Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft
File:                     A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json)
Hash identifier:          SDaCUaNSvDjbLC/eDuP+vPjH10EZ56xqd3NOM+cq5pA=
Subject key identifier:   6B:85:C6:54:76:9C:B7:05:D2:7F:B3:0A:8C:8D:C0:A5:7E:C6:9C:8B
Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF
Certificate issuer:       /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
Certificate serial:       17E0A0B0829B6CCB1032D432F560D9EAFFEF8E9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft
Manifest number:          0460
Signing time:             Thu 24 Apr 2025 14:41:37 +0000
Manifest this update:     Thu 24 Apr 2025 14:36:37 +0000
Manifest next update:     Sun 27 Apr 2025 16:04:37 +0000
Files and hashes:         1: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 1hrs4DLPh6jmKDUQsAVeS3tTO/nLdzEIlT+GiyvpCqk=)
                          2: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: NgCvE1hp44YLC96n/lodIlhmLB1FaaOx9l0TuasHSug=)
                          3: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: q/XktDqCxGuqDzAPoRIREw6n7gHdtYDDoVvOKi9CNNs=)
                          4: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: okSOnsTLjxdHLCwY+rCd2PFKGFvwdYfmYy2z3ckMn90=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl
                          rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 16:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e0:a0:b0:82:9b:6c:cb:10:32:d4:32:f5:60:d9:ea:ff:ef:8e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF
        Validity
            Not Before: Apr 24 14:36:37 2025 GMT
            Not After : Apr 27 16:04:37 2025 GMT
        Subject: CN=6B85C654769CB705D27FB30A8C8DC0A57EC69C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:e5:45:77:d0:a3:5f:af:b2:a1:c4:64:bd:
                    b6:e5:c8:7c:eb:3c:5b:ea:66:3d:38:02:2e:40:bf:
                    1b:a1:a9:23:26:cc:37:da:25:31:f8:00:82:8a:60:
                    68:98:cc:c2:db:a3:48:98:c0:cb:db:ff:ba:2e:cf:
                    9d:ab:a5:3a:2a:0a:bd:f8:25:f2:8e:be:0a:62:2e:
                    dd:ec:0e:9a:43:ef:32:cd:ab:e4:48:47:12:ec:4c:
                    d1:15:e5:61:0f:42:73:32:09:b6:99:92:7e:86:f8:
                    75:10:d0:68:ec:df:1e:ba:e9:7e:73:2d:ae:5e:c0:
                    00:10:82:02:15:e3:c3:89:72:26:51:c3:d4:4e:c4:
                    3b:66:07:69:0c:6d:55:0c:7b:0f:94:51:2c:b2:c3:
                    17:c3:dd:e7:6e:31:a7:02:2c:81:fc:02:b3:9e:a8:
                    57:3d:e7:10:fa:05:f9:a1:50:e4:8f:64:aa:4c:05:
                    28:a2:7b:06:ae:e7:d0:3b:b7:67:81:32:38:57:7d:
                    0b:93:de:82:1d:ed:1e:89:88:c7:45:c8:22:1e:36:
                    dd:fc:8c:bb:0e:a0:59:9f:a2:46:a8:23:48:fc:3d:
                    78:13:ba:d2:3e:6b:8f:74:9f:87:c5:a1:67:26:94:
                    c6:9b:62:94:63:f7:a6:97:c1:a3:97:13:42:11:74:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:85:C6:54:76:9C:B7:05:D2:7F:B3:0A:8C:8D:C0:A5:7E:C6:9C:8B
            X509v3 Authority Key Identifier:
                keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e0:ce:cc:fe:8a:b4:54:1b:26:bd:ca:cb:fd:34:c2:3d:d3:
         aa:a8:5f:b3:6a:0e:a4:94:2d:54:ba:e8:f8:c5:90:6d:42:2d:
         7a:65:47:2b:f6:14:3a:62:dc:5a:98:1b:3d:33:37:2b:a2:9a:
         a1:34:3c:3f:04:2b:a5:1f:85:bb:34:14:c6:cf:5b:4a:76:cc:
         50:ca:83:b4:b2:24:9e:2f:d1:b9:99:73:67:3c:10:b7:61:70:
         ba:d8:ec:e0:a7:75:ef:1b:3f:a2:18:0b:5c:21:83:4a:a9:8f:
         a3:a2:77:4d:36:1f:6a:8a:b9:1e:95:c9:d5:21:28:c9:a4:25:
         02:a9:bb:42:f0:11:13:18:65:25:48:c4:58:e7:81:3e:9a:90:
         6e:a6:2d:4e:e0:21:50:10:31:6c:85:e2:eb:64:58:45:ae:66:
         f6:99:d3:ea:ac:25:4e:39:e0:97:74:52:4e:ce:fd:47:84:06:
         15:6a:5d:7c:3d:28:5b:03:58:ae:bc:d1:75:8c:7b:9f:56:02:
         01:db:1a:56:65:d1:10:ae:41:46:67:ae:bd:a9:5e:5e:44:a7:
         a2:e5:02:42:31:32:4a:ee:c0:66:b3:0c:09:50:9c:68:4d:fc:
         9f:51:30:80:0e:74:4e:09:a6:c0:b9:fe:25:01:88:b0:c1:14:
         c5:cb:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:01:26 2025 by rpki-client on console.sobornost.net