Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
File:                     0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json)
Hash identifier:          TyK2L0AqCO7s3C3tk71pm8fzXKZAxgwKHyp32q+rZR4=
Subject key identifier:   47:80:D5:B8:4E:65:2A:38:97:39:01:F9:18:66:96:33:81:F7:7F:8E
Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00
Certificate issuer:       /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400
Certificate serial:       5704C2DC220E311B639C19C7B0E75E52C5272183
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
Manifest number:          CB
Signing time:             Wed 23 Apr 2025 18:50:02 +0000
Manifest this update:     Wed 23 Apr 2025 18:45:02 +0000
Manifest next update:     Sun 27 Apr 2025 04:12:02 +0000
Files and hashes:         1: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: CkioTeBJV4sL++uAeWAcKZDwePzlaEoJ8Dt/Q+Ec1n8=)
                          2: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: SISCMNVwIed6YxOVMeuFAGuwfp9lrfWPRwjNja8gwts=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl
                          rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:04:c2:dc:22:0e:31:1b:63:9c:19:c7:b0:e7:5e:52:c5:27:21:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400
        Validity
            Not Before: Apr 23 18:45:02 2025 GMT
            Not After : Apr 27 04:12:02 2025 GMT
        Subject: CN=4780D5B84E652A38973901F91866963381F77F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:35:e9:6a:3a:10:d4:38:14:a7:d6:24:3e:
                    6b:8a:e8:4e:60:99:4f:ba:1d:73:bb:c7:aa:4b:5c:
                    7c:f8:5a:59:cb:91:de:5f:c7:33:55:40:e4:37:7c:
                    ae:bc:c8:73:19:fc:c2:ad:33:07:3c:09:dc:30:3d:
                    71:bb:d4:0c:95:eb:68:63:5d:28:d6:cb:85:b3:54:
                    9d:a9:92:c0:8b:b5:26:0e:62:b2:b2:04:3a:99:32:
                    ac:96:d6:ea:50:f9:f8:24:b8:01:47:04:d8:1d:d1:
                    71:48:0d:5b:af:ff:15:fe:17:1b:2d:07:4f:bf:57:
                    a3:ca:73:a3:2f:77:10:fe:40:77:6c:de:54:b4:09:
                    c7:cf:c9:93:8e:4a:c0:43:9e:c0:f7:63:c5:32:68:
                    64:66:1a:ef:f6:2b:c5:79:15:73:cf:85:1d:1b:9c:
                    57:6c:8a:a7:44:e0:ec:a3:77:0d:ec:aa:98:f4:52:
                    c3:21:db:85:4f:07:dc:f0:eb:88:41:dc:cb:b2:d2:
                    ed:4d:8b:19:b9:5b:2b:21:dd:2e:66:75:79:e9:56:
                    97:d7:b6:f0:53:c4:0e:c6:d2:00:53:e7:39:ff:8c:
                    63:24:99:35:ec:c8:2d:46:74:18:1d:52:c3:a4:fc:
                    c5:bf:1f:53:60:c8:fb:e6:b8:a2:01:27:97:6b:ea:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:80:D5:B8:4E:65:2A:38:97:39:01:F9:18:66:96:33:81:F7:7F:8E
            X509v3 Authority Key Identifier:
                keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:40:26:48:da:50:dd:5d:a3:97:05:e8:26:89:39:d1:f9:d7:
         c9:01:fa:1f:7c:ff:48:84:bc:ef:b8:87:c9:6f:fb:ef:f5:ae:
         2d:98:a1:d5:14:33:ac:6a:07:6f:f3:57:2d:bf:47:c8:1d:50:
         3c:41:d5:80:75:f7:f1:87:91:46:79:d5:42:5c:f1:00:06:3b:
         f7:30:a6:59:d9:db:9f:1f:54:28:76:9a:f9:51:90:0d:c7:d1:
         16:44:c2:b4:5d:c0:b0:de:06:8a:71:0f:cb:f9:bc:c9:56:43:
         ca:f8:49:2a:45:14:07:97:99:9d:aa:21:e6:7d:13:20:f0:5d:
         8a:56:16:8c:de:89:28:38:5d:67:6a:46:f2:71:fb:93:9b:41:
         67:35:cd:19:5a:62:f1:5b:8b:7e:eb:b9:b4:64:4c:78:90:a3:
         5f:74:fb:d5:7d:7d:d2:22:49:28:65:00:9e:bd:f7:a7:d6:dc:
         74:fb:1a:1f:6e:ab:83:6c:65:a5:4b:75:42:39:9e:b2:89:a2:
         b8:be:57:35:52:50:d7:fa:4a:0e:8a:93:91:7a:66:d1:a1:67:
         c7:16:44:f8:48:fd:88:25:b3:40:63:4e:d5:a1:78:13:38:e6:
         8c:c4:63:ba:6d:9c:42:5f:5c:0f:5a:2e:ca:62:ed:37:e7:f8:
         f1:b7:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 22:12:04 2025 by rpki-client on console.sobornost.net