Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
File:                     5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json)
Hash identifier:          0LvLdUOuug9TPpp8G0Ff2eVRt7EJdRHldNLK3bRitKg=
Subject key identifier:   6B:3F:73:6B:CF:E4:A8:89:29:32:C8:A9:8D:3B:23:9B:53:6D:74:C5
Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
Certificate issuer:       /CN=5AE19AE3FA86591042AE694640539C9669DEC801
Certificate serial:       0E7B7CC2C95D34B7D8B012C24AFC79B3FA6BFE96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
Manifest number:          01A4
Signing time:             Thu 24 Apr 2025 18:21:40 +0000
Manifest this update:     Thu 24 Apr 2025 18:16:40 +0000
Manifest next update:     Sun 27 Apr 2025 20:07:40 +0000
Files and hashes:         1: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: 2IM21UtmGT4hAJMZsDOAxlE4y1VJHjzs82smeCwCu5A=)
                          2: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: fOeClpPAM1TK8IOTss4/WbnoMHtsAOsqOEHzrDJIniQ=)
                          3: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: VspFw++2jUPUNxpc1/y0Mp4Lv1a+LwrFNdh9KUkbu+E=)
                          4: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: 2eBKUXWmF5ts/Iekm7oAEARBCDw1Enrm52lUVeCh2ig=)
                          5: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: pd2NDQQQPyHZaBaBe61CyREtdlKxDZecHqykFbQ5pJ8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
                          rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7b:7c:c2:c9:5d:34:b7:d8:b0:12:c2:4a:fc:79:b3:fa:6b:fe:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801
        Validity
            Not Before: Apr 24 18:16:40 2025 GMT
            Not After : Apr 27 20:07:40 2025 GMT
        Subject: CN=6B3F736BCFE4A8892932C8A98D3B239B536D74C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e2:33:34:75:7a:4b:32:97:79:8f:f4:05:78:
                    63:67:d3:9c:1a:fb:2a:15:48:a4:67:40:d6:a9:75:
                    00:b8:c2:e6:7a:2b:66:82:12:0b:51:66:c6:5a:69:
                    da:c7:b7:d6:d5:97:76:2c:d7:d8:08:ac:a2:8a:4d:
                    09:d6:e7:cc:24:b9:db:f4:bb:50:32:06:9e:eb:67:
                    a7:e1:ec:19:cd:93:1c:71:08:01:51:aa:7e:a9:1b:
                    71:02:6e:6d:30:b9:ef:ec:16:13:58:80:ab:75:de:
                    80:7c:2f:4a:75:a7:42:1d:33:96:4f:97:32:09:18:
                    a6:a4:6f:50:e6:04:6a:c5:eb:67:5e:0d:a7:ac:c5:
                    9f:e7:32:db:dc:77:13:eb:d6:c2:41:fa:60:66:60:
                    b1:1d:77:5b:75:f3:30:86:e8:f1:12:3a:e7:9e:b6:
                    90:77:91:99:5e:0f:40:1c:57:49:d0:d0:36:1b:14:
                    76:db:a1:f6:66:f2:29:e8:8a:10:2b:b0:3e:ae:e3:
                    5b:9d:0d:6a:09:1f:d8:37:b4:d5:7d:c5:44:4d:e1:
                    97:ca:62:d0:15:0b:c1:4a:cc:fd:b3:68:19:5d:ea:
                    6c:77:51:db:2b:47:b9:90:a8:27:58:bd:87:54:4c:
                    82:81:e0:aa:91:99:65:1f:96:b0:49:59:6a:26:e7:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3F:73:6B:CF:E4:A8:89:29:32:C8:A9:8D:3B:23:9B:53:6D:74:C5
            X509v3 Authority Key Identifier:
                keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:20:8b:23:19:07:7e:07:04:73:6f:d9:76:8d:2c:33:c0:b1:
         c2:1f:fb:a7:b3:d7:df:da:ff:22:ad:3b:1a:b9:6a:73:1a:45:
         c1:3f:12:cf:dd:f6:d5:11:51:72:38:4d:01:34:d6:ee:5c:21:
         bd:03:54:44:16:5c:cb:cc:06:2e:90:1a:9f:2f:a9:38:27:83:
         87:96:88:bc:27:58:bf:dc:58:27:0b:c7:8d:9c:df:24:bf:8f:
         d4:6b:bc:af:64:76:19:38:e6:21:bd:51:4d:3e:a9:32:fe:d4:
         f4:32:43:e2:6b:92:73:37:e6:49:04:35:9c:52:f2:8a:5c:25:
         af:67:3e:11:27:b9:62:a8:9b:ea:70:91:41:f2:15:67:17:8b:
         5c:1d:e5:16:09:13:72:d2:c1:f2:10:f9:b1:28:c3:d0:82:ff:
         dd:b7:25:fd:51:ca:dc:61:96:cc:86:04:b4:4b:7a:68:53:94:
         69:47:74:57:b3:45:2a:21:37:9a:a4:81:ec:65:4b:af:48:9d:
         bc:88:8f:95:3e:e7:68:88:d6:ee:80:0e:ed:5c:31:aa:ad:27:
         8e:02:c0:94:98:ff:b9:67:8f:18:fc:77:74:8b:5f:99:ca:cd:
         a0:3d:16:39:00:2a:a2:37:19:57:3e:ed:76:2f:be:a2:e4:31:
         ba:71:f2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:11 2025 by rpki-client on console.sobornost.net