Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft
File:                     4B35C20AD3085CF1B9FAEA049AD742539E090205.mft (raw, json)
Hash identifier:          g0WuqD6HCvjnWRzBwu9TBMxTZnkt0VpQ4IFcGBRmr90=
Subject key identifier:   20:1C:0E:59:21:C2:61:CF:86:A3:22:10:B3:84:D1:2B:19:A4:B5:C3
Authority key identifier: 4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05
Certificate issuer:       /CN=4B35C20AD3085CF1B9FAEA049AD742539E090205
Certificate serial:       20416AF2D64FCB4E8AC8423BD2AB184971724A7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft
Manifest number:          0229
Signing time:             Thu 24 Apr 2025 18:31:08 +0000
Manifest this update:     Thu 24 Apr 2025 18:26:08 +0000
Manifest next update:     Sun 27 Apr 2025 20:44:08 +0000
Files and hashes:         1: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: lOzsBAzFryNZCB+/jSigc4I1GSMJcpM/tHVhQtqL83s=)
                          2: 4B35C20AD3085CF1B9FAEA049AD742539E090205.crl (hash: OQytvfQLCRLuqyol4myD0tc4ZVnglntFEUUySAKsUvQ=)
                          3: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: V8A5qvlja2NYXpcRnbKxugWJ4eOJeRmdBpf3sJh4ueQ=)
                          4: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: JkbWHivPhJsD3g1oehsQXHSkUe1IApwcb1eZRN7L4oQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl
                          rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:41:6a:f2:d6:4f:cb:4e:8a:c8:42:3b:d2:ab:18:49:71:72:4a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B35C20AD3085CF1B9FAEA049AD742539E090205
        Validity
            Not Before: Apr 24 18:26:08 2025 GMT
            Not After : Apr 27 20:44:08 2025 GMT
        Subject: CN=201C0E5921C261CF86A32210B384D12B19A4B5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:37:11:3d:16:75:39:0a:19:85:86:4f:10:
                    2f:ec:86:eb:aa:d0:de:aa:08:91:ae:2b:ac:09:5b:
                    90:c4:5f:6b:95:b1:41:ad:ff:6c:5a:80:cb:f5:f2:
                    a1:71:97:46:09:3d:3b:c9:50:8e:b5:9a:d1:a2:90:
                    70:22:a7:75:a8:59:07:1f:b0:6a:d1:c6:33:e0:61:
                    77:ec:31:ed:be:d9:c6:89:fb:ff:d3:22:56:01:a9:
                    bb:ef:a4:df:a9:78:56:4e:99:aa:f4:0b:4c:e0:59:
                    b3:e2:64:77:52:01:c6:6e:9b:0c:f3:f2:2e:28:1b:
                    c0:0e:61:84:e3:2d:5c:2b:66:c3:b9:68:af:d1:0d:
                    66:b0:38:a2:ae:cd:30:2a:00:a7:a9:37:86:62:27:
                    c4:7a:9a:f7:56:4c:5e:6b:93:e5:9f:0b:eb:88:53:
                    1b:68:f8:f4:ae:47:3d:f3:2f:99:88:2f:eb:b3:ae:
                    5e:bf:25:77:c6:ce:64:71:ff:8d:7a:9a:f3:06:88:
                    68:c1:7d:89:dc:85:cf:91:f7:a2:70:82:c4:a3:c4:
                    39:c3:24:03:1c:dc:2e:b4:b7:57:ee:e0:5c:2b:89:
                    3e:14:d2:03:dc:0f:2f:45:99:d2:1c:fd:d9:98:c0:
                    3d:da:a1:f6:0b:80:ab:2b:30:86:5e:31:66:70:6f:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1C:0E:59:21:C2:61:CF:86:A3:22:10:B3:84:D1:2B:19:A4:B5:C3
            X509v3 Authority Key Identifier:
                keyid:4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:51:18:a4:20:a2:4c:e4:02:25:a8:ea:9d:4a:49:d4:bd:b1:
         05:f8:60:38:83:d7:70:32:09:4b:6f:dc:98:92:f0:a9:b6:b7:
         2b:71:6c:54:f1:2c:e4:b8:46:6c:33:e1:99:33:92:ca:2a:fa:
         05:bf:3c:97:3c:bd:5f:65:3f:b7:f3:20:9b:67:5e:88:ff:b1:
         ca:41:4d:ab:c2:cf:53:72:8c:fd:60:04:8d:76:78:f1:4d:51:
         71:89:a0:b8:0c:a4:5c:be:e0:97:7f:0c:98:79:66:82:20:8b:
         a7:cd:1b:df:31:1f:b2:c5:c6:96:04:a8:66:db:f8:05:3f:ca:
         81:39:3e:9c:9a:d6:85:cb:26:b5:66:70:8c:e6:e0:be:ae:77:
         01:5b:a7:35:a4:4d:44:00:70:9a:e5:b2:2f:4b:24:55:e1:8b:
         f7:df:67:50:b8:a5:92:d4:fd:f9:00:38:4e:e3:a8:cf:3a:05:
         66:ce:fc:9e:3c:3c:62:c1:c7:c9:f2:d8:3a:10:95:72:45:ff:
         2c:b8:d8:fd:d7:77:87:d0:9b:43:e9:b0:76:a4:d4:1e:f1:53:
         ed:7c:90:97:19:b2:f3:6d:2d:39:bf:e8:a5:2b:4d:74:9a:8e:
         69:d0:d6:06:03:78:1e:7a:c3:ad:15:ec:14:4f:0a:ff:cb:57:
         16:01:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:24 2025 by rpki-client on console.sobornost.net