Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
File:                     247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json)
Hash identifier:          3cSor0TXoAGswHyHmCs6BD+gHLmn60xhratvsJPeVGU=
Subject key identifier:   94:78:26:B4:E2:BA:C6:0A:02:E4:FA:9D:45:9B:51:0F:50:3B:03:38
Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76
Certificate issuer:       /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76
Certificate serial:       2F852845522C61EA5459ADAECB82A4AE0C5D19A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
Manifest number:          02B8
Signing time:             Thu 24 Apr 2025 13:31:07 +0000
Manifest this update:     Thu 24 Apr 2025 13:26:07 +0000
Manifest next update:     Sun 27 Apr 2025 18:05:07 +0000
Files and hashes:         1: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: 8pvSL0egc+WMc+a2/glW47Xs8RpIIsEutGyuUrDJkHQ=)
                          2: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: mZ85g4/9A+wJLH5Yd+oHXLj7KaqZxnaOtzAvrUbVZy4=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl
                          rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 17:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:85:28:45:52:2c:61:ea:54:59:ad:ae:cb:82:a4:ae:0c:5d:19:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76
        Validity
            Not Before: Apr 24 13:26:07 2025 GMT
            Not After : Apr 27 18:05:07 2025 GMT
        Subject: CN=947826B4E2BAC60A02E4FA9D459B510F503B0338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6a:08:bf:66:57:75:30:98:d5:83:31:4e:ed:
                    92:7d:81:45:68:b7:fb:1e:29:ff:a4:0b:5c:5c:18:
                    12:76:e2:d3:0f:e9:03:2f:64:ae:d5:c2:8e:16:8a:
                    62:59:3b:5c:7a:36:1f:3e:08:a7:77:53:cb:86:2f:
                    5d:37:c2:24:ac:05:27:b1:6b:32:b8:b2:e6:3c:9d:
                    41:1f:73:b2:91:d7:23:11:cf:46:22:07:c6:81:0e:
                    46:b8:22:db:ae:a5:f9:e1:cb:f5:83:bf:eb:67:66:
                    07:c7:8d:64:83:f9:41:64:21:ec:20:67:52:4c:db:
                    4e:af:c1:44:d9:68:78:b8:b8:f0:f8:f5:ef:0c:69:
                    d5:f9:d7:f4:ef:08:e1:4a:c6:f6:b0:a1:d0:8e:a1:
                    3f:c7:29:b5:e5:81:5d:49:e9:68:b1:41:00:6c:4c:
                    43:68:1a:e6:e4:98:76:23:da:10:9e:21:4d:ca:86:
                    cc:69:35:a2:53:4f:e3:8c:94:92:92:00:c5:af:dc:
                    6b:a9:70:55:93:ae:5f:04:6c:36:42:7f:c9:23:d0:
                    49:2c:65:6c:c1:90:12:8b:c7:61:a0:eb:8a:9b:82:
                    a5:7b:6b:13:31:6c:42:a8:d5:9d:f6:78:8b:1c:7f:
                    06:a5:ba:9a:a8:d5:e1:9b:3f:f8:3b:bd:51:c6:c5:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:78:26:B4:E2:BA:C6:0A:02:E4:FA:9D:45:9B:51:0F:50:3B:03:38
            X509v3 Authority Key Identifier:
                keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:72:d3:4a:c2:63:e8:5d:24:32:a0:a3:3f:bb:32:99:b6:44:
         5b:07:84:00:a7:28:85:e6:d1:91:a7:92:fd:45:6f:de:1b:6e:
         64:4a:3c:77:14:1e:7d:34:1c:e1:4a:0c:eb:25:9b:2d:36:87:
         70:a4:9f:91:7b:f4:81:50:5f:85:3d:74:f9:f8:82:ef:26:fe:
         32:82:e1:25:53:94:1e:46:29:25:c4:92:ef:c6:cc:fc:4c:1f:
         30:9b:98:e4:86:02:9f:61:2c:9d:32:0f:5a:af:68:3b:02:fe:
         51:49:84:69:e3:b8:e7:fe:3c:5f:a5:ae:9f:cd:0c:76:ff:7e:
         0d:8d:28:a7:01:1c:3c:a1:29:f0:63:4d:12:26:b3:93:98:b1:
         a6:e0:ab:c1:70:71:b6:37:a7:e3:c6:78:2f:5b:84:c4:ac:6d:
         31:a2:94:b2:84:33:3c:53:52:01:3e:65:84:59:e2:15:50:17:
         50:8c:12:b7:47:58:3d:ba:2a:44:f1:00:2e:c5:e1:f1:ec:e6:
         43:f1:dc:86:02:89:61:20:8f:01:73:38:02:3d:a0:48:8f:32:
         b2:a6:eb:5f:8f:6c:d8:4b:75:66:7d:8f:18:a0:44:f8:0d:e3:
         47:d0:bf:9c:90:ed:a9:41:01:bd:7d:49:2c:11:0c:6d:0a:2f:
         54:58:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 15:50:03 2025 by rpki-client on console.sobornost.net