Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft
File:                     B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json)
Hash identifier:          UO+kFlosWnm/iT8vwDwQTnptGTqyZidAaoS277+QLNc=
Subject key identifier:   55:6E:F2:4D:68:AA:CC:1B:AF:D4:88:A6:6F:AD:D3:00:75:C9:09:D7
Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94
Certificate issuer:       /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
Certificate serial:       1E7CAA663F51E9BF861D09F459DC46C41B516C63
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft
Manifest number:          017F
Signing time:             Thu 24 Apr 2025 11:00:04 +0000
Manifest this update:     Thu 24 Apr 2025 10:55:04 +0000
Manifest next update:     Sun 27 Apr 2025 11:05:04 +0000
Files and hashes:         1: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: Lx6mbXqTbsqqqJEaZ6Ptl1cSIXULA4hNI34A7lM8ago=)
                          2: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 13a296YbpXPKiDroOx9RoYtV5Gqcvos+cOx12thufiw=)
                          3: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: KJdelarQPEiEpWJL1KWL6JdF9ZBYTSugo9fs0XeH+Qc=)
                          4: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: Pk+CfBb09D2NLm+w/mIdTLsk/cAe1V1lpiWgoIeGFHc=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl
                          rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 11:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7c:aa:66:3f:51:e9:bf:86:1d:09:f4:59:dc:46:c4:1b:51:6c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
        Validity
            Not Before: Apr 24 10:55:04 2025 GMT
            Not After : Apr 27 11:05:04 2025 GMT
        Subject: CN=556EF24D68AACC1BAFD488A66FADD30075C909D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:93:03:3a:e6:1a:f0:a2:e0:a4:97:1f:35:c3:
                    27:ed:3e:21:15:57:e1:6d:e7:2c:f1:65:9f:65:3f:
                    54:13:88:ac:bf:8a:76:f4:5d:e3:7b:33:8d:c0:92:
                    a9:28:5c:e8:c3:7e:64:cf:42:d0:08:d5:b3:f9:1a:
                    ec:92:23:0e:ee:7a:90:01:1c:16:e3:e4:13:53:8c:
                    19:ee:63:3b:28:fe:0e:ca:73:1d:37:cd:19:eb:e0:
                    b6:5d:bd:53:58:0c:47:e0:9b:25:1f:9a:4a:05:86:
                    17:80:ab:3a:65:e6:bf:e8:89:2a:88:81:49:53:a7:
                    79:7f:2a:30:a6:a6:47:d5:a7:3d:24:39:ce:07:ee:
                    0f:a1:5f:27:c1:38:db:c2:67:9b:85:af:72:9d:ba:
                    56:67:99:8e:ae:c6:7a:68:f8:6b:cb:1d:64:36:f9:
                    e4:0a:02:05:bf:a6:55:ec:91:f3:c5:dd:1e:37:79:
                    9a:8a:aa:be:7c:fd:51:c5:11:bf:72:ef:38:01:93:
                    94:9c:0a:ab:6d:95:4f:b4:fc:e7:29:16:65:47:4f:
                    d7:b7:ad:13:88:89:e2:57:13:cc:31:f2:a6:b9:41:
                    34:d6:ef:d3:22:e1:e8:af:a1:13:fc:72:70:76:28:
                    bf:60:bc:c1:9f:33:09:c8:78:50:d2:6c:9c:23:fc:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6E:F2:4D:68:AA:CC:1B:AF:D4:88:A6:6F:AD:D3:00:75:C9:09:D7
            X509v3 Authority Key Identifier:
                keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6a:31:97:23:43:fa:fd:a1:b9:7d:60:5e:e2:ac:ce:dd:4a:
         7f:20:27:59:55:ba:d9:e0:90:4f:90:04:cd:74:ad:a9:cd:7b:
         dc:8c:79:f2:2a:cc:c4:33:fb:91:9c:da:9b:95:e5:bb:11:69:
         ac:7a:8a:cd:1b:57:71:a0:61:0d:eb:84:bf:e2:18:32:83:c8:
         08:c2:79:6a:42:b6:78:f9:44:c2:59:c6:f8:19:d3:15:2f:0d:
         10:bb:f4:d0:5c:f5:07:61:1b:58:c2:3c:26:0f:73:d5:6c:4a:
         54:60:07:4f:ec:bf:bd:fc:15:01:16:4d:ac:b9:a6:a1:3f:1b:
         4f:41:78:3e:f0:0a:54:ce:5f:79:2e:51:13:4e:68:25:cf:2b:
         0d:44:ad:44:30:aa:8e:99:1b:c6:2a:6d:ed:bb:80:63:c0:7d:
         47:4f:b4:9d:79:e6:dd:3b:fa:5e:31:3f:96:40:36:7f:aa:1d:
         6b:d6:da:b2:fd:90:e7:ea:52:4d:2f:d5:43:e9:2b:4e:97:1e:
         25:37:71:38:9f:9b:da:86:10:aa:8d:74:1c:b7:e5:1e:93:cc:
         ca:d9:c4:92:70:4f:df:4e:ed:10:bc:86:f5:29:32:d4:f2:21:
         93:c4:8f:ca:65:39:62:16:19:3a:e9:4b:3f:60:42:e8:90:d2:
         88:fa:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:39:00 2025 by rpki-client on console.sobornost.net