Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft
File:                     94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft (raw, json)
Hash identifier:          Zm2gp+cPH+8mXfZnqBjGMT2IQSXOKnReur7xPdOorF4=
Subject key identifier:   59:3C:85:00:B6:2E:26:EC:90:EF:EF:56:C9:85:CB:D9:31:08:AF:D2
Authority key identifier: 94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C
Certificate issuer:       /CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C
Certificate serial:       7A40284BFE924EEC0BA26EAEF5136840D67E5AC5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft
Manifest number:          C8
Signing time:             Sat 03 May 2025 04:00:41 +0000
Manifest this update:     Sat 03 May 2025 03:55:41 +0000
Manifest next update:     Tue 06 May 2025 15:57:41 +0000
Files and hashes:         1: 33362e35302e3232322e302f32332d3233203d3e20313532303636.roa (hash: IgVoycKP5/mx7bgYUiplGIVv/fIKosSF5j4o1IpUqEA=)
                          2: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl (hash: ZLLRSfuMVbue0vl1/MYtVwNPHlkBGiVOAx4rl2KizTc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:40:28:4b:fe:92:4e:ec:0b:a2:6e:ae:f5:13:68:40:d6:7e:5a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C
        Validity
            Not Before: May  3 03:55:41 2025 GMT
            Not After : May  6 15:57:41 2025 GMT
        Subject: CN=593C8500B62E26EC90EFEF56C985CBD93108AFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:23:2a:fd:64:73:68:6e:86:5d:19:18:15:55:
                    c5:96:48:72:c2:e0:10:85:1a:f8:f7:80:25:f0:5e:
                    b2:0c:8e:98:c8:9d:d9:40:c0:d3:ba:a9:db:84:23:
                    a6:c2:5a:02:48:6b:81:2d:24:58:0b:19:8f:8b:a5:
                    ea:b1:13:35:a6:6c:f9:98:03:92:2a:78:ca:61:3f:
                    a9:ce:ef:08:a1:4f:7f:e4:cc:f3:15:e1:3a:25:76:
                    0a:8a:2a:f3:38:91:c2:f3:c8:f0:04:61:56:59:de:
                    95:40:0b:65:d5:a1:90:3f:e3:fa:2d:09:87:3f:87:
                    11:dc:70:dd:ce:1b:50:48:2a:a2:46:30:69:dc:06:
                    14:aa:e1:5c:7d:ee:94:26:67:e6:0c:e1:75:10:94:
                    6f:98:39:a2:7b:e3:b9:75:df:72:9e:80:29:f7:b2:
                    6a:6b:c3:8e:67:6e:30:45:6a:9f:f1:6a:7a:f7:53:
                    af:b0:75:e2:0e:73:ed:ec:db:2a:79:57:ab:d3:b4:
                    17:3f:24:c1:58:9f:7c:25:3d:56:62:e0:55:1a:a6:
                    2e:92:61:7a:25:b8:cd:62:e0:a6:e2:74:15:fb:00:
                    0d:8b:f3:c1:b8:58:b4:b5:9b:e5:e4:4f:39:1f:ed:
                    2e:45:23:e3:71:30:1b:12:12:c2:6f:78:82:fd:8b:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3C:85:00:B6:2E:26:EC:90:EF:EF:56:C9:85:CB:D9:31:08:AF:D2
            X509v3 Authority Key Identifier:
                keyid:94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:51:20:e1:f6:c5:23:4c:eb:a8:89:35:cb:b3:e3:a2:2f:
         6e:ef:8e:73:f0:02:32:45:3e:15:14:60:96:ab:97:7c:c3:f6:
         2a:45:ff:f3:bd:66:7d:1e:dd:3f:a6:42:a2:ea:2a:e3:92:a2:
         4d:64:98:fa:2b:5d:06:4a:d8:1e:f3:ad:95:91:4e:b8:c6:b7:
         c4:ab:e1:06:e5:13:16:82:7f:dc:52:17:82:a6:8e:2c:3d:85:
         7a:47:72:0b:ba:d1:9f:07:9f:92:4f:f5:ce:b1:19:0c:1e:8a:
         df:e4:19:80:3e:8e:1b:4e:73:e8:0a:aa:88:1d:f3:22:2c:e4:
         33:38:ad:f0:ee:e2:1a:77:0a:7a:45:12:b9:1d:b2:ca:f7:f7:
         63:0b:28:66:86:2d:68:89:84:3f:7b:c5:1b:01:c1:33:9b:11:
         1e:0c:07:c6:f5:59:9b:3c:2e:5f:12:e7:18:13:f7:f3:20:30:
         b6:bc:18:80:a5:43:5b:5e:52:65:8b:a9:fa:ac:a4:b4:89:37:
         f0:38:c2:4c:87:07:14:18:0b:07:cb:a8:62:64:d4:67:97:fc:
         dd:d0:0c:91:99:1a:f5:15:eb:e0:e2:1a:7e:3f:3a:33:de:9b:
         73:c8:6d:b2:13:71:d9:1b:3d:23:c8:b5:cb:39:1a:69:dc:92:
         00:d7:d7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:13:00 2025 by rpki-client