Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft
File:                     CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json)
Hash identifier:          kTpT93jTfzEh5LYcljRRi1I9rM9cESo79Pyy72q0voA=
Subject key identifier:   5D:5D:83:45:8E:16:BE:A4:2C:4D:DA:11:17:82:A1:01:F8:0F:77:B6
Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA
Certificate issuer:       /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA
Certificate serial:       4632B1697957C7F832B28E0CECAB9BCDBBBA2BBE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft
Manifest number:          D5
Signing time:             Sat 03 May 2025 03:31:24 +0000
Manifest this update:     Sat 03 May 2025 03:26:24 +0000
Manifest next update:     Tue 06 May 2025 11:49:24 +0000
Files and hashes:         1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: l3CE9gxA8mVDhBSXtpEjNNKEu3HrfVitxrd9vJknHdM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:32:b1:69:79:57:c7:f8:32:b2:8e:0c:ec:ab:9b:cd:bb:ba:2b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA
        Validity
            Not Before: May  3 03:26:24 2025 GMT
            Not After : May  6 11:49:24 2025 GMT
        Subject: CN=5D5D83458E16BEA42C4DDA111782A101F80F77B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cc:43:27:ed:20:5b:f7:a1:78:e5:c5:13:07:
                    b4:bc:34:15:81:c5:70:60:69:d4:49:ab:4a:a7:bd:
                    27:f3:1b:dc:3e:24:06:82:74:eb:b3:24:5a:bf:cb:
                    d0:33:98:e9:2c:1a:af:4f:1e:5d:9d:1f:40:02:3e:
                    09:ae:d5:da:e2:5d:1c:0d:fb:c9:9c:b0:34:fe:12:
                    75:f3:94:58:f6:08:ea:2e:15:a7:8a:0c:cf:ef:5d:
                    54:5f:6a:17:70:c9:dd:f7:ff:5b:a8:8e:aa:26:2a:
                    e5:d2:57:75:28:9d:d0:6b:3d:c0:1c:e7:48:fc:db:
                    ac:21:6f:9f:51:ab:fc:9d:c4:b4:14:79:58:12:1c:
                    eb:7b:9d:49:ef:b4:78:6a:49:c2:fb:59:6f:83:ce:
                    13:a3:8d:60:80:28:66:dd:cd:6a:77:69:c9:dc:47:
                    38:e3:16:d4:e2:9d:4c:12:de:29:d3:bb:24:f1:5d:
                    74:c1:4c:dc:cb:89:99:09:16:62:07:9e:91:31:ff:
                    93:3f:5e:de:5d:bf:75:68:9e:9f:09:0c:2c:3e:09:
                    c7:00:34:02:aa:fe:92:0b:ef:8c:75:de:38:fa:7e:
                    77:10:7d:58:97:31:4c:71:bd:60:ea:47:8b:60:4f:
                    c8:e3:12:f5:79:80:58:73:bc:ab:5c:3e:4f:ec:cb:
                    0f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5D:83:45:8E:16:BE:A4:2C:4D:DA:11:17:82:A1:01:F8:0F:77:B6
            X509v3 Authority Key Identifier:
                keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e2:af:37:45:ec:40:ec:18:0c:5d:8b:56:56:6a:9b:25:de:
         f0:43:25:c4:9e:8f:97:1e:ed:9d:fc:fd:19:9e:b5:ff:bc:5d:
         c3:33:20:c1:9f:93:07:c9:ff:38:11:6a:69:f5:d6:25:26:90:
         f4:82:0b:d2:e2:54:6c:02:d4:38:9f:05:2c:0e:31:4e:ad:78:
         02:47:02:69:a1:ef:15:08:bf:94:bc:d8:31:be:8d:36:94:41:
         1b:cf:aa:1e:c6:a1:7d:ca:f0:ae:bc:27:19:2d:af:7a:c9:1a:
         35:57:01:d3:95:32:cf:c1:ed:cd:54:6b:a9:40:aa:1a:67:25:
         c7:1e:90:a3:99:30:3a:e7:5c:e2:b3:e6:1f:4e:fa:d6:cb:c8:
         97:d4:b1:aa:e3:bb:42:87:bf:04:93:a3:76:02:bd:ac:40:6d:
         0e:0c:46:ba:80:2c:05:99:d2:c1:cd:eb:24:7d:59:e8:53:c2:
         e8:d8:86:ca:0a:a4:d6:08:7b:6f:43:1f:76:8c:cc:c0:da:2c:
         16:1d:f1:7e:be:0f:08:6f:e3:ef:cb:03:75:be:83:b2:4e:da:
         43:59:9d:19:a3:27:b7:85:88:ff:cb:70:d5:eb:66:b3:07:75:
         c0:76:4f:74:ab:79:26:41:08:b8:13:cb:7c:6f:b8:a4:0c:f2:
         15:22:03:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:25:28 2025 by rpki-client