Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
File:                     F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft (raw, json)
Hash identifier:          Xx6wKq2g59fcSST5jXfIieM2+H94R2G9witemDh+AME=
Subject key identifier:   32:22:7D:D6:76:4B:71:EC:CF:C5:2B:FF:08:FB:AB:37:86:B8:C3:18
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       2356847FA08CB026B635CBF8E50A8CB0A8955C67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
Manifest number:          04A4
Signing time:             Thu 21 Nov 2024 09:10:45 +0000
Manifest this update:     Thu 21 Nov 2024 09:05:45 +0000
Manifest next update:     Sun 24 Nov 2024 15:05:45 +0000
Files and hashes:         1: 3131362e31322e34312e302f32342d3234203d3e203338313635.roa (hash: U0l/IMhjIjT+ZxUQOAl4BF77C8y2wjGVAU4FqJTVtQU=)
                          2: 3131342e33302e39302e302f32342d3234203d3e203338313635.roa (hash: tCYjlVFLpo8h/4X0LklqUt0190oAqWzEX76/Up8IDhY=)
                          3: 3131362e31322e34302e302f32312d3234203d3e203338313635.roa (hash: ulv02+S1dQ/3KdbRG8mzVZ3rYNCE8pKI4u9xupDD7/c=)
                          4: 3131342e33302e39332e302f32342d3234203d3e203338313635.roa (hash: C/i5sg1GsZw3O2Mcf7ZQcYjIkCXCgAj66xYAVapSWTw=)
                          5: 3131362e31322e34302e302f32342d3234203d3e203338313635.roa (hash: ytnGQkqLtKb8TWQnM7aZkTs/17Z5m59ZUOBuzJeGiXM=)
                          6: 3131342e33302e39342e302f32342d3234203d3e203338313635.roa (hash: BQ2fa3tRJqarlHgYruw+A6R9wXvh6pTHkcR6lilGkLA=)
                          7: 3131342e33302e38382e302f32312d3234203d3e203338313635.roa (hash: 3/f7ey+UftJQPi6HYW3Y7LLo0ZgD2QYLC38hRznhlA0=)
                          8: 3131362e31322e34352e302f32342d3234203d3e203338313635.roa (hash: 0BSDUcqVvJeNDkAg3yPAipM/U1rsAcuraYSP8ipf3jI=)
                          9: 3130332e38332e3134332e302f32342d3234203d3e203338313635.roa (hash: Sn/BNjsNR0iaX/YizGlnu3EIR1dsFXhCfRmv7e3RoL0=)
                          10: 3131362e31322e34322e302f32342d3234203d3e203338313635.roa (hash: rArgMkrHT55Nu6lyUqcwFJv6uFBmDT5efs29CwHf5Z4=)
                          11: 3130332e3234372e31362e302f32332d3234203d3e203338313635.roa (hash: HztgWJZafSKDPuefoDY3VfgXDzeyuTs9KqC3OvMdTtk=)
                          12: 3130332e3234372e31372e302f32342d3234203d3e203338313635.roa (hash: 6LRt0fcyRQdkMwpKOAZ7R5EV3hsXiWk7pl3Kk3abi5k=)
                          13: 3130332e38332e3134312e302f32342d3234203d3e203338313635.roa (hash: CMMIKKC6z8wbRJiIvXWRJkj//192CqgwYr5Du0PKfp0=)
                          14: 3131362e31322e34342e302f32342d3234203d3e203338313635.roa (hash: JueqoHfG7FLeVZUaDdXEcApZaz1zJ6cQCSoiVqscyM8=)
                          15: F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl (hash: DG2AUNZJBx6pIfdcILNMZUgJeSjqak2FmuaJ1AcRrPw=)
                          16: 3130332e38332e3134302e302f32322d3234203d3e203338313635.roa (hash: 5N+0U/W/cBAYy5+uE2Ujv99hXhuUMp//FIIUodsEmZA=)
