Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
File:                     15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft (raw, json)
Hash identifier:          4qiOArX/J3TSqVE2m1AOUaHqIlkOTa1QcQXs8wTxnr4=
Subject key identifier:   5F:B0:BE:AC:75:BC:4A:70:8A:D0:60:0A:26:F1:F5:71:10:05:3D:BD
Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35
Certificate issuer:       /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
Certificate serial:       059BE40F7AADB2DDE253757DC42408CEE255CFAD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
Manifest number:          0469
Signing time:             Fri 25 Apr 2025 01:01:15 +0000
Manifest this update:     Fri 25 Apr 2025 00:56:15 +0000
Manifest next update:     Mon 28 Apr 2025 07:20:15 +0000
Files and hashes:         1: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: 9VCQxiZQ6uQVxpVIt3DfXxPQylWYJU9tTsKyqA1F1Ho=)
                          2: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: DulnaNbO/P16FR0N32yickiYlT2hdyAMPZHsVJ5RF+I=)
                          3: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl (hash: 39DQg5g0LpYJ/pv1v4xBZdbBSLNjr/aCj8nfobH6TnY=)
                          4: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: AO7wu2Q7QW+RPhPuz6APgWm6cf6PGEEupVDtRJV53rE=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl
                          rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 07:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9b:e4:0f:7a:ad:b2:dd:e2:53:75:7d:c4:24:08:ce:e2:55:cf:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35
        Validity
            Not Before: Apr 25 00:56:15 2025 GMT
            Not After : Apr 28 07:20:15 2025 GMT
        Subject: CN=5FB0BEAC75BC4A708AD0600A26F1F57110053DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f0:53:96:26:94:f3:5b:fa:02:09:8c:ec:e9:
                    ca:5d:bd:18:03:10:7d:70:d3:94:01:6c:7e:d1:5e:
                    fe:21:e1:35:18:b3:bc:2d:21:9d:da:32:88:33:d6:
                    58:af:e8:4b:68:2a:1f:2a:4c:71:a7:94:6c:e7:94:
                    de:70:47:0c:40:50:fc:1a:4c:3e:aa:07:d4:50:b9:
                    7a:71:3f:8f:48:cb:09:ee:d9:a7:1d:20:43:89:3c:
                    ed:9a:7b:37:c0:c5:0c:68:d5:57:c1:af:d5:5d:ab:
                    b1:02:67:a3:57:00:14:eb:0e:67:41:b9:0e:89:b6:
                    49:86:eb:d8:a6:48:3c:3c:c4:d2:97:25:c4:c8:86:
                    30:ca:d5:75:a5:ce:40:a4:88:ac:9d:88:c9:af:86:
                    32:7d:72:a9:91:ce:63:a7:78:66:18:61:91:b1:cb:
                    0c:51:39:a6:01:62:28:76:92:d8:3f:e7:5d:e9:e0:
                    5d:f9:3e:b6:85:83:22:b8:a1:75:ab:98:14:9f:50:
                    9d:12:fd:a1:27:12:7d:45:dc:1e:24:02:cd:6c:76:
                    ed:20:17:7f:59:3e:8f:83:84:b5:da:f4:f1:f0:3e:
                    7e:b0:7d:f9:02:48:05:93:bf:76:8d:85:ba:94:fe:
                    13:47:f6:ef:08:1a:17:d8:f2:ea:ba:e6:af:65:db:
                    5a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B0:BE:AC:75:BC:4A:70:8A:D0:60:0A:26:F1:F5:71:10:05:3D:BD
            X509v3 Authority Key Identifier:
                keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:d8:5d:34:a7:69:86:a3:68:ea:10:41:21:f5:dc:37:e6:
         4b:76:ee:7e:64:23:67:e9:a0:21:53:94:ad:43:8a:ef:53:82:
         5b:8d:89:a1:55:df:19:79:9c:5b:9b:fe:9d:ce:10:b4:dc:98:
         00:a6:04:74:0c:36:5c:a9:98:a9:d4:df:65:00:6c:c6:46:f8:
         5d:71:3a:10:45:53:75:aa:88:8a:3a:69:fc:6f:44:39:5c:97:
         63:d4:6e:05:fc:a8:81:e6:03:32:93:aa:52:06:75:78:d0:17:
         27:6d:8c:3c:a0:ed:af:e8:31:47:ce:6e:2b:12:72:04:13:b6:
         00:19:25:d3:45:82:58:d1:31:d3:a9:fb:e6:89:1a:6e:47:1e:
         12:79:5a:dd:f9:52:22:85:cb:c4:69:65:50:87:f3:18:51:1d:
         49:e5:6b:77:c2:54:c1:44:6f:a5:7b:0a:4e:25:c9:3d:1f:b7:
         55:e7:cf:28:ed:30:41:b2:03:ce:bb:7a:fd:c5:c2:dc:0f:7c:
         c8:8d:10:46:52:74:75:32:b8:94:f5:1e:1c:cb:53:ef:7d:a3:
         9f:77:5e:93:b1:77:7e:ce:e1:11:23:6b:cb:a3:32:01:58:03:
         15:be:45:cb:2c:11:1c:ea:50:c6:a8:66:50:2d:0b:d8:13:2b:
         28:b6:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:01:31 2025 by rpki-client