Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft
File:                     99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json)
Hash identifier:          8+RjZR5UUbsqSdp61IGOnxvEAmW35oByrE2nyfobw1U=
Subject key identifier:   B7:B7:36:3A:05:CD:09:CD:9B:E3:C2:AB:7B:86:86:95:41:DC:24:E1
Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF
Certificate issuer:       /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF
Certificate serial:       47CF28BCFAF6FBADF8C215CAB8171D844E8139E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft
Manifest number:          04C6
Signing time:             Thu 24 Apr 2025 04:31:22 +0000
Manifest this update:     Thu 24 Apr 2025 04:26:22 +0000
Manifest next update:     Sun 27 Apr 2025 10:39:22 +0000
Files and hashes:         1: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: lb+K+WTWt6br4aXEPHp1eJt2rMKTqZMuVAejfy0YULU=)
                          2: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: 2oBBIApjDIkn78HBOtMM45LVJMLI8KSMSVE17OL8l50=)
                          3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: dvULEqhoA17mvmbEhTbWzJ8r/xF0W2Vgy0H0TBErNcI=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl
                          rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 08:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:cf:28:bc:fa:f6:fb:ad:f8:c2:15:ca:b8:17:1d:84:4e:81:39:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF
        Validity
            Not Before: Apr 24 04:26:22 2025 GMT
            Not After : Apr 27 10:39:22 2025 GMT
        Subject: CN=B7B7363A05CD09CD9BE3C2AB7B86869541DC24E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:8f:02:d3:49:0b:f2:7a:9c:e7:f4:26:60:
                    00:3d:64:ce:8d:d6:35:ed:0f:35:d8:39:2a:8c:ed:
                    98:1a:1f:c0:2e:bc:37:b1:27:e6:c2:81:42:67:f3:
                    7d:f1:d0:eb:2a:c8:94:bc:27:63:8e:7a:ee:92:3a:
                    ba:d0:65:7f:62:7b:8a:ef:35:59:f6:46:ae:12:31:
                    ce:bc:10:5d:fa:29:f3:08:26:11:94:f8:59:3d:da:
                    74:23:b5:a8:55:a9:42:b3:7a:e7:6a:b8:b4:5d:cc:
                    64:d4:fa:d6:b1:e6:7e:88:97:91:4e:46:e8:0f:8d:
                    f1:5e:ee:b0:11:e3:7b:ae:41:0a:88:7b:03:b5:02:
                    80:b0:34:d1:9f:e4:83:16:33:75:c9:0e:8b:bc:0c:
                    5f:83:19:e9:e5:0b:cf:89:da:15:25:66:5f:e8:f6:
                    f1:ec:40:7b:6a:66:15:18:fc:00:7f:f1:56:93:e1:
                    03:87:31:6f:be:0c:c1:e5:b3:43:ed:c1:f6:97:19:
                    07:08:9a:5a:71:a6:c2:da:4e:7a:b4:6b:36:8e:5b:
                    90:08:40:a4:be:03:c1:0b:35:0b:0f:47:9e:e5:6f:
                    8c:6e:4c:33:60:63:67:39:8d:a9:c6:29:97:03:e4:
                    31:7b:c8:6a:56:0f:35:07:06:aa:c8:67:81:9c:f1:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B7:36:3A:05:CD:09:CD:9B:E3:C2:AB:7B:86:86:95:41:DC:24:E1
            X509v3 Authority Key Identifier:
                keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2c:84:c7:78:03:a9:47:d0:60:a7:d1:ef:2a:30:1d:07:c0:
         95:0c:c9:d4:b7:1d:b7:d9:ca:3f:bf:f3:07:ed:fb:6c:13:35:
         02:fb:f3:5e:c5:02:7e:0c:33:64:94:27:94:dd:ce:0f:96:96:
         d2:b6:87:20:17:93:50:f6:f6:66:f9:ba:23:c1:9d:a5:18:5b:
         c5:49:42:c8:e3:02:43:91:55:57:fa:4f:2c:3e:ca:21:21:e1:
         bb:c1:47:3e:ae:8b:ff:99:d0:a2:db:ca:29:b0:f8:b3:e0:fe:
         4c:88:72:50:84:76:0b:ad:4e:23:6c:0f:45:c5:ca:48:8d:f0:
         59:df:f2:b2:25:c3:d1:bf:f4:d4:3b:fa:0c:f7:89:fa:51:65:
         bf:e8:fa:12:58:45:99:69:87:7d:cf:4d:a7:f9:31:31:03:fd:
         80:5f:eb:cd:95:2a:3f:6c:cf:cb:e8:33:7f:5d:70:cf:be:e3:
         4b:8c:71:bb:e2:21:64:60:a6:7f:27:7d:8a:79:b1:a8:3b:9d:
         12:06:fc:c1:89:17:55:9c:2e:94:45:bf:76:d7:20:7b:b5:66:
         5b:c3:4d:bc:6a:ba:aa:58:92:96:46:36:6b:36:1d:de:59:43:
         52:a2:0c:f2:6b:d1:71:3c:cd:24:46:4b:8f:d3:1d:c5:bf:2c:
         d6:ef:df:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 06:50:02 2025 by rpki-client on console.sobornost.net