                          17: 3131362e31322e34332e302f32342d3234203d3e203338313635.roa (hash: 7mBwjFPQZFgzyHfGpkK7KtwqMFVFV2Jic6WmbXZnUN0=)
                          18: 3131342e33302e38382e302f32342d3234203d3e203338313635.roa (hash: /DeSNlQEAUW1kobIRtwfjhrxVyeJgkvxM+gUPJFBktM=)
                          19: 3131362e31322e34372e302f32342d3234203d3e203338313635.roa (hash: 4cf+lofzukPlTvzkS/QjO4Z20P2u6P9iZ4kFFwhofJw=)
                          20: 3131342e33302e38392e302f32342d3234203d3e203338313635.roa (hash: MNtgfDP5xaOb73s7EZFOOHUXWJKnJvyj8fntHX2nq2g=)
                          21: 323430313a646363303a3a2f33322d3438203d3e203338313635.roa (hash: AsaRMX6QwdcLrNSwu4P7+IgUU+MNlXWLMATBfBSzkX0=)
                          22: 3131342e33302e39312e302f32342d3234203d3e203338313635.roa (hash: KwjZWC2Ds8hh1CLsjAHfpUPRijRC00CD591UsD+qJ0g=)
                          23: 3130332e3234372e31362e302f32342d3234203d3e203338313635.roa (hash: eQNIDRpBhyzoLVmUigotZSDbmAV9urZfwsuMtS5aY+Y=)
                          24: 3131362e31322e34362e302f32342d3234203d3e203338313635.roa (hash: dRANHklisQuiw4H2KFxji5OPsx5x7vwHGi1zB5/gIFw=)
                          25: 3131342e33302e39322e302f32342d3234203d3e203338313635.roa (hash: eCGpx6SJbAJf6LZWIu7PDWcCJ9OTjEawtLoBpf6igrI=)
                          26: 3130332e38332e3134302e302f32342d3234203d3e203338313635.roa (hash: K5PoO98WyXPkrFHrViBHFRzD/4YYa57mj2FQBvAEUMw=)
                          27: 3130332e38332e3134322e302f32342d3234203d3e203338313635.roa (hash: CP9OdsoALZVM063EdszOsR6p78aLQi1qvJ5/I1hbrqk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:56:84:7f:a0:8c:b0:26:b6:35:cb:f8:e5:0a:8c:b0:a8:95:5c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Nov 21 09:05:45 2024 GMT
            Not After : Nov 24 15:05:45 2024 GMT
        Subject: CN=32227DD6764B71ECCFC52BFF08FBAB3786B8C318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:85:d5:ba:c5:a3:ce:ad:72:a8:a9:c6:85:
                    88:c3:d9:3f:37:ef:a8:19:ab:b5:8d:13:6b:ca:a9:
                    ab:36:13:1c:59:c7:cd:02:7d:c0:9a:98:5e:4d:15:
                    80:b7:25:68:2a:6a:92:46:54:6f:61:bb:db:0d:47:
                    43:ea:af:4a:38:eb:e5:b5:84:df:48:7a:d7:65:7a:
                    cd:8a:c4:21:1e:34:51:36:6e:ff:f4:de:28:71:15:
                    c5:9d:ee:23:7f:37:d8:52:6b:63:48:02:28:9c:bb:
                    42:b1:7c:6b:2f:f2:11:ce:51:89:b4:ad:69:25:0c:
                    6c:c5:b2:ce:36:6c:91:f4:68:21:2c:52:f5:a6:9e:
                    c0:10:fd:b9:fb:98:ae:ef:e2:3b:29:d0:f9:5b:98:
                    fb:6a:b6:1a:24:27:20:73:44:4f:a9:5e:e4:da:f0:
                    4c:fb:6b:8c:ad:29:b5:1c:ed:93:33:23:bd:65:f6:
                    f2:6a:a0:be:f4:c9:fa:f4:bf:59:bb:30:3c:3f:95:
                    59:71:af:b2:72:e9:82:98:4c:05:e5:64:bf:3d:89:
                    a9:c9:4b:ea:6b:2f:85:c1:02:c6:50:4d:d7:b5:6d:
