Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
File:                     C58E232004125E8B46AB63B600900D92EB71A3B1.mft (raw, json)
Hash identifier:          tku+9X7vZYYi6/TEjN6ZASqukEUrs+sD3RXxCJYge9g=
Subject key identifier:   D9:09:0C:8E:41:F5:A2:64:CE:01:E9:0B:AE:19:6C:68:E8:62:57:FF
Authority key identifier: C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1
Certificate issuer:       /CN=C58E232004125E8B46AB63B600900D92EB71A3B1
Certificate serial:       1D6ED5C99AE7A2D5367439F652043539477985C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
Manifest number:          014D
Signing time:             Thu 03 Apr 2025 18:51:44 +0000
Manifest this update:     Thu 03 Apr 2025 18:46:44 +0000
Manifest next update:     Sun 06 Apr 2025 19:33:44 +0000
Files and hashes:         1: C58E232004125E8B46AB63B600900D92EB71A3B1.crl (hash: tte89vG8XpCUwg6TxQmrLB1jQrB8XKDi8v7y7s5cuBU=)
                          2: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: F98mLIPqX7xW346RCv6louyBJXE+C84977MPR7enwBM=)
                          3: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: szZrGfxfjDvhYMSxWdXsF8gNn9uKqD0sZuSt9/Sp4zs=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl
                          rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Apr 2025 19:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6e:d5:c9:9a:e7:a2:d5:36:74:39:f6:52:04:35:39:47:79:85:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C58E232004125E8B46AB63B600900D92EB71A3B1
        Validity
            Not Before: Apr  3 18:46:44 2025 GMT
            Not After : Apr  6 19:33:44 2025 GMT
        Subject: CN=D9090C8E41F5A264CE01E90BAE196C68E86257FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:c4:54:1a:ae:59:f1:f6:2f:43:68:3f:46:
                    2b:52:6c:26:3d:98:6a:c3:11:1a:4b:1b:cc:8e:02:
                    b1:41:43:65:cd:8b:86:a1:33:a1:fa:40:34:a0:d9:
                    5a:30:41:21:ee:77:17:87:0f:14:ba:ab:69:ed:ec:
                    90:7a:f9:67:69:0a:c1:a1:b1:3f:1c:41:62:77:e4:
                    b0:cd:d6:b1:9f:c5:dd:86:b2:d0:9b:8a:b6:79:dd:
                    53:3e:1a:30:fd:59:02:96:32:89:82:36:3b:5f:60:
                    a8:6d:ad:3e:b2:d7:05:76:4d:c8:8e:2d:fd:31:aa:
                    72:a7:63:b5:6c:e7:67:d2:83:09:bf:c3:7a:25:f7:
                    01:5e:d7:2b:b9:01:bf:11:ee:b9:fd:22:a9:54:f8:
                    6b:23:e7:fd:3e:b3:68:0a:c9:75:dc:de:34:fe:86:
                    25:82:f9:bb:03:a9:62:15:f3:11:86:08:9d:83:9c:
                    79:78:ee:b3:ac:36:38:f4:b5:9b:4d:23:36:04:89:
                    1e:7e:e8:b3:be:32:a1:9b:e2:8b:41:46:54:86:36:
                    73:32:ff:44:55:32:cf:71:d6:c0:fc:81:42:c4:40:
                    60:0a:6d:4f:05:35:23:6a:6e:5d:e6:c8:e1:4d:fe:
                    e9:76:6c:35:3f:c0:f8:ad:b7:91:dc:25:1f:c5:c9:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:09:0C:8E:41:F5:A2:64:CE:01:E9:0B:AE:19:6C:68:E8:62:57:FF
            X509v3 Authority Key Identifier:
                keyid:C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:a1:1d:8e:e5:90:52:80:ed:72:6f:ba:df:c8:37:b4:8a:
         97:2c:42:dd:4a:d6:8a:7f:79:e4:0e:83:35:32:43:79:8f:db:
         68:a6:72:d3:1a:91:79:79:a8:23:9e:4e:1f:60:38:67:13:d0:
         67:7a:17:f5:89:24:33:16:94:a7:4d:ca:82:02:00:90:88:f7:
         5c:42:70:8f:79:f6:dc:64:17:d7:ef:6f:3d:51:1f:8e:31:cb:
         e0:82:4d:f4:10:1a:43:4c:7f:ce:58:f6:1e:67:b0:18:d9:b7:
         c6:0f:f7:51:2a:4b:88:a7:7e:70:fe:35:95:e0:f0:69:0f:50:
         85:77:e1:02:ed:0a:11:35:c5:e7:31:0e:fc:6f:37:31:b6:1b:
         23:62:9f:76:8c:41:8d:37:ae:a7:4d:8c:ef:93:e6:88:50:fc:
         eb:92:97:e5:ab:f7:bb:45:24:98:c3:ee:3e:de:92:6d:43:95:
         38:9c:78:25:ac:d5:f2:5b:25:d3:a5:e8:56:5d:bf:e3:94:64:
         dc:59:09:ca:9b:bb:97:bc:6b:c0:04:08:27:a3:b5:55:6d:02:
         41:b4:0f:34:4e:45:e5:26:9c:c4:dd:a6:22:24:d5:61:b5:b7:
         29:8c:60:a4:ff:da:92:d7:b6:ab:8c:77:94:c0:e3:d7:c9:bc:
         70:68:c5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:42 2025 by rpki-client