Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
File:                     5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json)
Hash identifier:          lJJOiKSCWkAtu7hB+9vVU7osvxnJuMNuSxzPcu1jplY=
Subject key identifier:   BB:7E:59:B6:DF:12:7F:C1:83:28:D4:44:73:7F:3E:67:44:D9:46:B1
Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61
Certificate issuer:       /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
Certificate serial:       5F4284F7F465D31A568FF7FFFA3B58FF5DDFED14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
Manifest number:          8A
Signing time:             Wed 23 Apr 2025 14:00:37 +0000
Manifest this update:     Wed 23 Apr 2025 13:55:37 +0000
Manifest next update:     Sun 27 Apr 2025 01:55:37 +0000
Files and hashes:         1: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: SZF4Z9v3eKneOkuBlAob2+u92vsQYFHYdvhfR0N4D0s=)
                          2: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: 9GHx9mMSNt9/UZ0SnptfoPS3Jii7XV6Xb4yYfIFRPyI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl
                          rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 18:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:42:84:f7:f4:65:d3:1a:56:8f:f7:ff:fa:3b:58:ff:5d:df:ed:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61
        Validity
            Not Before: Apr 23 13:55:37 2025 GMT
            Not After : Apr 27 01:55:37 2025 GMT
        Subject: CN=BB7E59B6DF127FC18328D444737F3E6744D946B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:b2:5a:81:31:52:55:3a:e1:13:72:04:44:
                    b5:54:8a:9d:00:a1:0b:98:c8:3e:10:ab:d5:26:00:
                    eb:d8:2c:63:3b:ce:4f:20:08:91:9f:13:7b:c6:75:
                    75:40:a9:6c:66:6c:50:06:d0:48:99:df:0b:d4:80:
                    71:9e:56:0b:f2:d1:d9:be:15:22:5c:bd:f1:c0:2f:
                    83:b7:c7:4a:21:34:28:cc:92:d7:b4:71:f3:4a:f2:
                    19:98:6f:cf:58:47:67:41:4b:b6:59:bb:65:a6:2e:
                    a2:8e:65:e8:c2:c2:16:74:d6:75:1e:d1:e5:6e:d1:
                    f9:ae:a1:ec:1b:31:d4:ab:ca:2e:af:5a:62:53:f6:
                    c3:7b:2a:64:37:16:2b:6f:c3:c2:3a:c8:8f:f7:06:
                    f5:8f:a7:73:11:87:00:25:0f:49:6a:f0:df:a4:8f:
                    aa:a5:56:12:84:fb:fb:72:ed:bc:9a:e7:b0:1f:bb:
                    b4:f8:71:66:98:d6:55:26:ae:35:94:b4:b7:74:8e:
                    a1:4f:0a:c6:05:02:72:7b:36:1e:c5:7e:d6:3c:7d:
                    13:e4:eb:0b:19:97:cc:13:3a:65:3f:29:37:d7:6d:
                    ec:04:27:79:93:bb:80:5c:35:01:e6:99:de:96:a3:
                    69:e5:4e:8e:51:70:25:88:19:fd:20:9f:06:03:8e:
                    86:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7E:59:B6:DF:12:7F:C1:83:28:D4:44:73:7F:3E:67:44:D9:46:B1
            X509v3 Authority Key Identifier:
                keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d2:7a:b2:57:77:60:a2:65:a5:a4:13:43:fb:77:1d:37:dc:
         37:3e:12:9e:ec:bf:21:b0:26:82:29:a3:6a:1f:dd:bc:40:c1:
         e6:48:bf:cc:51:90:55:4f:87:f0:cc:a6:6c:27:55:cf:25:c5:
         ba:cf:5f:bc:b8:af:64:66:71:71:bf:23:ab:a7:33:5c:65:00:
         04:92:a5:2c:d1:e7:0a:08:86:d2:f0:42:3f:fb:91:38:2b:e8:
         b4:0b:63:e5:65:4f:db:d8:ab:27:a7:21:d0:4d:f1:25:8c:b3:
         0f:0d:75:42:78:8f:3e:cb:44:35:20:03:5c:c7:24:11:b3:eb:
         8a:50:0c:17:8a:a4:9a:80:a9:ce:64:84:82:f2:53:40:e7:8f:
         36:e0:b5:b1:bd:c2:6f:8a:49:3d:87:94:49:53:15:e4:f6:98:
         3d:49:4c:17:16:07:1c:9d:e5:92:46:35:bd:37:d2:33:71:6b:
         95:22:f9:55:6d:69:70:51:bd:41:18:e3:a7:9b:05:8d:00:df:
         20:58:72:58:ab:f6:58:80:08:12:41:73:71:62:cc:0a:d6:32:
         b5:17:cc:22:1e:50:3a:82:98:13:97:c2:fb:07:c0:80:01:24:
         34:d9:9f:09:42:17:a9:db:91:b4:5e:bb:39:63:25:95:54:ac:
         70:67:28:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net