                    37:3b:0d:60:26:2c:23:da:38:a5:07:12:6f:0f:03:
                    df:d8:21:45:26:a2:79:b4:6e:5c:90:89:09:d5:9c:
                    d8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:22:7D:D6:76:4B:71:EC:CF:C5:2B:FF:08:FB:AB:37:86:B8:C3:18
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b6:d6:32:bf:8b:aa:e1:fb:b0:30:56:eb:af:a4:41:4f:3f:
         0f:da:e5:d6:e8:fd:ce:2d:38:15:26:36:87:cc:4a:67:83:82:
         e9:be:49:4a:ed:ec:71:27:5c:d4:43:c1:5d:9c:c9:56:0e:84:
         3c:80:64:14:f7:0c:7a:ba:24:35:e1:ff:46:14:12:9d:ba:bd:
         3c:b3:5f:9c:79:ba:25:7e:c8:7f:96:8d:70:44:23:c6:1b:ed:
         39:ac:24:8f:de:9f:b9:d9:20:f7:de:ca:e7:06:4f:5d:bf:48:
         b4:7b:e5:8a:c9:48:f4:28:d4:91:f9:da:c8:4a:19:e8:9a:2c:
         e9:b3:45:f9:0f:e1:76:a3:e3:cd:6d:e6:b5:12:3c:d2:12:ee:
         4b:fd:42:0b:57:5a:2a:f2:35:85:9e:d1:50:79:67:14:cb:e8:
         89:d1:51:83:56:83:7c:8d:7c:b0:5a:01:d4:a4:78:da:aa:ae:
         7a:a0:6f:c5:d2:71:ac:31:fa:96:c1:09:62:0f:7a:09:1e:bb:
         48:80:9f:99:1c:29:ec:6a:0a:6f:fb:3f:06:d7:45:9b:d3:7f:
         a9:c9:b5:5d:92:c3:e2:d3:1a:dc:38:37:1b:ce:6a:66:08:9a:
         dd:08:5b:56:d9:71:2c:d0:28:cd:75:70:ff:b1:d8:68:fb:1d:
         c3:c1:01:ff
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUI1aEf6CMsCa2Ncv45QqMsKiVXGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5
NzlEMTA1MzAeFw0yNDExMjEwOTA1NDVaFw0yNDExMjQxNTA1NDVaMDMxMTAvBgNV
BAMTKDMyMjI3REQ2NzY0QjcxRUNDRkM1MkJGRjA4RkJBQjM3ODZCOEMzMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrgIXVusWjzq1yqKnGhYjD2T83
76gZq7WNE2vKqas2ExxZx80CfcCamF5NFYC3JWgqapJGVG9hu9sNR0Pqr0o46+W1
hN9Ietdles2KxCEeNFE2bv/03ihxFcWd7iN/N9hSa2NIAiicu0KxfGsv8hHOUYm0
rWklDGzFss42bJH0aCEsUvWmnsAQ/bn7mK7v4jsp0PlbmPtqthokJyBzRE+pXuTa
8Ez7a4ytKbUc7ZMzI71l9vJqoL70yfr0v1m7MDw/lVlxr7Jy6YKYTAXlZL89ianJ
S+prL4XBAsZQTde1bTc7DWAmLCPaOKUHEm8PA9/YIUUmonm0blyQiQnVnNj1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUMiJ91nZLcezPxSv/CPurN4a4wxgwHwYDVR0j
BBgwFoAU8sIkFL8I/Aiwrr9E+vhahZedEFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NzQ0OGMxMS1mOGQzLTQ1N2QtOGUyMi04NDg4N2FiMjJhMzAvMC9GMkMyMjQxNEJG
MDhGQzA4QjBBRUJGNDRGQUY4NUE4NTk3OUQxMDUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5NzlE
MTA1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0NDhjMTEtZjhkMy00NTdkLThl
MjItODQ4ODdhYjIyYTMwLzAvRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVB
ODU5NzlEMTA1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABm21jK/i6rh+7AwVuuvpEFPPw/a5dbo/c4t
OBUmNofMSmeDgum+SUrt7HEnXNRDwV2cyVYOhDyAZBT3DHq6JDXh/0YUEp26vTyz
X5x5uiV+yH+WjXBEI8Yb7TmsJI/en7nZIPfeyucGT12/SLR75YrJSPQo1JH52shK
GeiaLOmzRfkP4Xaj481t5rUSPNIS7kv9QgtXWiryNYWe0VB5ZxTL6InRUYNWg3yN
fLBaAdSkeNqqrnqgb8XScawx+pbBCWIPegkeu0iAn5kcKexqCm/7PwbXRZvTf6nJ
tV2Sw+LTGtw4NxvOamYImt0IW1bZcSzQKM11cP+x2Gj7HcPBAf8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:52 2024 by rpki-client on console-ams.rpki-client.org