Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
File:                     6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft (raw, json)
Hash identifier:          7dGVlOocgvfaQ6W6lxHKO1Y38sL1Zfp1shKuWJbyxN8=
Subject key identifier:   9D:E7:AB:F6:A4:9F:74:6A:70:61:22:2A:64:72:A6:F3:6D:3A:BC:EB
Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
Certificate issuer:       /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Certificate serial:       1CDFE93D4E08F0694EB7421F7F250D501D687ED4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
Manifest number:          40
Signing time:             Sat 03 May 2025 20:02:15 +0000
Manifest this update:     Sat 03 May 2025 19:57:15 +0000
Manifest next update:     Wed 07 May 2025 03:47:15 +0000
Files and hashes:         1: 6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl (hash: n8uFj3vbhY4VWiMliwpZTDT44DH2Dlz8STGT3fMbMKI=)
                          2: 3130332e3133362e31322e302f32342d3234203d3e20313338383231.roa (hash: Lk7MgzxdNvFWTQC60iPK0vpuf42JvMwfykIHdcb6dFo=)
                          3: 3130332e3133362e31352e302f32342d3234203d3e20313338383231.roa (hash: 4xFtj009j2KyXApXnh4MToBnYNS6TXxPJe0g07ZPzfw=)
                          4: 3130332e3133362e31322e302f32322d3234203d3e20313338383231.roa (hash: Cb5AEtlH1NnuqmCvEw1t1v8nRYfGeJ7DwpY/kiNXrBE=)
                          5: 3130332e3133362e31332e302f32342d3234203d3e20313338383231.roa (hash: R+IkOnhEEkrZOxf8Y3xufcx4Q4z9+2sI/l2mQF5vKrU=)
                          6: 3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (hash: b3FwlMsLVeDm7arhAC1MOxAg/+Ixy8Gs1MmwDRmmqco=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:df:e9:3d:4e:08:f0:69:4e:b7:42:1f:7f:25:0d:50:1d:68:7e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
        Validity
            Not Before: May  3 19:57:15 2025 GMT
            Not After : May  7 03:47:15 2025 GMT
        Subject: CN=9DE7ABF6A49F746A7061222A6472A6F36D3ABCEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:7c:95:5c:25:de:05:90:a8:a3:53:32:89:
                    69:44:bf:72:46:b6:22:24:eb:bd:05:2a:54:c9:76:
                    05:18:ef:87:28:61:c8:4a:73:25:d4:bc:cb:38:03:
                    5a:4b:d8:3e:e1:92:60:7a:fe:e7:16:a6:1d:ff:a6:
                    09:8d:61:f2:f8:8e:e8:95:03:7f:6a:ed:84:c2:43:
                    52:e6:ba:3d:f1:19:99:12:b1:b9:4b:57:44:60:66:
                    94:2b:e2:51:20:ad:c1:86:d7:46:97:69:f8:fe:65:
                    df:17:30:25:51:47:93:8f:f6:23:25:a4:34:b9:d0:
                    5e:e0:a3:60:35:51:92:bc:37:b2:b8:3b:a2:ca:7a:
                    31:1b:e7:ad:8e:c1:2d:ed:0f:9b:ee:d9:5f:df:53:
                    75:a3:93:d9:5e:2a:7b:fb:dd:3d:c6:14:58:6b:b9:
                    e9:9a:79:e6:b7:b0:88:27:f1:f3:7b:17:c7:53:48:
                    39:76:e1:f3:b4:59:69:28:87:00:61:ec:81:a0:c5:
                    52:ea:86:34:e9:95:66:2d:09:97:31:e8:2d:9e:23:
                    d9:f9:93:3c:a4:d2:f1:18:7d:ab:c8:12:99:20:05:
                    17:f4:29:82:44:72:bc:2f:fa:8c:89:21:74:48:54:
                    75:44:ca:9b:96:67:bd:f0:34:4b:76:d7:b0:bb:8d:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E7:AB:F6:A4:9F:74:6A:70:61:22:2A:64:72:A6:F3:6D:3A:BC:EB
            X509v3 Authority Key Identifier:
                keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:99:b9:ee:35:51:ee:bb:39:2f:19:c9:dd:5a:e8:22:ae:98:
         b3:2e:42:f9:78:ca:56:8b:25:61:09:59:36:d4:2a:6e:44:07:
         50:53:92:f1:0b:48:b7:a9:d7:1d:ce:c5:c9:f2:11:cc:43:58:
         ed:fb:eb:62:ca:f2:fd:53:1c:6d:44:37:13:72:5b:bb:fa:5f:
         b3:19:4e:50:ce:3d:9b:be:e4:49:4a:62:00:e4:95:cb:b0:77:
         79:92:cc:f2:9e:54:38:ab:31:e6:c7:bb:1d:03:fe:3e:0e:00:
         03:a1:3e:6a:02:c9:56:79:32:09:f7:88:8c:ae:4e:e8:72:1a:
         dd:2e:0c:47:15:6e:0e:cf:f0:50:5b:53:dc:61:fc:c7:81:31:
         70:92:11:88:f5:bd:29:61:a7:5c:b5:27:63:fe:11:4d:5c:5f:
         8b:fd:49:5e:a3:cc:48:60:18:a3:8b:d6:02:e8:5d:00:7b:b4:
         88:2f:a7:e7:ba:a7:ef:65:a9:53:43:40:cc:a8:8b:da:74:65:
         80:d3:2c:fb:47:7b:55:a5:9b:da:09:1d:0c:eb:63:61:3c:34:
         84:c8:e9:4f:d4:83:e3:e7:48:f7:8f:93:c7:bf:d3:45:b4:9a:
         d3:6c:50:5d:05:ca:f6:d0:6f:ca:00:0d:2c:e1:a4:8d:bd:ca:
         21:d9:d7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:07:37 2025 by rpki-client