Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
File:                     B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json)
Hash identifier:          tyIVoIQKE3kT85NMndKHd9Nkhz3RP/tsCe0Y6+8mBBo=
Subject key identifier:   1E:56:EF:30:98:B9:41:E2:1A:77:30:EB:E6:14:69:E6:C9:94:D0:C8
Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5
Certificate issuer:       /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5
Certificate serial:       4206EF8D445145ACBDE34DF5BAB64818CDB69F2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
Manifest number:          0152
Signing time:             Sat 19 Apr 2025 20:32:06 +0000
Manifest this update:     Sat 19 Apr 2025 20:27:06 +0000
Manifest next update:     Wed 23 Apr 2025 01:26:06 +0000
Files and hashes:         1: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=)
                          2: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: HAAX2ip2BudMNSV2gZgXNASpKQsT3SkeQr+2seWymdU=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl
                          rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Apr 2025 01:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:06:ef:8d:44:51:45:ac:bd:e3:4d:f5:ba:b6:48:18:cd:b6:9f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5
        Validity
            Not Before: Apr 19 20:27:06 2025 GMT
            Not After : Apr 23 01:26:06 2025 GMT
        Subject: CN=1E56EF3098B941E21A7730EBE61469E6C994D0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:df:95:0e:59:db:8c:6d:c1:49:6e:b7:08:08:
                    f4:71:36:2f:2e:0f:af:46:9e:77:4a:2d:84:b0:be:
                    d4:3c:2a:d8:5e:9f:08:b2:c4:e3:f5:4b:d0:6c:89:
                    64:36:e3:dc:9c:e8:1e:30:0e:7e:85:c6:cd:5f:8c:
                    f6:d3:f4:79:48:a9:fd:0b:b2:9d:0c:f6:b4:94:99:
                    29:db:0c:7c:ff:b5:8c:37:5e:13:3d:1d:55:03:fe:
                    10:17:d3:36:b3:18:27:fa:10:93:14:96:85:50:f4:
                    37:38:13:68:2d:3b:8e:51:d7:03:df:c6:68:14:ee:
                    e1:6a:8e:4a:d2:10:70:bf:c0:31:76:62:fa:ee:66:
                    12:6a:21:16:8b:fe:be:d3:2e:00:87:86:65:bc:ae:
                    36:ac:bd:0e:a5:ca:b6:6d:e3:3d:7b:e3:25:ec:a3:
                    48:9d:01:03:54:fa:07:63:a7:64:a4:d0:e8:2a:5f:
                    88:a8:d1:36:4d:37:a2:1f:1a:a6:c7:5c:e5:02:23:
                    56:d6:14:86:2b:e9:41:d6:83:82:7f:5d:b6:5c:7b:
                    6d:32:06:6e:59:92:49:23:ca:0c:38:bf:1e:d3:20:
                    bc:91:3d:fc:49:a5:d3:6d:98:e9:cf:84:f2:84:8b:
                    64:c8:f7:d4:b6:d4:91:d5:d1:9e:4f:93:0a:84:4e:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:56:EF:30:98:B9:41:E2:1A:77:30:EB:E6:14:69:E6:C9:94:D0:C8
            X509v3 Authority Key Identifier:
                keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b4:ab:d8:5a:d4:fd:f0:5a:43:80:4e:06:24:21:d5:3b:2c:
         94:a1:23:0f:7e:5d:5e:39:dc:7c:88:05:5b:cd:f1:f5:cf:7a:
         22:b4:9d:a9:1f:82:50:1d:cb:6a:de:60:72:8d:3e:8a:3b:53:
         3a:f3:a5:a9:f9:28:3b:b0:32:b8:8c:e4:bf:39:c8:10:13:15:
         01:80:73:31:c3:28:db:01:ab:9a:66:a8:c1:2e:c4:02:bb:a7:
         36:d8:b8:f6:34:60:67:a9:31:c2:a9:e8:13:e5:cf:ff:5f:98:
         dc:d2:37:ea:0d:49:82:b8:f7:90:be:1a:ca:6f:11:ec:2b:2b:
         ea:d8:48:39:f4:2a:be:78:5b:19:ac:f5:1b:75:64:5b:3e:8e:
         b4:ee:76:0e:ad:73:5d:7d:40:53:6a:e8:d4:72:38:9f:85:2c:
         ca:5e:49:74:b7:53:7c:c0:09:e7:d7:0e:8c:c1:45:16:4f:c2:
         83:5f:38:a3:04:72:05:a2:85:08:dc:8b:d9:b2:a6:06:75:15:
         6c:25:33:5f:85:98:15:66:28:01:b4:cf:05:4e:c5:08:07:f8:
         af:16:ff:9b:f2:18:21:e4:ee:b2:6f:d3:b3:8d:89:2f:d4:fb:
         fd:bf:c6:51:a7:40:26:03:53:91:34:6e:69:89:57:9a:e7:f6:
         af:ea:7e:58
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQgbvjURRRay94031urZIGM22ny8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC
MEFFQTBCNTAeFw0yNTA0MTkyMDI3MDZaFw0yNTA0MjMwMTI2MDZaMDMxMTAvBgNV
BAMTKDFFNTZFRjMwOThCOTQxRTIxQTc3MzBFQkU2MTQ2OUU2Qzk5NEQwQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa35UOWduMbcFJbrcICPRxNi8u
D69GnndKLYSwvtQ8KthenwiyxOP1S9BsiWQ249yc6B4wDn6Fxs1fjPbT9HlIqf0L
sp0M9rSUmSnbDHz/tYw3XhM9HVUD/hAX0zazGCf6EJMUloVQ9Dc4E2gtO45R1wPf
xmgU7uFqjkrSEHC/wDF2YvruZhJqIRaL/r7TLgCHhmW8rjasvQ6lyrZt4z174yXs
o0idAQNU+gdjp2Sk0OgqX4io0TZNN6IfGqbHXOUCI1bWFIYr6UHWg4J/XbZce20y
Bm5Zkkkjygw4vx7TILyRPfxJpdNtmOnPhPKEi2TI99S21JHV0Z5PkwqEThcDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHlbvMJi5QeIadzDr5hRp5smU0MgwHwYDVR0j
BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0
RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF
QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz
MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD
OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADm0q9ha1P3wWkOATgYkIdU7LJShIw9+XV45
3HyIBVvN8fXPeiK0nakfglAdy2reYHKNPoo7Uzrzpan5KDuwMriM5L85yBATFQGA
czHDKNsBq5pmqMEuxAK7pzbYuPY0YGepMcKp6BPlz/9fmNzSN+oNSYK495C+Gspv
EewrK+rYSDn0Kr54Wxms9Rt1ZFs+jrTudg6tc119QFNq6NRyOJ+FLMpeSXS3U3zA
CefXDozBRRZPwoNfOKMEcgWihQjci9mypgZ1FWwlM1+FmBVmKAG0zwVOxQgH+K8W
/5vyGCHk7rJv07ONiS/U+/2/xlGnQCYDU5E0bmmJV5rn9q/qflg=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:27:19 2025 by rpki-client