Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft
File:                     98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json)
Hash identifier:          BWAsCoCLQyMjoLJUN5DsA8G4FbZyczd4ckuQwh0J/wE=
Subject key identifier:   30:62:31:4B:79:57:EE:55:E1:12:47:6D:25:C6:DF:D1:A9:C6:C9:E5
Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43
Certificate issuer:       /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743
Certificate serial:       04BA44F5706F263BF4959161DA8DE08FDA153313
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft
Manifest number:          01ED
Signing time:             Sat 03 May 2025 06:20:50 +0000
Manifest this update:     Sat 03 May 2025 06:15:50 +0000
Manifest next update:     Tue 06 May 2025 13:21:50 +0000
Files and hashes:         1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: Nirjw2AEYKNDQB9mrteUJDMYNQOIK6tOvtpa7WJGGgA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ba:44:f5:70:6f:26:3b:f4:95:91:61:da:8d:e0:8f:da:15:33:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743
        Validity
            Not Before: May  3 06:15:50 2025 GMT
            Not After : May  6 13:21:50 2025 GMT
        Subject: CN=3062314B7957EE55E112476D25C6DFD1A9C6C9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:dc:0f:f7:90:9d:c1:78:95:5f:44:a0:2a:
                    70:73:d1:e7:0e:6b:a4:24:58:ec:dc:36:02:8b:f1:
                    29:38:d9:b0:ef:93:d0:55:40:c2:f9:17:bd:a3:aa:
                    37:bb:3e:a1:00:3e:dd:83:4e:c5:1e:b2:39:2c:d2:
                    33:d2:bf:61:81:e7:2b:8c:76:e2:7c:5f:32:0b:48:
                    14:d4:d1:04:6e:93:8d:10:9b:f6:96:2d:bc:ae:6d:
                    49:77:2e:a6:50:39:a4:16:19:34:b2:8f:04:9b:76:
                    53:2e:36:de:5d:d7:34:5b:69:48:07:e0:7a:da:50:
                    27:96:43:30:a4:10:c1:05:59:bf:28:3d:e2:f2:e0:
                    b1:c2:8a:18:ca:7f:4e:0b:9d:10:08:fc:35:be:61:
                    5a:d7:61:71:f7:88:bc:b1:c6:a6:45:3c:6a:8b:4d:
                    f0:31:cb:3f:5a:87:a0:4a:af:b8:87:d4:f4:43:9d:
                    39:6a:9a:ec:b1:8b:d4:cc:c6:93:f9:57:8d:24:10:
                    40:5a:2b:99:7d:64:cf:85:3c:19:e2:31:08:07:1f:
                    0e:8c:24:be:ee:10:8d:c8:17:c7:2b:54:d2:dc:90:
                    3a:7d:8c:7e:38:46:c8:1d:c9:39:30:9f:e2:02:49:
                    95:47:f5:39:cc:20:e2:96:97:ab:b6:41:3e:dc:bf:
                    d0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:62:31:4B:79:57:EE:55:E1:12:47:6D:25:C6:DF:D1:A9:C6:C9:E5
            X509v3 Authority Key Identifier:
                keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:a7:99:be:4a:cf:5d:37:4e:2b:30:9b:59:c2:f9:2c:9e:
         11:92:11:fa:ba:0f:0d:13:fb:77:77:cc:3a:39:8c:2b:b9:7f:
         11:7f:e7:df:a6:c0:d0:2c:c6:52:b3:64:2b:8f:60:98:ab:c1:
         2c:b7:09:94:98:90:83:e4:b0:d8:dc:1c:68:5c:8b:50:86:df:
         49:a3:84:0c:1d:fc:e9:5f:e2:3c:59:f2:fa:d0:92:d7:b5:47:
         63:5f:a0:b7:52:a8:f1:bc:55:d1:7f:57:2a:8a:b4:77:0d:fd:
         c5:98:b4:35:34:a8:68:d9:5f:f3:24:bb:5d:ac:e8:71:8b:1e:
         dc:5a:22:4c:e2:5d:66:3c:8f:98:04:69:61:f9:36:eb:fc:2a:
         ce:24:a9:27:e9:00:82:1f:a7:31:62:f2:48:89:6a:e1:e2:74:
         1f:46:ed:dd:a8:ae:fc:d8:36:4e:04:48:c2:b5:43:07:bb:27:
         5f:e3:25:06:aa:bf:1c:a3:1d:d8:5a:fb:0e:d4:2f:2d:f3:ab:
         9a:19:38:5b:32:d3:6a:ec:54:aa:59:60:33:11:63:ec:52:70:
         4e:8d:6c:ef:46:65:e1:8c:28:cc:3a:eb:3e:96:3e:12:90:3b:
         eb:78:78:59:b7:1c:53:f0:96:87:77:01:1c:09:a4:49:ef:b1:
         d1:29:a1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:42:30 2025 by rpki-client