rvrHLalglD9PuLKjXT4nM3JTZ
iAgh1DCYnmsyZOLZnTJfuLOoet3Pq7/9hXcvW6ayVcDqMMeK/SS9H8ONd47NLouQ
4W51oTDq/AvOVx13a7hLl2ppsENKr7RIvK84NmTmp5qiG5tw7GqWL1V80hn1nbek
dSfQe+7NVIhAfYrwkVRRjz1ULOU6rVRv9rSHUT0AQtU4TZhTINnCwEQPYFEXAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU74PM93evTSPKvXd87uRbeyMoJU0wHwYDVR0j
BBgwFoAUvwduokpozxUsMjx6Pf0/kq/oqiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTBkYTQ0Ny1hMTM4LTQ2MjUtYTQyMC1hNzExYWMyNDM1MTkvMC9CRjA3NkVBMjRB
NjhDRjE1MkMzMjNDN0EzREZEM0Y5MkFGRThBQTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJBRkU4
QUEyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwZGE0NDctYTEzOC00NjI1LWE0
MjAtYTcxMWFjMjQzNTE5LzAvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNG
OTJBRkU4QUEyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJ7uhoNUQPN8s2NjOgd3LzEmU6QQYhSx7gQH
Jt5JpgXMbgLoGL/7skCPnh1DJQ9jDv1jv4GNLCqxLTget1Z46xGrhdOL7dLxTMzG
epuhGipzAQRtJKDpbjBdm4DWc7sO5IWk5Up4qAKSujq89RFjs6BX9IjJVBqsMMn8
eJHK5r2IfAPreeRHIV7xgEnWktmEVPiNBqZukJqripEje2jQLz1AA9ebm0sMEFxS
ZbByGKTTuKg5apqZABavSWVJRQj28IJUJZQKOZIn4Y6KjQTHg0wNf+xDI94sTFyQ
FYQyTWbAAtDs7Asww9i8/DRLbMS2lxsdcKf9sRqu93eLFupHDqA=
-----END CERTIFICATE-----
Generated at Tue May 21 10:11:01 2024 by rpki-client on console-ams.rpki-client.org