Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft
File:                     528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft (raw, json)
Hash identifier:          Q2BxO1jRkGSxUjRWRmHTCu9mBAGF5YGjkBWXd8sqJRg=
Subject key identifier:   AA:67:86:D7:35:8E:C3:3D:0F:80:16:88:65:B3:11:AF:0E:88:3A:2D
Authority key identifier: 52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB
Certificate issuer:       /CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB
Certificate serial:       03E8687BCA47499BE624EC75D150704FFD8A9941
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft
Manifest number:          03F9
Signing time:             Mon 20 May 2024 18:20:44 +0000
Manifest this update:     Mon 20 May 2024 18:15:44 +0000
Manifest next update:     Thu 23 May 2024 19:26:44 +0000
Files and hashes:         1: 323030313a6466363a616330303a3a2f34382d3438203d3e203538343034.roa (hash: HJorga0IKiHzCosho2900+K+4LuiqhB9t6Fw3ETjJjQ=)
                          2: 528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl (hash: U453hpXRWz0x/m3ZXPjsV7wXm4uiLMMhDTPCEsB9Ju8=)
                          3: 3130332e3139352e39302e302f32332d3234203d3e203538343034.roa (hash: LKQ8XjfBdPZzD6wV85IhJ+CRHZwJAWSK3nJw8LV1UIc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl
                          rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e8:68:7b:ca:47:49:9b:e6:24:ec:75:d1:50:70:4f:fd:8a:99:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB
        Validity
            Not Before: May 20 18:15:44 2024 GMT
            Not After : May 23 19:26:44 2024 GMT
        Subject: CN=AA6786D7358EC33D0F80168865B311AF0E883A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:38:a1:5c:7b:e5:11:ca:7d:54:d9:c9:58:
                    f0:bd:7f:bd:73:34:8f:2f:98:5e:bd:50:f4:54:a8:
                    b0:80:0a:ab:12:05:f6:16:9b:41:87:49:46:7a:cc:
                    16:96:78:78:aa:20:fc:d5:ae:cb:9a:01:4e:3f:7f:
                    3e:f7:b0:7c:45:3c:b2:38:0d:f7:d9:cf:cd:c1:31:
                    02:c3:f1:1e:da:00:61:4d:28:9e:a5:a7:b8:4a:bd:
                    cc:36:91:45:cd:cd:55:c0:7e:0a:1e:32:ac:4d:cb:
                    cb:7a:c8:27:4c:da:c5:e4:31:dd:18:b6:71:a7:ef:
                    c9:94:b6:30:d7:13:d3:ee:23:a2:af:6a:4b:5a:34:
                    9f:7e:78:c0:cc:59:ff:54:ae:1e:e5:55:dc:11:26:
                    65:c8:fe:b1:79:af:81:d6:5d:fa:11:92:33:1e:08:
                    94:65:14:73:c1:dc:16:90:b6:fe:3a:3e:61:7e:0e:
                    66:e4:47:15:4a:4f:25:03:09:76:2b:78:06:0d:ff:
                    b2:42:ea:16:68:e7:0f:4d:0f:48:d8:f4:a1:b0:32:
                    4b:f7:43:f1:47:ad:88:4a:2e:b7:f2:26:0a:c6:2e:
                    26:47:20:eb:dd:44:a5:28:1d:c8:93:a5:e3:6b:6e:
                    37:f4:af:cd:75:27:84:12:8c:75:80:61:aa:ea:f4:
                    c3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:67:86:D7:35:8E:C3:3D:0F:80:16:88:65:B3:11:AF:0E:88:3A:2D
