Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft
File:                     B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json)
Hash identifier:          spNXosBzTeBfGmWL4RQfeKkRdCp9iIN0H6pGhnMYWQw=
Subject key identifier:   5F:25:50:F9:CB:69:86:58:40:14:DF:26:FA:66:A0:3C:1D:28:C1:F2
Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0
Certificate issuer:       /CN=B59504F478A4226C16D97004A6F98153CD19D2E0
Certificate serial:       3E43B5AEC604516F7F32B2BBE8449EE7DECBB648
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft
Manifest number:          22
Signing time:             Sat 03 May 2025 23:02:19 +0000
Manifest this update:     Sat 03 May 2025 22:57:19 +0000
Manifest next update:     Wed 07 May 2025 00:48:19 +0000
Files and hashes:         1: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: /eVyV+v4TqRBOCrJHskHf+ebiistjsoPKDV9cwK/0YM=)
                          2: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: 3JVZnoM38MMLZt8EaIuKj3KzjzbuiEZaBDfLeCAseRs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:43:b5:ae:c6:04:51:6f:7f:32:b2:bb:e8:44:9e:e7:de:cb:b6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0
        Validity
            Not Before: May  3 22:57:19 2025 GMT
            Not After : May  7 00:48:19 2025 GMT
        Subject: CN=5F2550F9CB6986584014DF26FA66A03C1D28C1F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:b8:67:3a:48:d8:97:75:56:26:e0:17:bc:
                    ce:8e:63:ef:bf:74:ab:01:be:34:aa:11:59:19:f1:
                    05:6a:ea:f5:d6:10:3b:71:0f:70:01:b4:01:98:85:
                    4b:3f:8e:55:5f:f5:de:59:72:fa:1e:53:2b:ad:f2:
                    6d:f1:f4:aa:52:2f:5b:f7:af:7d:32:fa:4c:15:b5:
                    03:7a:2b:64:df:d4:e3:91:f7:2a:1d:e7:c2:a6:98:
                    65:3a:06:cc:66:b5:59:16:c2:72:1d:f3:f9:c1:dc:
                    a7:3f:3d:5b:4e:b3:88:94:4b:da:9b:bd:67:3c:df:
                    f0:cb:a0:58:99:e8:b2:db:23:53:38:7c:a3:bc:a1:
                    21:67:1d:46:ce:a2:98:11:e7:3d:37:4f:09:67:85:
                    1d:b2:1f:5c:c5:9e:f2:f8:ba:13:2d:5b:31:e9:37:
                    3f:4c:50:dd:cc:60:b2:02:9d:de:1b:08:13:14:1e:
                    f6:4c:4c:45:5d:b8:2e:27:b6:ed:0e:6d:5e:6b:d0:
                    23:8b:03:22:54:b9:4c:54:ac:a6:65:77:15:78:79:
                    5a:3a:d2:b4:6a:24:bc:08:04:ea:a7:86:25:6d:61:
                    88:a7:62:df:1e:f3:4d:66:c3:14:2b:ed:64:36:d0:
                    ba:f2:8d:64:42:65:79:64:5f:c3:ce:28:1e:77:a2:
                    92:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:25:50:F9:CB:69:86:58:40:14:DF:26:FA:66:A0:3C:1D:28:C1:F2
            X509v3 Authority Key Identifier:
                keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ba:23:21:d9:49:21:ad:12:98:0b:8c:45:1a:f9:03:7a:af:
         35:1a:4a:99:b6:bf:56:57:e1:7b:d1:12:5e:0a:00:b0:aa:ca:
         40:ad:78:6a:93:dd:63:13:3c:0c:23:da:2a:4b:79:06:29:bf:
         aa:e4:3e:ac:a0:bd:30:9e:43:2c:92:11:81:91:1d:37:62:50:
         b7:05:08:0b:ca:fc:5e:73:6a:ee:d2:c8:89:c1:43:61:50:a1:
         1b:66:00:69:57:dc:c8:43:eb:0b:2b:8f:8f:3e:6f:0b:c8:f4:
         3d:ac:c7:8b:76:bb:da:99:f1:26:22:84:18:03:19:ef:7e:ea:
         d6:bd:b5:5d:87:36:e3:62:9c:b2:19:68:e4:de:50:b3:4b:06:
         83:73:c3:c8:cc:02:ba:13:93:be:65:12:26:47:7e:49:8d:da:
         67:a5:5d:3a:fc:22:a0:da:f5:de:22:de:38:73:13:77:80:51:
         bd:6d:95:8a:dc:a8:9a:61:4c:c4:92:be:88:d4:9b:03:ff:d2:
         74:1e:af:9d:10:7e:eb:25:51:00:3c:1e:41:be:2b:d1:c9:2d:
         12:09:b2:d4:f0:2e:cf:55:3b:1e:92:0f:d0:ab:11:5d:11:af:
         79:4a:42:ed:9b:55:9c:bd:2b:bf:ed:dd:18:84:60:44:52:d8:
         db:93:f5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:18:56 2025 by rpki-client