Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft
File:                     2B90BB17E78B62C15179029C6583E42BD7E18277.mft (raw, json)
Hash identifier:          ekZCKhNKUlK4jnfJJcBG8tjDw2miNszrZoc4Fjw0jm8=
Subject key identifier:   BB:3E:8A:80:B3:05:F5:B7:1A:60:DC:8E:2F:2D:C4:1C:F8:18:CF:EF
Authority key identifier: 2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77
Certificate issuer:       /CN=2B90BB17E78B62C15179029C6583E42BD7E18277
Certificate serial:       1D996636AB35C9109579FC43322C93E604E9388E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft
Manifest number:          45
Signing time:             Wed 30 Apr 2025 00:30:36 +0000
Manifest this update:     Wed 30 Apr 2025 00:25:36 +0000
Manifest next update:     Sat 03 May 2025 04:24:36 +0000
Files and hashes:         1: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: xGHUucKhH5kmQ+65YZMYfuYlyW3kJ8ie5abut/yqhlk=)
                          2: 2B90BB17E78B62C15179029C6583E42BD7E18277.crl (hash: IBrWVS36kB23SEFnwJ7uneAZuiOF5fJt/rQJeoEMICc=)
                          3: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: 4Y5Ddm6yUymC+qHSs8fVActMjjMDZEcHLdC59v78BoQ=)
                          4: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: kTHvzmqB/2veUohEP9ZdbxC595Rgd4EACGX8AypsPpY=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl
                          rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 04:24:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:99:66:36:ab:35:c9:10:95:79:fc:43:32:2c:93:e6:04:e9:38:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B90BB17E78B62C15179029C6583E42BD7E18277
        Validity
            Not Before: Apr 30 00:25:36 2025 GMT
            Not After : May  3 04:24:36 2025 GMT
        Subject: CN=BB3E8A80B305F5B71A60DC8E2F2DC41CF818CFEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f9:5c:b9:e6:f9:a1:2f:b4:51:a8:80:52:45:
                    2c:fb:e2:8c:2a:68:58:b0:72:f7:32:66:12:6b:dc:
                    71:0a:4e:c1:52:56:37:0f:d8:b8:3f:a0:ba:3d:6d:
                    91:25:48:53:0d:2f:c3:8b:82:84:2f:cd:e0:52:40:
                    fe:e8:d2:68:78:d4:09:b1:45:30:a2:26:00:65:e9:
                    51:cc:2f:c2:92:20:43:4e:29:78:42:ba:2e:1c:5b:
                    72:7f:67:9c:50:37:b3:df:ab:7f:77:21:12:38:05:
                    49:88:d4:d7:d9:37:6b:dc:56:34:45:0d:16:ff:64:
                    12:58:7b:b0:3a:f1:e7:3f:24:8e:55:7a:c8:64:30:
                    58:bb:8a:47:d6:fa:2a:ca:19:33:c9:50:a4:b1:4f:
                    a5:ba:07:84:62:7c:f7:a1:6b:a5:34:72:07:ca:37:
                    b6:61:60:0e:d3:76:b3:22:f1:06:e8:6f:bd:7d:3e:
                    99:db:88:7b:81:5f:61:27:20:bc:73:16:11:de:7d:
                    97:b8:b3:c5:13:b4:fd:14:9e:2d:88:6c:95:77:ac:
                    d7:ec:d8:8a:b3:36:d2:dd:7a:86:a1:b9:b5:65:59:
                    84:19:bf:de:0b:76:e3:4e:dc:29:89:dc:60:c3:6d:
                    76:b4:ee:3b:20:0e:35:31:18:61:6e:1b:03:5c:67:
                    6f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3E:8A:80:B3:05:F5:B7:1A:60:DC:8E:2F:2D:C4:1C:F8:18:CF:EF
            X509v3 Authority Key Identifier:
                keyid:2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:28:1d:d7:10:40:cb:6c:d5:af:a4:25:46:e2:14:a1:e1:5d:
         37:f8:a5:4a:d1:07:85:ce:00:65:88:3d:68:99:9d:90:71:02:
         62:65:81:9e:3b:e3:4c:62:a3:bb:25:25:48:6d:65:06:3d:d7:
         7d:bd:44:79:18:ee:83:98:07:c9:d4:21:eb:8e:e3:df:86:b8:
         c4:5c:9d:ed:30:12:23:fa:8d:37:1f:13:33:06:3f:32:95:a1:
         60:3e:3b:cf:82:a1:1b:29:33:71:c9:12:18:bc:99:30:5f:ca:
         6c:e6:b3:7c:19:56:e8:17:b3:e8:c2:a1:99:d5:6c:b8:37:c9:
         4a:c9:06:dc:2e:02:c6:81:52:40:ee:f4:29:3a:1c:9b:8b:fe:
         a1:11:b2:93:d1:fd:b7:3a:da:45:22:ab:73:8e:3c:f6:fb:7f:
         84:79:29:18:cd:25:38:64:c3:72:0c:d6:b2:d6:68:07:77:4c:
         b6:99:a6:a3:d5:1f:d4:c2:93:ae:98:23:e8:e7:77:7c:f1:2a:
         43:ff:25:6b:bd:a6:67:25:19:5d:d6:c0:ab:05:6d:19:a0:64:
         b4:02:ec:f9:c4:6d:50:e9:be:a3:58:38:a0:0b:4b:36:7e:de:
         ee:f6:2b:a8:99:64:3a:57:62:cd:d0:fc:32:63:3b:f0:b4:ff:
         e6:18:9a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:46:20 2025 by rpki-client