Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft
File:                     46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft (raw, json)
Hash identifier:          4zT3jcvrXxAbSWmrjm2q408bYKIMwnC7iF+1I276Zdc=
Subject key identifier:   3C:B9:60:01:DE:40:3B:DC:D8:E1:B1:42:33:59:90:14:96:9A:5D:CF
Authority key identifier: 46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5
Certificate issuer:       /CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5
Certificate serial:       478F5E7D2B1CD75A6C19275A0BC637534AA4A493
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft
Manifest number:          EE
Signing time:             Fri 25 Apr 2025 14:52:17 +0000
Manifest this update:     Fri 25 Apr 2025 14:47:17 +0000
Manifest next update:     Tue 29 Apr 2025 02:51:17 +0000
Files and hashes:         1: 3131352e3138372e33312e302f32342d3234203d3e203538333639.roa (hash: eSDeohW1AIrtqkyx+N42CigZjVYBQYQN7zrX2JowEv8=)
                          2: 46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl (hash: CenXQp6yvhZPIiCInY0vTHHQhVOwikkZRSNaHX8SFrc=)
                          3: 3131352e3138372e33302e302f32342d3234203d3e203538333639.roa (hash: HFThGBdFjmidhJmHMDXCoS6ycnhZcQfS2zGjsOicK3g=)
                          4: 3131352e3138372e33302e302f32332d3233203d3e203538333639.roa (hash: JLabqGnM8+YvvH11bFEaYilBFvdmjlNw60f4ngZNgvw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl
                          rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 00:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8f:5e:7d:2b:1c:d7:5a:6c:19:27:5a:0b:c6:37:53:4a:a4:a4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5
        Validity
            Not Before: Apr 25 14:47:17 2025 GMT
            Not After : Apr 29 02:51:17 2025 GMT
        Subject: CN=3CB96001DE403BDCD8E1B14233599014969A5DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:71:9e:1d:af:40:0f:cd:6b:b4:9f:10:7a:26:
                    fd:eb:27:88:ba:67:b5:04:af:12:55:ba:14:c1:97:
                    62:d4:ff:c7:95:1e:bb:22:01:a0:bc:51:07:0d:28:
                    2e:78:40:53:67:2a:9f:80:35:d6:93:34:f1:4d:63:
                    39:1d:3e:2b:cf:98:af:60:71:8f:9b:3a:79:f6:7f:
                    7c:54:02:ab:6a:e7:06:67:81:98:59:c6:84:2a:61:
                    37:90:be:eb:92:17:b0:31:fd:35:4f:9c:37:25:32:
                    22:e7:37:aa:b6:7a:ca:e4:9e:f5:2e:a7:2c:c8:92:
                    ed:b9:08:68:6c:69:c1:81:01:90:4c:62:71:fb:36:
                    64:a8:0e:50:28:30:35:c6:3e:8d:d0:d7:9a:83:28:
                    13:7e:cd:4e:e6:23:64:27:77:e6:36:25:41:c8:81:
                    95:43:b8:26:a0:15:8e:95:ca:1b:4c:99:cc:08:64:
                    c3:a5:76:e6:84:98:98:9f:67:b2:d6:72:32:49:28:
                    70:0f:ce:88:99:0b:0c:c3:83:16:ee:7f:fe:d8:f3:
                    ab:f2:84:23:f9:ad:ed:69:60:94:0d:77:7f:de:f5:
                    17:68:40:f9:03:48:05:87:30:d6:6a:3d:79:db:78:
                    c4:8c:c5:31:e5:c4:ce:63:89:5c:94:03:31:bd:59:
                    64:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B9:60:01:DE:40:3B:DC:D8:E1:B1:42:33:59:90:14:96:9A:5D:CF
            X509v3 Authority Key Identifier:
                keyid:46:A0:85:9F:8C:7C:C2:C2:E7:D5:CB:C8:E4:36:34:F8:A3:DD:AA:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05409ed-9f40-4f5a-b5ee-a088da2f5978/0/46A0859F8C7CC2C2E7D5CBC8E43634F8A3DDAAF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:65:8b:33:20:85:14:c4:0a:0f:c8:23:c5:5e:5c:a7:ff:93:
         99:31:bb:1d:d6:f1:a6:4d:7b:b7:56:69:73:26:a5:7f:84:ab:
         41:27:12:a9:08:d9:aa:6c:54:54:5c:ab:30:7c:f3:29:e8:7b:
         98:41:45:d4:b7:f3:26:67:2f:a7:7c:de:6e:1b:f4:30:19:f7:
         56:a2:b4:fa:73:18:e9:54:80:15:01:f0:fd:b8:59:6f:13:50:
         d5:dc:57:89:ff:c8:ed:38:a0:96:b1:da:48:da:71:46:04:8f:
         d8:da:12:4a:9e:49:8c:3f:6b:44:f3:1e:b5:b6:45:51:d8:9c:
         8a:ea:28:fb:3e:d6:93:0a:cd:b1:48:25:43:85:79:ef:ca:72:
         10:25:f2:1c:fc:2d:90:45:91:76:c9:bd:dd:77:5e:aa:6d:0f:
         a0:c2:c4:24:fa:49:91:8e:0d:b0:75:eb:49:0e:97:e9:f5:54:
         8c:9b:86:db:c6:6b:9c:3f:cf:7b:8d:09:a6:a7:9b:aa:f1:b0:
         95:1f:58:d7:a7:51:19:04:22:49:ff:12:5e:f3:32:19:9c:fb:
         8e:78:a6:da:e6:ac:3b:62:2e:00:86:9c:a7:66:4a:f8:83:a2:
         b9:72:17:fd:07:ac:3b:ea:e3:6a:8f:b1:f5:b3:f2:ad:92:5f:
         41:23:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:12:02 2025 by rpki-client on console.sobornost.net