Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft
File:                     3B1029D44B93CA0397DA506FE1E2147503641EC6.mft (raw, json)
Hash identifier:          Rd3IRPMhDxF8IpedTPOxsrFS/rJGeYRT07w/gFRLAa0=
Subject key identifier:   45:67:49:2C:7C:44:28:57:80:35:BA:4B:12:82:63:A4:16:95:49:E7
Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6
Certificate issuer:       /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
Certificate serial:       0A1DF3F40C49B34596F7CCFF1CBE012EA873A4EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft
Manifest number:          016B
Signing time:             Tue 06 May 2025 10:10:42 +0000
Manifest this update:     Tue 06 May 2025 10:05:42 +0000
Manifest next update:     Fri 09 May 2025 21:42:42 +0000
Files and hashes:         1: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: bY09S58JuRMnRZFg/qJz8l2GALj8CEukiohA16BsJD4=)
                          2: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: woe8wTOCkgzw1AhZmS0qc2WfDSk5Txn9xI0A9rGDrdg=)
                          3: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: fEJQJx/Txzr+vMmd8tCh4JvmoJuakGNPJHf3zsUQTcY=)
                          4: 3B1029D44B93CA0397DA506FE1E2147503641EC6.crl (hash: QmEsF2BtYkeAcjAByOQdqynHKPEe0KXscn/4NaQ7dRk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl
                          rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 21:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1d:f3:f4:0c:49:b3:45:96:f7:cc:ff:1c:be:01:2e:a8:73:a4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6
        Validity
            Not Before: May  6 10:05:42 2025 GMT
            Not After : May  9 21:42:42 2025 GMT
        Subject: CN=4567492C7C4428578035BA4B128263A4169549E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:82:37:73:f0:97:b5:4d:4c:bb:95:d3:88:
                    28:56:49:c6:12:b0:57:ba:f0:43:8d:28:c7:94:f2:
                    0a:8a:80:bf:d9:22:f9:f5:91:c8:93:cb:c1:15:c3:
                    49:a8:52:0d:cd:ab:be:13:3e:61:45:85:33:73:bc:
                    80:30:92:3b:08:1d:ad:60:1a:92:00:77:b4:53:21:
                    26:3f:0f:58:fa:8a:0d:4e:9e:6d:1c:b2:37:85:88:
                    0a:4c:dc:d5:4f:f5:64:0d:d4:0d:f9:52:4e:c0:e7:
                    d0:54:42:cb:e6:30:87:0a:6a:9a:72:60:63:9c:63:
                    5d:93:9a:46:11:77:81:49:9c:eb:0d:8a:ae:c2:f5:
                    f6:62:ed:0c:cc:8e:df:c8:3c:ed:62:71:b1:e7:a0:
                    6f:e4:8d:e1:bb:a5:e7:f6:a8:ca:ad:ab:bf:04:90:
                    bd:94:93:7a:f4:a6:5c:d4:ae:25:57:06:22:20:ed:
                    d7:a3:49:4d:5d:36:72:d7:60:04:ef:74:0e:76:72:
                    54:06:e5:e4:2a:c3:65:81:d1:d2:0d:3e:12:24:fe:
                    31:71:55:a0:0d:b8:36:5b:cd:47:d7:c1:0f:8a:08:
                    cb:08:19:b5:4a:cf:94:91:fa:0c:5c:18:c9:12:f9:
                    f6:28:7d:cb:47:a2:a8:ce:ab:f5:d7:12:a3:34:e4:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:67:49:2C:7C:44:28:57:80:35:BA:4B:12:82:63:A4:16:95:49:E7
            X509v3 Authority Key Identifier:
                keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cb:a3:02:25:47:33:5c:68:91:79:50:20:df:cf:ae:bc:a7:
         df:81:db:8b:fc:7d:d5:c8:18:f5:82:73:a0:03:25:46:0a:a3:
         0e:6f:c4:6b:4b:a0:d6:36:6a:94:42:c8:3f:f6:8d:f1:13:d2:
         45:46:7d:9b:e6:3a:0e:43:be:78:af:e2:80:02:53:1c:98:5c:
         33:05:52:bc:fc:5e:3f:4f:d5:75:e0:73:f9:fd:8c:8b:9c:69:
         34:97:ea:b7:53:7b:29:43:38:39:f5:d6:3d:d0:3f:6a:77:ef:
         f9:93:38:c6:83:7d:b5:f8:72:d7:13:c7:4f:36:a1:c3:1b:4d:
         5a:ca:0f:03:ad:52:90:b2:cb:b6:a2:a5:ee:fe:c9:d7:88:ce:
         96:c7:04:38:17:41:c1:82:fa:c4:04:39:05:6c:d8:9b:c9:70:
         05:74:12:1d:16:58:a4:a6:1a:19:52:08:aa:d4:03:1d:2d:22:
         2d:60:4d:f1:19:4c:d6:ab:72:4a:b4:33:0d:6a:f8:50:e3:57:
         32:d0:9c:b0:19:a2:8b:82:38:fa:65:c9:5f:e0:1d:42:51:84:
         b1:51:af:a0:16:26:35:0a:4a:48:7f:63:70:9c:5f:c1:be:24:
         32:04:51:67:f5:4b:06:b4:ec:3a:9d:3d:dc:f5:25:0f:43:e4:
         ff:87:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:53:38 2025 by rpki-client