Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft
File:                     5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json)
Hash identifier:          FJ+LJQwLzw+KgalsSlLMkcawVhYcIU+1RQQJumS7vf0=
Subject key identifier:   3B:CD:00:2D:93:D2:F3:55:0F:48:5A:B3:F7:77:7D:91:37:42:F4:2E
Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C
Certificate issuer:       /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C
Certificate serial:       28CFB897DD4E41AA439BCBC91FC4FCD958545FE4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft
Manifest number:          01DE
Signing time:             Thu 24 Apr 2025 21:11:32 +0000
Manifest this update:     Thu 24 Apr 2025 21:06:32 +0000
Manifest next update:     Mon 28 Apr 2025 03:53:32 +0000
Files and hashes:         1: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: oDfouRUG9Q3gP76+cJluUeYjhwxX116YwTG/X1UiEKo=)
                          2: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: oi1E0wXppUfh5s/itQbaLCWl0ZRSTssS2U+PKE93us4=)
                          3: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: X6Rsg1TfWPdkmJNWv+FJnlS7WWkveBK6RzkbYc8aDOc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl
                          rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cf:b8:97:dd:4e:41:aa:43:9b:cb:c9:1f:c4:fc:d9:58:54:5f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C
        Validity
            Not Before: Apr 24 21:06:32 2025 GMT
            Not After : Apr 28 03:53:32 2025 GMT
        Subject: CN=3BCD002D93D2F3550F485AB3F7777D913742F42E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d7:10:85:a5:de:0c:6c:23:82:92:f5:4c:62:
                    3b:44:d2:b1:d1:9f:b2:40:e5:44:fe:4c:21:37:64:
                    d9:f8:a3:2e:19:a1:b0:f1:65:84:0e:b7:98:26:2b:
                    43:8d:39:0b:16:01:d0:f5:95:94:ba:f7:8c:e6:08:
                    f6:28:a0:69:c1:51:78:02:c6:87:16:a7:48:d5:0c:
                    57:0f:83:84:6e:c7:d9:fc:58:4e:2c:1a:0a:68:2d:
                    ff:0b:67:d2:83:d6:74:12:6b:5f:e2:29:ac:e7:a9:
                    44:ec:cb:5b:27:85:ae:1a:fd:f5:f3:dd:f5:9c:3b:
                    94:1a:b6:7a:7c:64:59:d5:ab:6e:31:02:a2:c6:8e:
                    07:81:1e:a1:16:c4:d5:d2:f7:94:d1:fe:13:51:61:
                    0a:6f:c1:72:3c:58:34:9b:08:f7:62:1d:8e:b0:1c:
                    9c:a2:eb:2c:c5:6b:f9:dc:6a:7d:64:cf:c2:84:e1:
                    a0:05:eb:da:40:5c:a8:d5:db:f5:5c:b5:cf:f1:c3:
                    5e:0c:3a:f0:b2:75:3c:de:56:3e:c1:7b:f8:87:7f:
                    7c:7f:1b:80:5a:a2:35:31:64:ec:30:64:2c:33:7b:
                    52:e4:89:7f:42:c1:ee:a6:ee:99:24:7c:cc:34:43:
                    94:f0:f2:e5:c5:49:0d:cb:d8:88:b8:7b:33:81:b3:
                    e7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CD:00:2D:93:D2:F3:55:0F:48:5A:B3:F7:77:7D:91:37:42:F4:2E
            X509v3 Authority Key Identifier:
                keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:20:2f:45:20:79:2c:3a:b0:96:34:27:b7:89:59:ef:ae:81:
         c3:bc:ef:26:d7:59:1b:0c:ab:2c:d5:46:a7:10:63:5f:58:c0:
         51:23:52:d5:43:d4:36:2f:d0:73:1f:c0:17:2a:3e:be:f9:17:
         37:fa:b2:36:d6:73:d4:11:f7:9c:35:fa:04:e3:7d:0b:ef:c2:
         a2:6f:73:08:66:ec:2c:e1:14:7d:9f:88:a5:3c:52:8b:0c:d2:
         27:1b:cb:a0:db:05:e0:72:39:79:e4:53:08:9c:b0:bf:f6:d1:
         59:75:63:04:22:e5:eb:70:05:a4:d4:c3:38:d8:ec:f1:99:e4:
         a9:d3:81:af:e9:f4:9c:57:de:16:1a:0a:b2:fa:a8:3b:88:47:
         da:e4:60:a3:aa:cb:a9:a4:db:d7:91:26:87:f9:90:78:56:ca:
         b5:cb:96:59:c1:9a:62:f3:32:60:77:dd:65:c1:46:00:84:ed:
         c4:3e:f6:08:e2:15:13:dd:95:4e:d2:33:fc:41:48:a9:2a:02:
         bb:8d:c4:ef:88:16:9a:1d:f6:c1:da:75:38:12:96:f4:cc:40:
         1c:53:ad:ee:0f:c0:57:13:b4:98:0d:eb:89:a9:25:b9:1c:8c:
         24:62:0a:0f:f1:c7:97:76:29:a0:55:de:3e:d6:d0:b1:47:04:
         8b:a3:fa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:28 2025 by rpki-client on console.sobornost.net