Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft
File:                     024ABFF2959A6144CC4889C70F77F968FA410EF1.mft (raw, json)
Hash identifier:          SPXU/I6roWmKkXNt1qZ21lFQ0/T01qBMYTXWQHmhMLo=
Subject key identifier:   04:C6:4E:97:D9:80:B1:B7:EA:05:2A:B0:B0:77:94:28:CD:AD:EC:98
Authority key identifier: 02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1
Certificate issuer:       /CN=024ABFF2959A6144CC4889C70F77F968FA410EF1
Certificate serial:       4A316598339624ACF1B7B5F19EF0B7E1FF40E5E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft
Manifest number:          0288
Signing time:             Fri 25 Apr 2025 03:01:09 +0000
Manifest this update:     Fri 25 Apr 2025 02:56:09 +0000
Manifest next update:     Mon 28 Apr 2025 05:45:09 +0000
Files and hashes:         1: 024ABFF2959A6144CC4889C70F77F968FA410EF1.crl (hash: VEFPY6dJ4QV5FllzYQh2Ie5MhMu5P9KnROLszDyRDuQ=)
                          2: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: G2juGB6eftwsC+fsnzguy++P5zlF0bkzL2c8r+kWKkI=)
                          3: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (hash: aay9Jvclfs8gBm7idaaHHT8mQr3TT32/vrVHbT4o17k=)
                          4: 3130332e3137362e34342e302f32342d3234203d3e20313437313238.roa (hash: ZcflU18QHaOG0H5AVVuZs+fe6ZIRvg4OT/QSDZzqWpk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl
                          rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:31:65:98:33:96:24:ac:f1:b7:b5:f1:9e:f0:b7:e1:ff:40:e5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=024ABFF2959A6144CC4889C70F77F968FA410EF1
        Validity
            Not Before: Apr 25 02:56:09 2025 GMT
            Not After : Apr 28 05:45:09 2025 GMT
        Subject: CN=04C64E97D980B1B7EA052AB0B0779428CDADEC98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:2f:da:1d:e9:29:c2:5b:ec:8b:b9:9c:74:
                    b6:79:ff:44:24:5f:59:83:b4:55:0c:f6:e1:71:5a:
                    cb:56:ee:d9:d4:40:b3:06:ca:fb:4a:c6:00:bf:3a:
                    44:3d:96:ee:36:d1:70:c3:55:fe:02:0d:89:ba:8d:
                    c5:90:06:ac:ec:ea:f4:51:72:9e:b5:f3:14:a0:dc:
                    e9:09:3e:0b:24:49:d4:ad:4b:1f:ad:7d:2d:18:49:
                    64:b3:93:49:86:28:94:a6:52:b4:eb:3d:fe:3e:5c:
                    db:e8:b3:69:52:bf:93:94:1d:76:a4:2b:ec:56:91:
                    d5:12:c9:e9:4b:7a:70:b7:55:67:1a:60:ef:b6:56:
                    6f:e9:3b:d1:8d:45:de:f7:53:42:8d:aa:7b:61:51:
                    33:06:d7:71:d9:62:e5:ca:a4:bb:73:5b:e9:57:ab:
                    5b:b1:d3:e2:63:01:ce:13:c1:31:d2:ff:75:39:e5:
                    d2:52:06:f5:64:db:67:70:97:01:01:35:a5:08:b3:
                    1b:a3:28:f3:f4:ee:4d:0f:15:7b:d0:11:2b:27:79:
                    da:06:4c:27:56:dd:5f:ca:9f:e0:1e:72:23:f9:69:
                    39:f4:ac:82:73:c2:1d:d5:dd:08:db:95:3b:6a:d7:
                    27:35:11:43:65:29:8f:ec:cf:f0:88:5c:0c:e6:56:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C6:4E:97:D9:80:B1:B7:EA:05:2A:B0:B0:77:94:28:CD:AD:EC:98
            X509v3 Authority Key Identifier:
                keyid:02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:04:63:bd:ee:41:3e:e4:85:a5:c2:41:87:bb:dd:6c:ad:d1:
         19:04:e3:76:91:40:98:97:32:66:a8:a1:b2:a2:8a:ac:d2:a1:
         b0:ad:27:d3:b5:2d:f6:f8:54:64:3d:f3:0c:05:39:41:1c:4e:
         75:d8:82:7d:a2:0b:a9:61:d3:2b:f0:51:aa:8c:eb:75:c9:f7:
         f1:1f:eb:92:5b:27:fd:6e:8a:50:f5:eb:52:7e:75:75:77:ba:
         6d:da:76:63:cf:10:ae:c6:63:26:a8:1f:eb:1e:59:eb:bd:aa:
         56:e0:dc:b5:60:89:8c:2b:25:74:76:22:c0:0c:29:41:65:98:
         6a:99:a0:a5:ac:93:cd:e8:58:7f:de:6d:ff:33:2b:9e:94:a1:
         8e:08:93:55:4f:f5:2b:89:ff:69:e7:b4:d4:85:2a:13:35:27:
         3d:21:fd:f8:20:34:fd:6a:8e:46:88:aa:82:85:e7:6a:e1:ed:
         46:ba:a6:9d:b2:bc:70:24:f9:53:00:07:d6:51:3b:57:c7:85:
         fd:59:54:98:1b:9d:17:6a:6b:95:49:1a:5c:0f:a0:96:1a:dd:
         ac:2d:73:1c:c3:ab:6b:df:c9:0e:92:9d:8b:8e:80:91:ea:d7:
         af:20:ae:53:06:a2:31:dd:35:a7:11:3c:05:ff:c8:1d:03:fb:
         8e:87:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:22 2025 by rpki-client on console.sobornost.net