Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft
File:                     104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft (raw, json)
Hash identifier:          AIhCTBC4yplxA33zLOR6zSLzWMHkhE8MtBNSxZgIGK0=
Subject key identifier:   C5:68:A3:D9:54:0E:38:38:A1:08:8F:F2:AD:6E:2B:C3:EB:78:93:19
Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59
Certificate issuer:       /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59
Certificate serial:       1937DD9B15FFADC152E11854712284AB46943FF9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft
Manifest number:          0189
Signing time:             Sat 03 May 2025 07:30:50 +0000
Manifest this update:     Sat 03 May 2025 07:25:50 +0000
Manifest next update:     Tue 06 May 2025 15:10:50 +0000
Files and hashes:         1: 104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl (hash: ZYipYp2/bbb+Spn12mz9poYQ94EZ8V/qCcGaJ4bPSYE=)
                          2: 3130332e35312e3132322e302f32342d3234203d3e20313530343730.roa (hash: WU4OS1OV+8iN1dmvrErpUWqbsC92MVIT7keo4SWEOZs=)
                          3: 3130332e35312e3132332e302f32342d3234203d3e20313530343730.roa (hash: acV9j3XIcn+bea9k3sYuulK5VVRC16qFjnWStKLLjhQ=)
                          4: 3130332e35312e3132322e302f32342d3234203d3e203438343635.roa (hash: VXQG4LgTm2A9yFvzXIobJzQfhPQpDMemmOhQgXgjEso=)
                          5: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (hash: uUdG4SGiybweBVH5rVedbcrvTamlpHOnLNXLU4+Tbhc=)
                          6: 3130332e35312e3132332e302f32342d3234203d3e203438343635.roa (hash: eBIwtq3IDYbGntPd8udTR7pwimj3OQ7zrJEf3s/YHkM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:37:dd:9b:15:ff:ad:c1:52:e1:18:54:71:22:84:ab:46:94:3f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59
        Validity
            Not Before: May  3 07:25:50 2025 GMT
            Not After : May  6 15:10:50 2025 GMT
        Subject: CN=C568A3D9540E3838A1088FF2AD6E2BC3EB789319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:a0:dd:9e:a9:9e:49:49:99:1e:a0:a6:dc:
                    e8:f6:45:40:1c:9d:67:57:41:07:f3:6b:02:78:72:
                    05:55:d7:25:4e:89:a6:e4:ae:6f:75:29:8c:3e:13:
                    2b:0d:88:4c:53:00:5c:97:11:5e:3d:81:ad:79:1d:
                    a6:c1:32:84:81:6c:ec:c5:3d:44:0c:5a:aa:e1:26:
                    d6:e1:9e:3e:a7:de:9a:21:34:1e:c9:55:f8:a4:b9:
                    13:ae:98:d1:59:7c:67:24:25:2f:f2:24:d2:21:e4:
                    41:9a:55:86:3a:f9:ab:65:bc:a9:60:6b:81:7a:5e:
                    ea:b1:31:6f:e9:d4:45:47:5b:2c:20:64:f0:86:92:
                    14:ca:a3:0f:88:5c:b0:6b:e7:e7:78:75:f7:c0:04:
                    32:d1:6d:8e:f3:2d:86:b0:6b:23:88:fb:ce:9e:84:
                    53:21:db:8c:f5:03:14:94:a7:fc:a9:19:ed:18:a5:
                    99:41:a8:78:1a:7a:51:36:c3:f6:d0:62:6e:21:bb:
                    c4:ff:26:d0:50:96:c8:6e:33:84:9c:1a:7d:fe:66:
                    b8:3c:b5:73:20:a8:db:06:e3:c1:ba:da:98:94:6f:
                    14:fe:bc:9f:9c:fb:36:1b:4e:ce:2e:c9:78:ea:51:
                    c2:93:49:63:ab:89:8e:3d:7a:39:d8:43:9e:7f:4c:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:68:A3:D9:54:0E:38:38:A1:08:8F:F2:AD:6E:2B:C3:EB:78:93:19
            X509v3 Authority Key Identifier:
                keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:64:8b:62:c2:4e:2c:3f:dd:b9:9b:d9:82:09:c1:1a:75:d5:
         08:aa:a7:73:0d:12:d9:dc:56:51:02:ef:0b:3e:9d:49:e3:a2:
         f9:39:5e:0f:0c:87:b3:2b:b5:98:00:96:50:a2:06:c7:d0:11:
         0a:19:9d:93:d3:7f:9d:11:52:3e:ec:3f:8c:52:9c:9f:97:8e:
         47:e2:b4:56:3f:ce:9f:6b:96:19:24:4c:31:e3:f1:0e:7c:d2:
         55:e5:4c:2f:2b:82:b4:5d:3a:33:8b:ea:7a:83:13:c8:4d:25:
         22:08:c0:10:ff:51:b4:31:be:c5:da:0c:92:6b:77:db:38:94:
         f3:9d:ea:65:f1:23:10:03:5d:1e:39:a5:5f:3b:08:f6:6e:46:
         4e:78:9a:49:6a:85:62:9b:b2:ed:89:cf:58:7d:d1:8b:83:64:
         4e:9b:e7:c1:32:3c:9c:06:e0:57:88:da:ed:f6:e7:77:93:34:
         49:fd:a1:22:5e:3c:23:5f:e6:d9:b5:ea:7d:9e:89:0b:f1:cb:
         26:01:bf:de:79:47:e1:90:fa:c4:56:9e:9d:c6:60:44:0f:7a:
         95:55:fb:98:c4:97:99:d4:a3:40:9c:93:24:fa:46:66:aa:4a:
         a2:5b:ff:90:b2:b0:bd:66:b6:da:25:ae:78:4d:3c:b0:10:06:
         8d:df:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----