Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft
File:                     385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft (raw, json)
Hash identifier:          68Kv0H3rXf75Z7WUaTSFx67NQk9JqfvDTNYFCWSuehc=
Subject key identifier:   1A:52:43:58:82:B2:22:C6:98:22:35:44:D3:80:5D:3F:FC:4D:1E:A7
Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04
Certificate issuer:       /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804
Certificate serial:       344AA1C0F1B666ECA29E2C703AF2FEC15D27A661
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft
Manifest number:          01B9
Signing time:             Sat 03 May 2025 10:11:13 +0000
Manifest this update:     Sat 03 May 2025 10:06:13 +0000
Manifest next update:     Tue 06 May 2025 11:44:13 +0000
Files and hashes:         1: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (hash: zBeoA45+pWdqka5XtO4MP/M+DFGL6pvvaMdBwJOxKOw=)
                          2: 3130332e3231322e3137392e302f32342d3234203d3e2039333431.roa (hash: SavftCjxfzKeh9QfZVYuZ4/nKtgaHcLMvQCr8+Ies8o=)
                          3: 3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (hash: bJ6i/BAc6zrBSm9HW7tI5NHcCOAYOtyoukU8OZRZfZA=)
                          4: 385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl (hash: 2h2fY/5GbUh6Corx53NoRfPNUm2Lt6NVHxl/Z2OxCcU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4a:a1:c0:f1:b6:66:ec:a2:9e:2c:70:3a:f2:fe:c1:5d:27:a6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804
        Validity
            Not Before: May  3 10:06:13 2025 GMT
            Not After : May  6 11:44:13 2025 GMT
        Subject: CN=1A52435882B222C698223544D3805D3FFC4D1EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:67:13:bd:0a:61:bd:7b:d8:17:4d:fa:90:
                    a3:c5:19:da:87:79:4d:7f:fd:cd:0d:ce:83:30:79:
                    5f:d5:f6:4f:e0:8e:2b:0e:9e:cc:c8:a0:e1:25:e4:
                    3a:9d:8c:98:20:13:0a:44:79:5a:19:25:8c:52:1e:
                    0e:59:0f:5c:0e:e3:39:ec:45:d7:a2:74:6c:ef:db:
                    78:7d:6b:4c:58:50:60:cb:2a:cf:f6:ab:c8:98:1a:
                    2e:b1:73:ad:dd:b5:1d:1f:71:47:98:66:5c:c1:ce:
                    30:f3:c3:72:9f:8c:d0:ef:ed:12:d4:32:d7:84:e1:
                    66:0c:c3:79:0e:1b:4c:0e:59:e9:7d:b1:b7:9d:27:
                    f9:c1:e5:37:97:0d:e6:76:fb:31:9f:b2:36:0e:94:
                    86:9b:79:a3:34:b5:be:48:a2:b0:51:e9:a8:81:80:
                    82:c6:71:77:16:56:0c:26:43:07:63:5d:b2:85:9c:
                    f0:75:15:c0:ba:1c:29:94:4d:34:34:5b:88:9b:33:
                    ee:15:39:d5:b0:13:4b:d0:cd:35:96:0a:d0:af:85:
                    9e:6b:1f:5c:47:0e:a5:f8:3b:92:03:0b:ab:37:18:
                    d3:42:ed:de:0d:32:c2:05:d1:be:6d:97:98:2c:90:
                    74:2a:18:0c:98:c8:68:6e:c8:82:53:f3:3a:05:35:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:52:43:58:82:B2:22:C6:98:22:35:44:D3:80:5D:3F:FC:4D:1E:A7
            X509v3 Authority Key Identifier:
                keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:30:b5:47:6a:b0:fd:5d:2c:24:8c:72:05:f3:bf:c5:3a:96:
         b7:ca:3c:a9:53:73:2a:19:50:17:90:4c:7a:20:20:6c:bb:da:
         26:62:b7:51:60:0d:22:0a:d6:3a:56:37:51:f7:f2:2c:67:b5:
         9c:ef:00:98:33:a6:38:5b:c8:be:ed:eb:55:46:f1:34:f0:50:
         82:1f:3f:40:0b:9b:e7:ee:6d:78:66:28:d9:4b:88:2c:e0:dc:
         d6:6d:37:dd:28:b6:53:60:aa:c6:94:26:94:d7:d8:95:d0:20:
         b2:0f:57:64:6d:6e:76:4e:fa:fd:27:27:5f:11:d0:2e:f7:aa:
         5c:3d:2e:6f:d2:20:2e:50:6c:47:8d:d6:a2:7b:b4:85:43:2c:
         9f:bd:8e:28:42:a8:08:35:83:2f:24:73:cc:cc:fb:44:a6:fd:
         e8:10:66:2e:d9:4e:8e:55:5b:bd:ea:d2:26:68:c7:bb:86:80:
         a5:05:9c:b2:00:88:3e:68:ec:d2:24:c2:f6:71:8d:96:cb:b1:
         f0:77:99:98:fe:45:96:a3:4b:3c:86:0b:9b:5a:e3:43:5a:97:
         15:5e:3a:11:d3:44:ff:37:22:72:c7:93:3e:92:11:f8:4b:d0:
         86:4e:e7:c6:d7:5c:70:b3:9b:52:59:1b:0a:89:7a:3a:3f:4d:
         e6:9d:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:56:25 2025 by rpki-client