Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft
File:                     45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json)
Hash identifier:          sWCTCSCqCcJmuqR91S0yYgda5l20thw/XPMmrWThnb8=
Subject key identifier:   67:CA:29:2E:FA:C4:38:33:BC:87:9A:C2:E1:0B:12:C7:2E:BA:3B:06
Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD
Certificate issuer:       /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD
Certificate serial:       1CA2A716C3002A01632F9FF57F2896C8162605
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft
Manifest number:          01F5
Signing time:             Fri 25 Apr 2025 02:52:17 +0000
Manifest this update:     Fri 25 Apr 2025 02:47:17 +0000
Manifest next update:     Mon 28 Apr 2025 12:37:17 +0000
Files and hashes:         1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: Wf/Sts4H+2Cp4Akdmc86PmhW6MX435Z4+jGg9nZzt34=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl
                          rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a2:a7:16:c3:00:2a:01:63:2f:9f:f5:7f:28:96:c8:16:26:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD
        Validity
            Not Before: Apr 25 02:47:17 2025 GMT
            Not After : Apr 28 12:37:17 2025 GMT
        Subject: CN=67CA292EFAC43833BC879AC2E10B12C72EBA3B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:28:54:2e:3b:d7:ed:e0:e6:70:c3:a9:01:
                    b0:bd:d4:50:73:2b:15:7f:45:4c:99:5b:8b:80:0f:
                    9b:7b:41:11:a6:02:d9:be:76:7d:21:54:10:f7:9d:
                    3a:d2:0e:9f:74:92:cc:99:ec:1c:b2:f0:ac:c5:d0:
                    da:98:b1:28:5e:f9:2d:e1:87:13:41:13:ab:69:48:
                    e2:57:62:dc:d3:00:ec:5b:c3:a2:ef:aa:46:8c:06:
                    6e:a0:b2:9d:4a:df:de:d1:2e:5e:10:2c:aa:69:1c:
                    b5:8e:05:73:ff:b7:3f:a8:fd:47:55:4c:2a:db:44:
                    43:0a:f3:52:14:19:4e:52:cd:ea:b7:43:4f:e0:fc:
                    a0:34:cb:1b:d4:9c:1b:b7:2d:2a:42:50:ae:5b:a9:
                    7a:75:b4:eb:da:14:44:55:89:c8:98:c5:11:52:bc:
                    20:bb:55:2b:67:5b:3e:d7:92:1b:61:da:f1:91:99:
                    7a:76:5f:db:3c:65:a5:38:c5:df:21:8f:a8:9e:c3:
                    84:5a:ff:e2:1d:3e:d4:22:43:b9:e1:96:d9:b3:a3:
                    64:d1:8d:fe:ca:89:c0:a9:fe:f0:7b:61:16:e1:4c:
                    4f:91:6a:36:78:f0:2c:84:a4:5b:61:4a:99:8a:71:
                    0e:d9:a9:b5:d4:dc:75:6a:76:b6:59:37:37:85:8c:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CA:29:2E:FA:C4:38:33:BC:87:9A:C2:E1:0B:12:C7:2E:BA:3B:06
            X509v3 Authority Key Identifier:
                keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b0:7f:86:30:70:6e:41:e2:ec:bb:f1:8a:e8:31:ec:9b:46:
         59:ec:ab:8f:b2:29:65:d2:e6:15:0a:66:30:c8:0d:9f:18:b9:
         cf:e4:5d:44:2e:25:7c:1b:e1:3c:13:c9:23:75:db:c6:2b:c0:
         31:9a:f9:3b:72:ee:c1:6e:58:c2:ec:d4:e7:63:bc:5e:bb:7e:
         99:1f:b6:01:9a:fc:10:49:ed:a3:ba:b9:13:6f:06:d1:c0:6f:
         b5:96:03:19:70:77:69:0f:55:5e:3c:92:20:ff:79:34:82:6e:
         c9:79:5d:67:52:ba:90:67:8d:e8:a7:64:02:bc:8d:ac:df:5f:
         72:9f:7a:d3:5d:c3:8a:82:60:f9:d7:e1:64:35:33:bf:ab:65:
         e0:95:06:65:1e:56:85:3e:df:4c:1b:fa:7b:ad:f4:90:ae:7f:
         07:5c:69:33:8e:e7:3f:3f:b6:0d:04:7d:aa:44:c3:c9:4a:de:
         ed:75:1a:03:60:1a:95:f4:96:ca:e9:0f:17:ef:44:eb:a3:ad:
         97:9b:6d:b1:9c:3f:16:33:c1:50:8b:f6:5d:8c:dc:40:80:c6:
         98:32:fd:e9:d3:7b:ae:49:41:99:2d:bd:3d:6c:ac:c0:fb:26:
         4b:41:15:d9:8e:c1:e0:0d:6c:fb:da:dd:4b:6c:f1:c3:9f:5d:
         67:a2:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net