Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft
File:                     E5B2AB049E75667C8F00ECB0EBF617859558571D.mft (raw, json)
Hash identifier:          JBNM7SO1Y78zQm+wahaXdkJgVOQh6e8828ROd4VZQ3o=
Subject key identifier:   57:63:50:4C:03:DF:97:9F:AC:E1:AE:BB:01:CF:D1:9C:1F:AD:69:2F
Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D
Certificate issuer:       /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
Certificate serial:       0DA795D94E1415B73918D57D9941441C5781D051
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft
Manifest number:          FE
Signing time:             Mon 28 Apr 2025 19:40:34 +0000
Manifest this update:     Mon 28 Apr 2025 19:35:34 +0000
Manifest next update:     Thu 01 May 2025 20:36:34 +0000
Files and hashes:         1: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: Zqpcy0ugk8HAE+GYWRNcHEByrdTEefMutc7Cf14qofA=)
                          2: E5B2AB049E75667C8F00ECB0EBF617859558571D.crl (hash: aJ19an55vI926d0eGdF0Qy5Q/okzlcJraZP0zyt51EY=)
                          3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: MHqEWkxk0lcqHf0DHOOzzwqgpatowmuSY53tgbg1pfo=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl
                          rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:36:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a7:95:d9:4e:14:15:b7:39:18:d5:7d:99:41:44:1c:57:81:d0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
        Validity
            Not Before: Apr 28 19:35:34 2025 GMT
            Not After : May  1 20:36:34 2025 GMT
        Subject: CN=5763504C03DF979FACE1AEBB01CFD19C1FAD692F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:e5:cd:2b:cd:81:a4:9f:4c:89:86:b5:70:
                    86:4e:48:1f:87:a8:44:ca:a1:d1:11:3e:c3:f1:1b:
                    2f:36:94:62:ea:15:4b:e9:fb:aa:95:9e:07:fc:57:
                    c0:d9:51:a1:a3:0f:c8:18:b6:07:2b:5b:c8:b9:af:
                    6a:02:d6:ef:72:7b:0f:ee:fb:55:08:03:dd:c0:8e:
                    2c:7d:cd:ab:52:af:db:1f:f2:87:cb:4e:7e:54:92:
                    26:6b:16:9d:56:e8:c4:6f:51:f5:37:be:3f:f1:69:
                    92:d4:4e:26:92:8b:a5:1f:a4:6a:34:44:bd:cd:2d:
                    75:db:ee:6c:a8:86:e6:fe:99:23:3f:ee:16:2d:ed:
                    52:1d:e2:df:3c:0d:ea:0a:87:77:5e:5b:3d:4c:22:
                    16:cb:f0:b5:b9:44:05:23:04:d5:5a:26:8e:3e:29:
                    1d:b7:fb:b0:28:85:9b:93:04:30:84:06:44:0f:a4:
                    68:60:53:d9:fc:f0:32:24:34:b5:6c:07:45:f2:0b:
                    26:f5:aa:34:e5:be:a3:54:83:f3:12:cd:cd:19:f2:
                    6c:8d:37:26:01:3e:31:c3:31:cc:e4:f3:1c:9f:57:
                    5f:40:36:53:14:f7:b1:a7:66:f6:2b:94:e8:7a:f5:
                    f8:60:12:5a:18:ce:8a:61:88:bb:85:f0:39:f3:a5:
                    17:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:63:50:4C:03:DF:97:9F:AC:E1:AE:BB:01:CF:D1:9C:1F:AD:69:2F
            X509v3 Authority Key Identifier:
                keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:af:88:2f:64:d0:b8:13:fc:16:6e:c8:f8:05:c0:6e:56:97:
         bc:5b:02:3d:1f:08:a9:4f:e3:b7:7e:21:65:b4:f8:ae:00:e9:
         a7:17:2d:23:6f:a2:8f:57:dd:07:6f:71:d3:8e:fd:f5:45:54:
         f5:c0:9d:5f:61:58:32:d1:99:1b:7e:a1:f3:4f:26:6e:52:61:
         26:74:f6:ab:b9:3f:89:57:4b:f4:ec:a6:1f:d5:a9:57:51:ab:
         24:0b:70:b2:3c:92:c7:5a:17:f8:50:e3:d5:91:b0:7d:fb:14:
         a9:d9:c7:2b:fe:c2:92:e4:44:af:16:a7:a5:e2:ac:b8:69:ca:
         d2:fb:dc:94:5f:1c:50:e6:00:a8:7f:60:13:0b:2c:31:ed:8d:
         83:db:ca:ec:50:5d:86:b9:34:3c:d6:e4:0b:4e:78:b6:38:c0:
         75:1d:bc:f5:e7:89:89:9e:d0:be:e7:7a:cb:4b:41:b5:8e:52:
         9c:a6:72:72:b2:95:63:d2:2a:70:62:b8:f0:26:73:e2:30:c7:
         4a:41:71:a0:9d:44:85:a9:a8:07:a6:bc:75:0d:07:55:a1:7b:
         10:5e:8c:22:a6:51:62:7b:93:b8:ee:2a:9f:ab:a0:14:9b:c3:
         5f:15:81:a0:90:a9:64:44:f6:4d:5a:31:ec:dc:b8:5a:d4:21:
         03:b9:8f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:25:56 2025 by rpki-client