Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft
File:                     B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json)
Hash identifier:          TPLuK1PujbBjqRLKO/oCJQv7jcfkwQWfOZ4Fn+PrO7k=
Subject key identifier:   31:86:80:58:1F:93:F5:92:B9:86:55:3E:8D:B3:34:1D:E9:1D:E5:78
Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D
Certificate issuer:       /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D
Certificate serial:       4F7C36FA6E490877FF62EBA69BE3A844A42A77EB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft
Manifest number:          032A
Signing time:             Fri 25 Apr 2025 03:01:43 +0000
Manifest this update:     Fri 25 Apr 2025 02:56:43 +0000
Manifest next update:     Mon 28 Apr 2025 05:55:43 +0000
Files and hashes:         1: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: FX4Q+Mt/Hqf/OwbJIkoW7kFZNQsf+oRrhT6doeTPMgE=)
                          2: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: tC3T/rdL7HC4KrGko4ncVw3LiTl1MjKHPwmCa4pfhng=)
                          3: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: 6WkpZ20xefUghdGod8o1R28Jk1X9QFiiotFRMKKRiDQ=)
                          4: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: otls6UBoTEqi4ZjFKb5HX8qIQkPDL/Sf9x+smQVWKwA=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl
                          rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 20:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7c:36:fa:6e:49:08:77:ff:62:eb:a6:9b:e3:a8:44:a4:2a:77:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D
        Validity
            Not Before: Apr 25 02:56:43 2025 GMT
            Not After : Apr 28 05:55:43 2025 GMT
        Subject: CN=318680581F93F592B986553E8DB3341DE91DE578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:6a:5e:b6:51:50:c2:6c:35:7c:ce:0b:75:
                    ef:25:e8:86:a9:dc:fa:cd:f8:f3:01:87:c5:9c:27:
                    a3:65:47:72:e6:eb:60:00:b6:4b:b3:53:d0:e5:c1:
                    96:fa:13:bd:58:09:64:c9:c2:28:81:ba:62:25:ce:
                    6f:9a:9e:41:77:02:08:14:91:8e:c0:45:4e:d8:3a:
                    9c:99:d0:ed:08:2e:3d:0f:1c:ed:c8:b2:5a:69:4f:
                    e1:9a:10:71:d4:02:36:77:db:a1:62:b6:0d:2b:cf:
                    7e:9c:3f:d2:36:1e:9c:39:61:e9:33:54:0e:2c:15:
                    e5:c9:a9:40:f2:0e:90:23:86:8f:80:ab:1a:47:dc:
                    d8:a8:02:d1:71:3f:0a:6a:7b:b7:97:5f:3f:3b:a4:
                    bb:d4:50:17:b1:cc:8b:bd:c4:ce:b9:86:94:0a:c9:
                    07:e1:ee:40:52:b4:eb:c6:90:bd:fa:db:1d:dd:d9:
                    d5:16:ec:fd:f3:e8:bf:01:d3:f0:6b:52:6b:58:7f:
                    6c:bb:e2:a0:a9:2a:cd:39:94:20:8c:18:45:c4:ce:
                    8e:ef:75:8a:18:37:ef:98:dc:f8:a3:ce:48:52:06:
                    38:81:45:4a:8a:40:85:65:5a:9a:96:8e:cf:c1:5b:
                    61:72:cc:57:69:1e:a1:24:a0:6d:d5:2b:cb:fb:dc:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:80:58:1F:93:F5:92:B9:86:55:3E:8D:B3:34:1D:E9:1D:E5:78
            X509v3 Authority Key Identifier:
                keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1f:4a:9f:c2:56:c7:3c:1d:dc:98:f8:b4:e2:03:a8:7e:f1:
         80:4a:7a:33:91:4d:ef:80:2e:ca:d8:a1:56:64:55:dc:a9:d4:
         98:e5:26:00:16:54:57:69:af:86:e8:46:c7:ea:99:de:d8:1d:
         53:3f:d5:45:1e:55:f1:77:3b:e4:90:4d:07:ba:94:78:ca:77:
         c7:ac:c4:63:26:74:e2:98:99:a2:d0:b9:01:fa:6d:64:d1:c8:
         48:82:d7:d9:a0:3c:39:16:5d:13:c2:1d:df:8e:02:c9:5e:c5:
         1d:9f:95:2b:b5:af:6b:ec:b3:71:df:5d:35:79:65:a8:d8:95:
         c8:c3:a5:04:57:e2:af:bb:56:2c:47:21:bb:00:a1:31:e0:0b:
         6b:5b:de:d6:5b:98:1a:60:c3:90:94:60:13:2a:64:42:b4:8c:
         c8:3c:c0:ce:37:ff:04:6a:06:f1:b7:c6:fb:10:47:3d:cd:6c:
         ff:e2:2d:0e:0c:fe:aa:d4:1d:6f:0f:60:48:75:ff:dd:0b:14:
         0c:ef:a2:c8:cf:c7:35:23:f4:c8:ec:91:28:a4:1b:ff:e2:1b:
         52:60:de:c6:20:91:f8:fe:32:a7:f8:6f:2e:5a:c5:2a:1d:aa:
         a7:c1:70:4d:c1:0a:29:e0:26:f4:17:09:52:95:e7:e6:e9:ca:
         31:9e:85:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:24 2025 by rpki-client on console.sobornost.net