Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
File:                     2A2E185B12379871494114828D5D5D713982E469.mft (raw, json)
Hash identifier:          9IgaIJa+2Gd5ZQQOQRh9RnwXUHr4JjZ+tSDUhNTmlDE=
Subject key identifier:   95:B4:AE:38:56:3F:15:07:CC:93:7C:6F:59:14:38:5D:E9:3D:1E:01
Authority key identifier: 2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69
Certificate issuer:       /CN=2A2E185B12379871494114828D5D5D713982E469
Certificate serial:       122CAB7EF5E7CA272206262CE1AB9B063361EE55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
Manifest number:          CB
Signing time:             Thu 08 May 2025 16:10:47 +0000
Manifest this update:     Thu 08 May 2025 16:05:47 +0000
Manifest next update:     Sun 11 May 2025 18:46:47 +0000
Files and hashes:         1: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: V+YjkhbIydkZ+oGTevb+ipQYCKYryW/Ib0ruhbJynjY=)
                          2: 2A2E185B12379871494114828D5D5D713982E469.crl (hash: dXmPvvSjlZ2twyHlNWtb4OEFDy6Oj1YioSfk9kSWRGI=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl
                          rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 18:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2c:ab:7e:f5:e7:ca:27:22:06:26:2c:e1:ab:9b:06:33:61:ee:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2E185B12379871494114828D5D5D713982E469
        Validity
            Not Before: May  8 16:05:47 2025 GMT
            Not After : May 11 18:46:47 2025 GMT
        Subject: CN=95B4AE38563F1507CC937C6F5914385DE93D1E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:07:8b:8d:40:95:27:ea:cd:0b:3a:24:f6:
                    61:14:81:7f:77:6a:50:a9:56:f8:e4:3d:48:51:9e:
                    60:d5:1b:41:23:71:d4:a9:a8:ab:c5:df:11:ec:1a:
                    76:1a:59:a4:16:7e:5b:78:99:17:93:75:77:bc:49:
                    1c:6d:7e:90:a4:3e:a0:fa:fa:76:fd:25:0a:4d:27:
                    3e:95:9b:30:c7:3b:c9:52:65:5f:f2:d5:c0:68:d2:
                    ff:0d:bf:7b:a6:53:b7:52:cb:bd:e5:12:dd:0c:58:
                    30:a8:af:d3:d0:2d:18:ec:84:44:d6:ed:35:59:e1:
                    74:9d:06:5a:35:62:7f:88:36:44:37:c1:2a:2b:cc:
                    b6:12:38:be:ab:a9:f0:7e:a0:28:7a:92:2e:03:9e:
                    c6:33:5c:f3:aa:9c:b2:5b:fd:f7:5f:27:b3:a0:45:
                    b5:81:ae:cb:e3:15:93:ed:7f:57:48:23:83:8a:e0:
                    a6:2a:25:64:e3:15:77:3a:6a:ce:bd:81:76:57:5f:
                    73:5e:a4:f0:b8:d1:1c:46:a8:0f:5e:67:c3:e1:11:
                    36:31:fe:a4:46:41:6d:a4:dc:bf:38:2c:dd:70:d2:
                    ce:37:b7:c4:38:60:22:23:8d:1c:60:47:20:e5:9d:
                    1f:95:60:52:52:f6:4a:06:8d:bf:c9:8a:69:45:2f:
                    03:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B4:AE:38:56:3F:15:07:CC:93:7C:6F:59:14:38:5D:E9:3D:1E:01
            X509v3 Authority Key Identifier:
                keyid:2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cd:45:53:6b:dc:5c:f5:94:6d:de:08:fe:58:3a:d7:12:30:
         53:36:23:49:c2:44:a2:3d:e1:6e:4b:20:5b:dd:c1:13:32:71:
         69:e9:e4:26:07:a9:28:a2:51:54:fa:17:da:b0:81:53:b0:10:
         0c:c7:fb:ad:18:85:9c:6d:1b:57:25:cf:a0:aa:e3:97:83:55:
         79:3b:90:48:37:57:6a:c6:42:a6:12:49:c9:8f:24:ec:48:9f:
         f3:54:8c:51:63:4e:85:0c:e7:35:63:52:f8:8f:ac:bb:50:b0:
         8e:52:6c:ee:09:60:4d:95:fb:2c:6d:b0:fb:3a:95:c6:c1:03:
         e3:6f:9f:a6:3d:d8:fd:1c:16:25:4a:f9:f3:dc:0f:b3:88:99:
         63:25:37:3b:43:f7:0a:39:9b:13:6a:33:b0:a1:25:0c:c0:2d:
         08:52:00:15:d3:d6:4d:84:c3:1e:aa:ea:2c:9b:9b:7d:05:f7:
         5d:3b:6a:5f:5d:00:d8:e3:c7:e5:c6:17:7c:74:b4:cd:5a:83:
         8a:d3:3b:2d:c6:12:66:1a:20:c3:1e:e6:d4:18:ba:23:83:c8:
         34:cc:1e:07:3f:0a:f2:b5:2a:25:8d:df:31:67:e7:8f:9c:eb:
         79:fd:cd:ee:c1:af:29:e5:c9:e5:89:9a:fc:bb:7c:79:06:db:
         26:f9:1b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:45:05 2025 by rpki-client