Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft
File:                     357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft (raw, json)
Hash identifier:          /CfmXVPSEOXjHDf9AfY08SlRwv7eDOOPVFzim5uRimU=
Subject key identifier:   84:58:05:EF:BE:DD:C3:81:9E:9E:4F:B8:76:99:0B:63:AD:FF:91:1D
Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B
Certificate issuer:       /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B
Certificate serial:       754B9B7EA7B8DBF760C47D7F471BB953350A04F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft
Manifest number:          02A4
Signing time:             Wed 23 Apr 2025 08:50:03 +0000
Manifest this update:     Wed 23 Apr 2025 08:45:03 +0000
Manifest next update:     Sat 26 Apr 2025 10:55:03 +0000
Files and hashes:         1: 3130332e3136372e3136382e302f32332d3233203d3e20313431393835.roa (hash: 3J6hvxgEVqyD6OymkoX4wg6aPVnMQfStqRhmiYMuRiY=)
                          2: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (hash: /rNqnQhLNaqVLN9Hq//q/+AhHgUOzogNFCC15aZgYGU=)
                          3: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl (hash: Y7jhYE2diDKwwiEBdlFl4bT7rnIqI1ikEhR3oIlI73w=)
                          4: 3130332e3136372e3136382e302f32342d3234203d3e20313431393835.roa (hash: F9M4JE/BbL7KPtInfZ2De6C86BPHzRjVLxJovHmyJzk=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl
                          rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 09:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4b:9b:7e:a7:b8:db:f7:60:c4:7d:7f:47:1b:b9:53:35:0a:04:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B
        Validity
            Not Before: Apr 23 08:45:03 2025 GMT
            Not After : Apr 26 10:55:03 2025 GMT
        Subject: CN=845805EFBEDDC3819E9E4FB876990B63ADFF911D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:9a:7e:bd:1a:6b:df:09:25:c1:ba:8f:b1:
                    e1:02:e1:af:95:5d:05:0b:f0:ea:79:7c:9e:40:bf:
                    bb:58:17:6f:97:cb:03:9a:07:92:89:f2:3d:a6:97:
                    49:ff:a7:ae:54:aa:7f:d2:8e:7c:0a:66:2f:e2:fd:
                    01:80:5a:d1:24:33:82:8c:95:d2:ef:e4:f8:6a:5f:
                    41:bd:6f:0c:4a:b1:24:e9:38:9b:c7:f4:6c:cb:6c:
                    28:c0:79:b5:06:4f:90:fb:b7:0f:af:71:48:22:34:
                    1c:6f:e2:e8:27:7a:be:0d:95:52:a7:4c:a8:59:01:
                    cb:01:60:6b:e7:fb:e4:e2:dc:99:47:cd:13:90:90:
                    84:0e:2f:c6:3b:7c:37:bd:fd:34:57:31:ff:c5:72:
                    72:34:f5:4a:92:64:be:48:5e:0d:3d:0d:9e:3d:e0:
                    1d:52:dc:79:c9:f7:cc:ff:45:56:21:ae:02:8c:97:
                    86:71:de:a5:e9:7e:d4:46:5a:a4:66:a3:d7:7a:e4:
                    58:50:72:21:32:29:e8:97:b1:cb:9d:b3:3e:d4:da:
                    cc:48:bf:81:89:3c:87:83:9b:b1:6f:9d:34:d7:b9:
                    ec:9a:86:39:41:21:b7:ca:0c:3d:96:11:7e:c5:6c:
                    0b:f5:24:4f:06:24:b2:c4:fd:e4:d0:f4:c2:3a:8e:
                    18:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:58:05:EF:BE:DD:C3:81:9E:9E:4F:B8:76:99:0B:63:AD:FF:91:1D
            X509v3 Authority Key Identifier:
                keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:bb:ce:d1:45:52:23:51:69:6c:0e:09:3a:53:ba:47:6c:50:
         95:61:74:0c:db:b2:36:2c:03:44:2f:69:48:2c:d8:e8:7a:bc:
         f8:08:fe:b3:6f:6c:5b:2f:33:cf:75:71:3c:0b:8e:e8:ed:6c:
         92:f4:ac:1e:dc:6e:3d:4d:bb:70:1b:88:91:86:d9:83:09:45:
         01:1b:68:f7:3d:4b:d4:c2:7c:a9:dd:fa:32:74:e7:bf:d0:28:
         0b:f8:ec:cb:90:58:97:41:4c:51:4f:45:76:5e:3c:ad:5d:12:
         12:05:99:ec:58:89:9f:3a:ba:60:f2:d5:83:7f:8b:25:24:3d:
         db:63:5d:a1:20:13:89:ae:60:24:d2:60:94:c3:3c:44:de:01:
         b2:00:3f:92:2c:82:48:25:f2:c4:05:8d:40:14:91:d1:83:c7:
         54:65:6b:5e:a7:96:66:90:0c:2c:c1:68:5c:95:20:f1:9b:64:
         84:65:8a:cb:61:ba:3c:ee:f2:fa:1c:62:1b:d6:27:fa:7b:87:
         8b:3f:94:41:6a:f9:b4:9d:16:e3:76:a3:61:d6:16:50:79:c6:
         e0:69:56:c2:6f:87:17:9e:85:cf:dd:e7:5d:2a:bf:c3:e4:ab:
         f7:20:4d:04:89:a6:61:fb:4e:de:9d:ab:9d:7b:be:b1:dd:88:
         bc:16:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:12:12 2025 by rpki-client on console.sobornost.net