Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft
File:                     032056FFABA06741112BA404900B315C87E35361.mft (raw, json)
Hash identifier:          ZRrRyrxGvf3K6fVpwbBkrP6mi25NgmVRLqEozn2UZE0=
Subject key identifier:   CA:F5:B5:FE:B7:37:8E:DB:7B:66:BF:7D:77:4E:22:A9:93:11:2A:0B
Authority key identifier: 03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61
Certificate issuer:       /CN=032056FFABA06741112BA404900B315C87E35361
Certificate serial:       138E99DF69675DF1A34FE319A4694A0D062D3B13
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft
Manifest number:          0456
Signing time:             Wed 23 Apr 2025 14:01:39 +0000
Manifest this update:     Wed 23 Apr 2025 13:56:39 +0000
Manifest next update:     Sat 26 Apr 2025 22:41:39 +0000
Files and hashes:         1: 032056FFABA06741112BA404900B315C87E35361.crl (hash: 5PpAiEaAmzMpRLfmSqgYIlQLxI9tnZUXQm1LYDdmPUs=)
                          2: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: YChAquT46Gu9Ju8lh9yWF5k2iDsA6GlC2HfcNGf9Vhg=)
                          3: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: kOBx2GksvdfRI3aO7Xv7lhebR1wUywN2HETFMEy7na8=)
                          4: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: mSrDIe1nZyY3D0kPgDEMFaoY9Cg4bd3ftAPPtaVMp6U=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl
                          rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 12:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8e:99:df:69:67:5d:f1:a3:4f:e3:19:a4:69:4a:0d:06:2d:3b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032056FFABA06741112BA404900B315C87E35361
        Validity
            Not Before: Apr 23 13:56:39 2025 GMT
            Not After : Apr 26 22:41:39 2025 GMT
        Subject: CN=CAF5B5FEB7378EDB7B66BF7D774E22A993112A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:86:46:fc:19:ac:65:95:95:f4:74:22:89:
                    92:d4:3d:67:38:73:23:ae:62:bf:53:c8:0b:c0:c4:
                    43:e9:ca:70:db:cb:e3:b1:db:92:ff:75:40:b8:07:
                    1c:4d:b3:a2:b7:8e:46:73:b4:29:72:15:bf:df:99:
                    a0:db:46:cd:66:ec:13:23:6f:ff:94:81:71:c8:89:
                    61:28:46:32:de:bc:34:3e:65:34:33:e2:d7:f7:b5:
                    45:18:62:45:93:61:3d:70:4d:a0:51:99:ac:a5:98:
                    68:2a:bb:a5:3d:10:e6:9b:fd:43:cb:90:0d:07:42:
                    b7:aa:59:89:64:1b:3e:44:a8:3b:48:02:71:50:37:
                    1f:a4:ce:da:60:de:d2:6d:f6:72:10:cd:1d:af:f8:
                    1a:fa:33:61:7f:cb:2c:bd:05:81:32:7d:f3:9c:d1:
                    6c:81:5b:82:30:a8:a5:56:89:43:68:fe:17:8f:a2:
                    87:f5:0c:d7:7f:6d:e5:d0:de:21:16:e5:4e:7f:15:
                    00:95:15:03:51:f5:0a:7b:67:bd:57:55:f0:3b:45:
                    a8:15:a9:c6:ef:8a:c3:11:8c:ec:54:d6:c9:8e:8b:
                    35:a7:e3:a6:b5:24:75:49:bc:dc:0c:c7:a3:38:96:
                    0b:1e:7b:62:26:03:ca:28:9d:c2:fc:77:ac:f2:ea:
                    88:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F5:B5:FE:B7:37:8E:DB:7B:66:BF:7D:77:4E:22:A9:93:11:2A:0B
            X509v3 Authority Key Identifier:
                keyid:03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:87:54:d3:65:57:f7:ac:8e:f6:8f:3a:cb:59:48:cf:ce:79:
         f7:d2:2a:43:f0:60:62:29:f6:8d:f2:e4:ea:ea:dd:f1:e8:3e:
         40:2b:65:b3:06:6f:4e:92:a0:ce:5c:87:06:59:b4:e6:76:d2:
         50:10:c8:67:06:c5:c9:d8:d9:1c:9a:79:1f:c1:2d:6c:89:0c:
         85:db:5c:1b:fa:b5:aa:d3:d3:0d:21:cd:ac:cc:66:62:f4:25:
         d5:a0:8e:59:f6:b2:fe:e1:be:24:01:32:c9:a6:67:41:a0:89:
         e0:0f:7b:ab:ae:79:c3:53:50:24:12:c6:10:b2:ef:59:1c:f2:
         a8:aa:20:0f:eb:8a:e3:45:5c:94:f3:9c:cf:11:71:8d:7a:6e:
         8a:b0:f7:9c:30:0e:4e:a8:63:70:b8:84:8a:68:5b:7e:82:53:
         4c:0d:cc:4e:53:a6:2a:26:37:10:3a:45:0c:4a:f8:6e:08:92:
         79:16:aa:89:6b:0c:07:02:c2:f4:4d:dd:23:76:91:c3:ab:17:
         56:2e:10:cf:4f:af:a9:be:36:db:cc:09:1c:86:79:86:98:9d:
         5a:01:4c:f5:78:70:59:04:94:73:0d:0e:de:bc:80:4b:3f:af:
         02:f6:15:5a:22:17:66:f0:99:d4:bd:71:52:5e:1a:4c:7c:5a:
         8e:8c:73:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net