Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft
File:                     B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json)
Hash identifier:          vN5UlC0d/ae3I64TE10Ea80jFOLnFg5F1n0QK18cuJQ=
Subject key identifier:   F5:1C:31:14:DC:F2:83:74:17:BB:46:0E:04:1E:A4:88:C6:53:2B:08
Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB
Certificate issuer:       /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB
Certificate serial:       73D50DB51277718A8164B44E8469CA3BEFB6C245
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft
Manifest number:          01EA
Signing time:             Thu 24 Apr 2025 20:02:14 +0000
Manifest this update:     Thu 24 Apr 2025 19:57:14 +0000
Manifest next update:     Mon 28 Apr 2025 06:58:14 +0000
Files and hashes:         1: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: AIOs31+uc6Pf39KqIrmoIMFECvqIwvPghHjhEcSTbxg=)
                          2: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: oyYL/ZrPIXcKrR/gCu+KLuQHBsbf7zO4u+0wSABNiSw=)
                          3: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: PRfy6lOFFKWihnTqUJnk4WVw3DqVoaVBjKd6CK92PA8=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl
                          rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d5:0d:b5:12:77:71:8a:81:64:b4:4e:84:69:ca:3b:ef:b6:c2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB
        Validity
            Not Before: Apr 24 19:57:14 2025 GMT
            Not After : Apr 28 06:58:14 2025 GMT
        Subject: CN=F51C3114DCF2837417BB460E041EA488C6532B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:49:1b:57:5b:e0:24:19:8c:a8:b5:1c:31:
                    38:df:91:26:83:bd:ad:6c:6f:dc:40:20:82:b4:a1:
                    d5:68:4c:ac:d7:4b:ec:3d:bf:4b:ca:77:48:de:d3:
                    c3:e0:4c:96:52:39:53:90:02:2d:57:80:82:aa:db:
                    69:3d:1e:99:d3:ce:03:a5:82:90:b7:fd:23:33:51:
                    9b:54:e9:0b:09:81:12:26:3c:f6:17:72:63:f3:e4:
                    a0:38:38:10:ae:be:04:3c:9b:b6:11:ed:37:7c:f3:
                    6d:5e:98:c2:ae:a8:ba:eb:c4:c0:b0:ad:f9:46:8a:
                    e2:33:92:53:40:d1:63:ab:98:70:5f:df:91:45:71:
                    9c:75:ca:8f:6f:c7:03:c8:5a:34:a2:e8:2a:0b:ca:
                    18:5d:07:fb:45:1b:93:c3:70:42:bf:e2:57:65:18:
                    97:15:99:79:20:91:d8:58:b8:db:e1:5d:c7:76:8f:
                    e4:19:da:14:66:35:fd:55:14:64:4a:9d:0e:b1:15:
                    e8:32:f4:7b:b0:c6:ff:c3:21:84:16:7f:a8:04:a1:
                    22:7c:ab:47:3a:43:e3:9e:c5:b9:37:f3:c3:c5:aa:
                    a9:be:0f:2b:a5:d8:fc:0f:cb:18:b9:55:72:b6:03:
                    d0:f2:f3:82:c1:1b:66:3a:fa:32:cb:be:a4:2f:05:
                    85:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1C:31:14:DC:F2:83:74:17:BB:46:0E:04:1E:A4:88:C6:53:2B:08
            X509v3 Authority Key Identifier:
                keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:fb:d4:75:b2:98:6f:8a:68:8b:51:5c:85:b1:84:e8:75:
         51:37:12:e6:09:1b:47:f2:9c:64:1d:5d:d6:94:57:b6:08:dd:
         a8:c9:55:87:93:40:56:65:d0:ca:4d:18:d0:e3:32:79:2a:de:
         c7:dc:db:3b:4c:c5:8d:11:59:42:1b:1d:80:6e:01:5d:fc:a9:
         61:65:0a:68:ac:fd:0a:e9:0f:9d:b9:4f:fb:6f:6a:9c:da:6b:
         f5:27:b5:ec:7f:63:56:a1:f8:b9:0f:17:28:15:13:47:d2:be:
         44:c7:51:20:40:4a:f1:70:be:ff:b1:3d:7c:65:bc:fd:85:b9:
         02:a5:7f:da:7d:4c:38:94:f6:9c:90:69:13:99:2a:f2:22:b9:
         16:55:c7:74:6e:22:87:ec:1f:c0:cf:c2:39:83:7b:e3:a3:ae:
         c6:24:16:06:9a:3e:9f:0d:c9:eb:73:b0:e5:1b:26:ce:bd:82:
         97:b9:91:b3:9d:b1:94:85:af:4b:c4:56:42:84:1b:5e:a3:6a:
         c4:d1:32:22:79:59:fd:d1:db:5f:27:8d:3a:2f:a2:8c:6a:10:
         a3:c5:30:b5:9f:86:36:cb:ee:e6:20:9a:c6:45:16:38:51:91:
         2f:70:b8:b1:c4:90:37:ff:a0:da:39:f6:a1:be:1d:73:4a:ca:
         00:f9:b3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:06:29 2025 by rpki-client on console.sobornost.net