Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft
File:                     7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft (raw, json)
Hash identifier:          izfjNsFHUENBe06sVaNGJ7xpWQVQrY4aiCK3Q5RVV60=
Subject key identifier:   CB:BA:C4:B3:2A:28:80:A7:66:17:F8:E7:A6:31:C4:8B:0E:6C:57:88
Authority key identifier: 7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC
Certificate issuer:       /CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC
Certificate serial:       656CDEEE6A62CE8A0B0B4BF18F2734113CACEC2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft
Manifest number:          0171
Signing time:             Sat 03 May 2025 07:51:27 +0000
Manifest this update:     Sat 03 May 2025 07:46:27 +0000
Manifest next update:     Tue 06 May 2025 17:06:27 +0000
Files and hashes:         1: 7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl (hash: DD64Fry3fiSFBPAAQKG0MsusuF0Ht1qHjXBfD+zCkxc=)
                          2: 3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa (hash: Ttq6OmcuDA2jvY00pswCCvXRwFmH52FGSMDBivzFf7A=)
                          3: 3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa (hash: ZT9C4ozjXu7zgMyjGuykG3d8zzHdnxWgyq99AWHagU0=)
                          4: 3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa (hash: cHp1PrRnqsW34jqmb6yO4cCFmXfZNHvvcfXkiTq83Hk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6c:de:ee:6a:62:ce:8a:0b:0b:4b:f1:8f:27:34:11:3c:ac:ec:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC
        Validity
            Not Before: May  3 07:46:27 2025 GMT
            Not After : May  6 17:06:27 2025 GMT
        Subject: CN=CBBAC4B32A2880A76617F8E7A631C48B0E6C5788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:92:a9:73:b5:6e:f7:01:e3:1d:57:59:48:
                    6d:57:dc:e9:93:0e:d3:09:d5:7c:80:c5:71:ec:d9:
                    35:d4:da:5d:06:c1:ad:36:d6:f3:76:6a:00:6a:9e:
                    62:d1:f1:a6:f1:95:bb:38:6a:37:7e:6b:23:3d:fb:
                    7a:2a:66:d4:bf:fa:ee:42:f9:59:9e:fc:15:71:f0:
                    06:c1:d9:b8:f7:f1:5f:30:05:b0:a4:fc:db:61:ba:
                    b8:ce:b6:07:c5:d0:f2:6d:90:da:c1:f2:ec:d0:17:
                    ed:61:bc:ef:a3:05:d9:db:db:e0:cc:97:7e:4f:cd:
                    5d:62:fd:a7:6e:5f:7a:60:ab:6d:22:0f:cd:7b:44:
                    4c:21:bd:f8:90:d1:21:07:9b:36:ed:83:0b:b1:a9:
                    c7:e4:0b:38:f0:c0:24:a4:86:2d:4c:4f:91:12:5c:
                    3f:ad:c3:8b:ed:f4:45:fc:d4:87:23:15:e1:1c:e5:
                    71:5f:77:23:07:51:10:09:97:f0:8c:d6:4f:77:ec:
                    b3:66:68:df:d9:10:2e:12:27:96:09:d1:5f:6d:ca:
                    4e:90:01:95:3e:a4:ad:48:22:4c:cb:bc:64:f6:08:
                    09:7f:c6:19:6b:af:48:ca:00:3d:0f:9a:2c:45:45:
                    bf:17:50:da:ce:f2:ea:4c:f1:93:a8:fd:b8:a8:ab:
                    b8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BA:C4:B3:2A:28:80:A7:66:17:F8:E7:A6:31:C4:8B:0E:6C:57:88
            X509v3 Authority Key Identifier:
                keyid:7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:36:02:1e:5c:4f:dd:b1:bd:a5:c5:c6:ce:16:51:2d:a6:98:
         22:e1:e4:90:e0:6f:50:07:87:c7:62:6b:30:ba:b1:35:d3:0d:
         d9:ae:be:46:51:b4:be:f5:86:66:74:ea:67:47:64:0d:10:92:
         b3:8a:f8:5b:90:cc:86:07:6b:48:ed:5d:a8:de:6e:cc:74:81:
         32:06:ab:97:2b:f7:bb:8f:e5:49:cc:f0:ca:54:ca:89:72:9f:
         f7:37:c7:fc:11:e7:79:26:e3:98:4c:15:f1:04:7c:83:c6:46:
         b1:11:d0:c5:36:1c:86:27:75:05:65:a8:ac:2a:02:c4:c1:1c:
         bd:a9:3e:bc:32:6b:f0:be:12:53:be:5c:e8:5e:fb:75:bc:75:
         bd:d4:1b:f0:bf:a9:63:1a:c6:e4:af:01:f1:f9:0d:e1:ba:3e:
         67:03:b9:54:db:53:e7:d0:49:60:43:6d:b1:cf:14:d9:a5:41:
         50:05:07:8d:31:25:6e:06:1b:47:77:2c:3a:79:07:14:2a:af:
         10:92:bb:fe:f8:40:97:4c:4c:56:47:5b:05:7f:90:ba:1f:a0:
         c6:9b:c0:48:c2:66:a4:38:33:c7:f6:60:5b:65:f3:31:36:4b:
         e6:c0:11:01:cf:9a:94:40:09:0c:8d:8b:27:1b:dd:ba:65:9a:
         10:0e:fb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:06:22 2025 by rpki-client