Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft
File:                     CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json)
Hash identifier:          98jpazpsgjB9d6hXN7U42S2Ij73fNOD8YMNT34j9m3A=
Subject key identifier:   00:C7:F5:99:84:3B:8D:F1:EA:A6:9E:DC:71:6F:B8:49:AB:F5:14:81
Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC
Certificate issuer:       /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC
Certificate serial:       0BA13110254975701DA0E1BCA74C3AC022373280
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft
Manifest number:          0270
Signing time:             Thu 24 Apr 2025 03:12:00 +0000
Manifest this update:     Thu 24 Apr 2025 03:07:00 +0000
Manifest next update:     Sun 27 Apr 2025 13:17:00 +0000
Files and hashes:         1: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: 5d3EX0aX4Ndb1jdcVhXA8RzJj6HvswsdG9hsHzDIetQ=)
                          2: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: bgwOzvgwDnc9ezV4Ont6t+9ZL+lOmgTEDPxux2zorVE=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl
                          rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a1:31:10:25:49:75:70:1d:a0:e1:bc:a7:4c:3a:c0:22:37:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC
        Validity
            Not Before: Apr 24 03:07:00 2025 GMT
            Not After : Apr 27 13:17:00 2025 GMT
        Subject: CN=00C7F599843B8DF1EAA69EDC716FB849ABF51481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:e3:f9:ef:72:44:b7:84:8b:27:10:84:cc:
                    3a:b9:38:5b:ce:da:47:5b:62:37:51:86:61:c2:f2:
                    a6:de:d5:da:59:cc:17:39:45:24:53:99:6a:41:7a:
                    3f:c5:27:7a:dd:a9:f6:16:b4:8e:75:91:f7:49:a0:
                    db:48:90:ff:8e:f7:12:05:15:aa:c5:35:82:eb:7e:
                    da:96:eb:79:77:f6:94:09:01:49:b8:94:8e:80:c9:
                    0d:ff:96:2e:68:c0:6f:ed:44:94:a1:dc:c3:91:1c:
                    54:b3:1e:f3:b3:db:3c:d5:8e:f8:74:98:21:65:42:
                    07:7f:82:c3:2c:fb:0f:31:0d:f9:a3:8a:9b:e8:b2:
                    15:93:1a:44:50:23:ae:12:bb:29:19:09:47:6a:1b:
                    0b:06:d7:ad:d6:15:88:89:0d:28:66:c7:38:fa:4a:
                    3c:63:e6:fd:0a:9d:12:18:c3:84:7c:de:e8:5f:e9:
                    b3:0b:25:de:dd:49:f6:f6:0e:59:0f:52:b2:f6:dc:
                    58:e8:8a:1f:a4:ea:1b:0c:3a:7a:42:8e:a2:ff:33:
                    89:c4:ba:14:9b:2f:82:3f:60:81:c5:fd:f0:db:6e:
                    d6:b5:7d:e0:31:ea:ad:f9:47:28:99:eb:bb:51:27:
                    89:f0:45:e0:6f:bc:68:91:bd:25:d6:2b:b3:13:c4:
                    72:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C7:F5:99:84:3B:8D:F1:EA:A6:9E:DC:71:6F:B8:49:AB:F5:14:81
            X509v3 Authority Key Identifier:
                keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3d:28:fd:9a:07:a7:ad:89:1f:68:8a:d4:e0:09:35:cd:1d:
         88:73:f8:f2:20:de:71:5e:70:dc:1e:76:a2:34:a1:bd:57:ce:
         8c:ea:1c:b0:09:6a:1f:41:d6:dd:a1:5d:0e:d0:ab:d4:c8:35:
         1d:2d:64:bc:34:2f:7c:bf:0f:f9:cb:8b:5f:cd:b9:bd:28:97:
         2e:2b:89:0c:e5:0e:5d:b3:aa:39:95:85:b6:6c:c7:ae:87:49:
         a1:8e:2f:2e:c5:80:58:88:36:ed:f7:45:a0:f7:36:e3:15:ff:
         83:c8:55:24:e1:22:00:1d:4e:78:cd:49:1b:66:15:4a:f5:4d:
         fb:18:12:0c:fc:1a:16:e2:b1:29:6a:6b:59:7c:27:f6:5c:f4:
         15:8b:10:c0:75:ed:c2:ac:55:d0:66:dc:6c:bf:9a:4a:9c:ef:
         b5:16:86:f6:9c:a5:3d:a9:11:14:55:bf:a1:85:0e:01:1b:63:
         29:24:58:d0:2c:c1:91:78:db:0e:62:08:c4:1b:ce:43:78:31:
         ef:c3:cc:b1:e1:68:cd:7b:8f:58:5f:6f:87:cf:43:88:b0:31:
         cc:f6:4b:0b:4a:d8:33:d7:e5:14:d2:7c:d0:02:a0:ea:04:a1:
         53:dc:6b:bd:e6:c3:7d:e6:18:c7:27:b2:98:eb:29:7b:30:ab:
         43:51:aa:dc
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUC6ExECVJdXAdoOG8p0w6wCI3MoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG
RTdFOUFFQzAeFw0yNTA0MjQwMzA3MDBaFw0yNTA0MjcxMzE3MDBaMDMxMTAvBgNV
BAMTKDAwQzdGNTk5ODQzQjhERjFFQUE2OUVEQzcxNkZCODQ5QUJGNTE0ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb7eP573JEt4SLJxCEzDq5OFvO
2kdbYjdRhmHC8qbe1dpZzBc5RSRTmWpBej/FJ3rdqfYWtI51kfdJoNtIkP+O9xIF
FarFNYLrftqW63l39pQJAUm4lI6AyQ3/li5owG/tRJSh3MORHFSzHvOz2zzVjvh0
mCFlQgd/gsMs+w8xDfmjipvoshWTGkRQI64SuykZCUdqGwsG163WFYiJDShmxzj6
Sjxj5v0KnRIYw4R83uhf6bMLJd7dSfb2DlkPUrL23Fjoih+k6hsMOnpCjqL/M4nE
uhSbL4I/YIHF/fDbbta1feAx6q35RyiZ67tRJ4nwReBvvGiRvSXWK7MTxHLPAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAMf1mYQ7jfHqpp7ccW+4Sav1FIEwHwYDVR0j
BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0
RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF
OUFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWNjYzVmNjQtZWQ2Mi00ODQ4LThj
MzgtNDJkZjQ4ZTM0YmI2LzAvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVB
RThGRTdFOUFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABA9KP2aB6etiR9oitTgCTXNHYhz+PIg3nFe
cNwedqI0ob1XzozqHLAJah9B1t2hXQ7Qq9TINR0tZLw0L3y/D/nLi1/Nub0oly4r
iQzlDl2zqjmVhbZsx66HSaGOLy7FgFiINu33RaD3NuMV/4PIVSThIgAdTnjNSRtm
FUr1TfsYEgz8GhbisSlqa1l8J/Zc9BWLEMB17cKsVdBm3Gy/mkqc77UWhvacpT2p
ERRVv6GFDgEbYykkWNAswZF42w5iCMQbzkN4Me/DzLHhaM17j1hfb4fPQ4iwMcz2
SwtK2DPX5RTSfNACoOoEoVPca73mw33mGMcnspjrKXswq0NRqtw=
-----END CERTIFICATE-----
Generated at Thu Apr 24 06:49:50 2025 by rpki-client on console.sobornost.net