Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft
File:                     CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json)
Hash identifier:          //M7gq5zK2KEyTiE2EjoIXAFKCYfwCFfm2ySGOoQZk0=
Subject key identifier:   62:E4:14:44:6C:67:47:B4:25:CE:9B:A4:47:F4:28:B4:F3:0A:A7:3F
Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3
Certificate issuer:       /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3
Certificate serial:       2918BBAFB7C00AB6E2E27A6A821B213D083F78EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft
Manifest number:          AD
Signing time:             Thu 24 Apr 2025 06:32:13 +0000
Manifest this update:     Thu 24 Apr 2025 06:27:13 +0000
Manifest next update:     Sun 27 Apr 2025 16:30:13 +0000
Files and hashes:         1: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=)
                          2: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=)
                          3: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=)
                          4: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: P6FN7A8XVGqrXkRqvIMVkpltqB7ihTNiQbhHaq9hpks=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl
                          rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:18:bb:af:b7:c0:0a:b6:e2:e2:7a:6a:82:1b:21:3d:08:3f:78:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3
        Validity
            Not Before: Apr 24 06:27:13 2025 GMT
            Not After : Apr 27 16:30:13 2025 GMT
        Subject: CN=62E414446C6747B425CE9BA447F428B4F30AA73F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:05:3c:dc:21:ea:78:dd:b8:fe:3c:fa:f5:
                    ba:8b:c3:96:04:5a:7c:36:59:ab:3b:75:d8:f0:75:
                    ec:d2:26:c1:a8:d7:00:38:24:1e:2d:68:fc:1e:6c:
                    b0:56:be:fd:4c:8d:63:7a:1c:a7:bf:b9:e7:e8:14:
                    78:fc:5a:00:3b:93:a5:d4:2f:24:90:19:e2:57:22:
                    5c:48:86:1b:d5:b1:2f:10:78:e3:ed:0d:18:9d:75:
                    f3:23:ef:71:36:01:fa:e9:a7:14:55:f9:6d:99:34:
                    6b:29:fc:c8:4b:e2:6a:86:ad:30:73:62:e3:03:f0:
                    2a:fa:ff:0f:3c:90:ee:95:05:34:56:f3:ab:b2:64:
                    06:9d:5f:8c:18:b5:6e:6a:35:d7:17:05:26:80:6f:
                    8d:90:45:9e:3c:99:f3:a5:d4:37:f2:50:38:2e:f1:
                    78:f4:b9:a6:ca:fc:2c:4f:67:07:21:4a:bf:f1:a4:
                    2e:6a:a1:ab:a8:3a:df:13:56:94:5d:d9:54:8e:ae:
                    e3:4c:75:82:16:a1:80:39:30:b4:7a:de:1b:8e:24:
                    39:77:69:1f:6c:71:1b:e7:2c:eb:d7:a3:37:a3:30:
                    ce:af:02:a6:94:9e:4a:cb:b3:25:fe:29:9d:9e:71:
                    09:64:ce:bb:58:7c:c0:f1:11:25:00:a2:70:79:ec:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E4:14:44:6C:67:47:B4:25:CE:9B:A4:47:F4:28:B4:F3:0A:A7:3F
            X509v3 Authority Key Identifier:
                keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:77:31:15:68:31:db:4c:70:aa:68:f0:d4:4e:3e:76:95:b3:
         13:4d:18:a0:08:b1:e9:b2:8e:5d:35:6e:98:e7:8d:d1:d5:eb:
         51:9f:e1:1c:c7:c8:06:ac:ef:e6:f4:2d:d2:34:a4:d9:9b:a7:
         53:cf:37:63:e2:f5:76:4c:28:d7:91:e3:97:47:71:9e:a0:14:
         03:f3:68:68:83:92:9b:fd:76:63:23:4a:c6:59:24:60:ad:da:
         9f:fa:5f:ed:2a:72:ca:82:df:c3:d0:bf:cc:36:99:fd:43:e4:
         79:8e:71:e8:9b:92:de:e7:85:ca:e7:08:50:30:76:7b:c8:9c:
         7c:c1:81:12:4e:e4:c5:e9:38:a3:82:cb:33:3a:b6:db:07:09:
         15:89:48:04:da:bb:4a:af:71:47:3c:06:ac:d7:72:c6:66:4e:
         3d:0f:e7:f7:c9:45:95:48:0e:13:c5:f8:ad:7b:d6:0b:40:1d:
         7d:bb:98:81:c6:93:23:e1:aa:c9:7e:c3:80:a8:87:91:a8:1d:
         47:bb:62:ad:c5:d0:3f:e6:b2:83:1e:f4:02:d9:0f:98:d1:e4:
         81:bf:87:2e:5b:16:31:a5:d1:51:32:f9:1d:00:98:a0:26:f8:
         55:76:c9:0b:a8:a3:13:0c:4b:f1:47:16:5f:fd:ac:77:e1:20:
         64:d1:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 09:03:02 2025 by rpki-client on console.sobornost.net