Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft
File:                     B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json)
Hash identifier:          VUAlPi9WRceScXWEn/MJVYKp+MOLXw7HeC8gRI7u7+A=
Subject key identifier:   7C:0A:AF:AA:01:6F:15:C0:E7:78:E4:03:86:B8:54:46:95:72:BD:A5
Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16
Certificate issuer:       /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16
Certificate serial:       0B0589E0EC8C153F8902D95A275895EFC69C5408
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft
Manifest number:          04C8
Signing time:             Fri 25 Apr 2025 00:01:37 +0000
Manifest this update:     Thu 24 Apr 2025 23:56:37 +0000
Manifest next update:     Mon 28 Apr 2025 01:23:37 +0000
Files and hashes:         1: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: 2Yejf2TO5nElHp7FxuVEDkIuxrfFmsnyZagtKDJIO88=)
                          2: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: YNIKXhCu96zFsrQV6czIyxi/s+xy0qZdKsnevhNw6GY=)
                          3: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: UBYfmW/0Vdtelm2GF29PEwyiHpI4JTVps5cODwOrHok=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl
                          rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:05:89:e0:ec:8c:15:3f:89:02:d9:5a:27:58:95:ef:c6:9c:54:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16
        Validity
            Not Before: Apr 24 23:56:37 2025 GMT
            Not After : Apr 28 01:23:37 2025 GMT
        Subject: CN=7C0AAFAA016F15C0E778E40386B854469572BDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:a0:06:f3:48:0d:f4:8d:f7:9b:2e:62:e0:
                    48:34:a9:0b:e7:cc:01:e5:ec:9f:e7:9d:d7:6a:c2:
                    7c:86:97:cc:4d:d7:db:aa:4e:4e:97:55:df:d5:0f:
                    56:a7:f3:02:1f:7a:c5:76:cd:82:24:4a:b6:21:fa:
                    93:4f:43:9d:ad:a8:03:4d:38:4a:a6:a9:c3:73:3e:
                    ea:61:ec:80:b1:65:1e:76:1b:f0:d0:f6:b1:b5:64:
                    fd:a9:f4:fc:ea:2d:7d:01:0d:9c:20:42:ad:e5:ea:
                    2a:2d:7c:53:d8:cc:80:1f:29:da:58:6e:75:1f:19:
                    35:71:46:60:f8:b9:92:b1:8a:7e:ef:97:5b:18:fe:
                    f1:bf:11:1d:3c:24:14:88:fa:cc:43:a5:d9:f3:9f:
                    6f:08:bf:d4:6c:20:0c:0a:df:12:6c:ac:cb:5a:08:
                    e0:75:4c:82:cc:67:2f:a6:08:80:d9:c1:59:6c:a3:
                    00:5c:2f:aa:37:c5:8e:c4:d4:1a:16:a7:80:30:a5:
                    e5:6c:a4:00:86:27:3a:46:01:b2:bf:34:a3:ab:6a:
                    a0:cf:ca:16:42:3c:e4:8b:76:f2:04:61:dc:37:32:
                    91:8f:07:1b:23:16:48:12:60:83:e2:66:25:02:60:
                    88:e5:f1:a9:7a:71:11:e1:59:5b:76:4d:d1:af:78:
                    b0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0A:AF:AA:01:6F:15:C0:E7:78:E4:03:86:B8:54:46:95:72:BD:A5
            X509v3 Authority Key Identifier:
                keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a3:eb:77:d2:a6:dc:23:66:98:5d:a3:0d:3f:19:8e:6e:61:
         53:a8:14:ca:02:59:3e:01:c4:cc:97:4b:65:42:bd:35:a5:78:
         14:c8:15:4a:27:b3:62:25:20:2f:9d:79:89:4a:66:b6:da:c2:
         7b:65:97:0d:b7:2c:ce:10:53:9e:d4:91:97:01:fe:23:9b:b1:
         e0:92:dd:7f:bb:18:51:1a:c1:24:f8:5d:fa:f4:fe:f5:06:8d:
         02:57:d2:dd:7c:d8:5a:99:3f:aa:55:01:89:62:5e:78:f0:13:
         b3:9b:93:60:03:92:f0:c4:b8:2f:0a:b9:03:c6:4b:c8:58:3d:
         45:8a:f6:d2:0b:96:ee:ae:3e:b5:30:2f:20:23:27:ab:d0:ef:
         1e:8d:52:93:14:97:b5:97:dc:8b:13:e2:55:97:f5:74:35:30:
         96:52:c2:21:d5:45:90:ee:2e:43:0f:b8:d2:99:a6:13:e0:37:
         2a:3b:4f:39:95:25:b5:28:84:da:fd:00:ea:53:3c:cc:6e:f1:
         f7:cc:02:6c:6a:e7:77:5f:73:10:20:c6:7d:25:fb:4b:0f:9c:
         73:2d:ca:63:d5:4d:9e:69:cd:e4:c0:8d:c7:b6:f8:83:0d:a1:
         a7:9e:91:2c:25:c0:7c:51:ea:ea:1d:f4:15:22:54:e5:2d:9d:
         c6:dd:cc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net