            X509v3 Authority Key Identifier:
                keyid:52:8A:79:9E:94:BD:50:52:F6:F5:8A:CF:DD:9F:4D:ED:3A:0E:D5:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/528A799E94BD5052F6F58ACFDD9F4DED3A0ED5BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:24:f6:69:f9:12:07:61:80:eb:df:4a:2a:d5:ad:cd:cd:49:
         6d:96:35:8f:fd:3d:fa:2a:89:19:eb:48:ce:53:59:cf:09:0a:
         ae:f6:00:2f:00:5d:f7:59:da:c2:a1:c2:cc:e2:8d:74:5b:04:
         9c:70:2e:f7:4e:81:62:25:a3:32:35:7d:0a:be:45:7e:46:2c:
         53:a7:5f:df:3a:cc:ae:e4:81:f0:bc:d0:92:61:7b:a2:a6:cc:
         5b:d5:7c:1e:18:96:ed:1d:b4:26:8b:c6:16:64:81:0d:47:e5:
         e1:c5:b2:54:ef:64:3c:f2:0a:b9:d9:a5:5c:c9:da:e1:b8:12:
         c9:79:37:ce:ac:37:25:57:6e:f2:d6:18:13:f5:f4:bd:f7:5e:
         3f:7c:b8:c9:b0:7f:c1:94:39:49:b1:89:06:55:59:5a:40:88:
         4e:38:11:12:7f:13:c7:0a:b9:46:65:a3:6e:1a:2e:70:d0:a0:
         2d:2e:c9:37:14:25:45:7b:44:b5:b7:82:30:17:47:de:6a:50:
         3a:8f:0b:0e:fd:d8:d3:cf:13:b3:9f:83:ea:28:02:b8:29:67:
         2c:a9:be:c0:f7:9c:ae:b1:e9:05:be:32:4c:23:b1:42:19:82:
         9c:70:f3:b4:5d:1f:01:f8:28:b1:93:32:5f:89:51:74:6d:b2:
         4c:85:be:1c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUA+hoe8pHSZvmJOx10VBwT/2KmUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI4QTc5OUU5NEJENTA1MkY2RjU4QUNGREQ5RjRERUQz
QTBFRDVCQjAeFw0yNDA1MjAxODE1NDRaFw0yNDA1MjMxOTI2NDRaMDMxMTAvBgNV
BAMTKEFBNjc4NkQ3MzU4RUMzM0QwRjgwMTY4ODY1QjMxMUFGMEU4ODNBMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyzihXHvlEcp9VNnJWPC9f71z
NI8vmF69UPRUqLCACqsSBfYWm0GHSUZ6zBaWeHiqIPzVrsuaAU4/fz73sHxFPLI4
DffZz83BMQLD8R7aAGFNKJ6lp7hKvcw2kUXNzVXAfgoeMqxNy8t6yCdM2sXkMd0Y
tnGn78mUtjDXE9PuI6KvaktaNJ9+eMDMWf9Urh7lVdwRJmXI/rF5r4HWXfoRkjMe
CJRlFHPB3BaQtv46PmF+DmbkRxVKTyUDCXYreAYN/7JC6hZo5w9ND0jY9KGwMkv3
Q/FHrYhKLrfyJgrGLiZHIOvdRKUoHciTpeNrbjf0r811J4QSjHWAYarq9MPNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUqmeG1zWOwz0PgBaIZbMRrw6IOi0wHwYDVR0j
BBgwFoAUUop5npS9UFL29YrP3Z9N7ToO1bswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
OThmMTljMy1lNGUxLTQxYTEtYWFmMC1kNjEzYWNhNDkzMGMvMC81MjhBNzk5RTk0
QkQ1MDUyRjZGNThBQ0ZERDlGNERFRDNBMEVENUJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTI4QTc5OUU5NEJENTA1MkY2RjU4QUNGREQ5RjRERUQzQTBF
RDVCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk4ZjE5YzMtZTRlMS00MWExLWFh
ZjAtZDYxM2FjYTQ5MzBjLzAvNTI4QTc5OUU5NEJENTA1MkY2RjU4QUNGREQ5RjRE
RUQzQTBFRDVCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABIk9mn5EgdhgOvfSirVrc3NSW2WNY/9Pfoq
iRnrSM5TWc8JCq72AC8AXfdZ2sKhwszijXRbBJxwLvdOgWIlozI1fQq+RX5GLFOn
X986zK7kgfC80JJhe6KmzFvVfB4Ylu0dtCaLxhZkgQ1H5eHFslTvZDzyCrnZpVzJ
2uG4Esl5N86sNyVXbvLWGBP19L33Xj98uMmwf8GUOUmxiQZVWVpAiE44ERJ/E8cK
uUZlo24aLnDQoC0uyTcUJUV7RLW3gjAXR95qUDqPCw792NPPE7Ofg+ooArgpZyyp
vsD3nK6x6QW+MkwjsUIZgpxw87RdHwH4KLGTMl+JUXRtskyFvhw=
-----END CERTIFICATE-----
Generated at Mon May 20 19:18:25 2024 by rpki-client on console-fra.rpki-client.org