Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft
File:                     575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json)
Hash identifier:          CVZmwvw+wzDTSot1h6kvThlIzGLeWVSMh4KQ7epOKgQ=
Subject key identifier:   BD:E9:4A:F7:33:B1:14:E2:79:27:2E:F8:45:DD:70:06:87:43:0F:A5
Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2
Certificate issuer:       /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2
Certificate serial:       34A63074A4521FBD559C72B3DA39EFABE7BD7F31
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft
Manifest number:          F5
Signing time:             Fri 02 May 2025 23:22:04 +0000
Manifest this update:     Fri 02 May 2025 23:17:04 +0000
Manifest next update:     Tue 06 May 2025 10:52:04 +0000
Files and hashes:         1: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: RrVZtPyxriEQoVj6hpGW8F99p0sxhNdONDeKgEJDDvs=)
                          2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: /A9HXd13I0+DkmsbISwlDHjrM6YvxlLYkQQcEaMVLGM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a6:30:74:a4:52:1f:bd:55:9c:72:b3:da:39:ef:ab:e7:bd:7f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2
        Validity
            Not Before: May  2 23:17:04 2025 GMT
            Not After : May  6 10:52:04 2025 GMT
        Subject: CN=BDE94AF733B114E279272EF845DD700687430FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:5f:0e:64:f8:72:87:1c:49:40:1f:70:9d:
                    39:7e:a3:e3:d7:76:bf:34:8c:b7:8c:87:c8:c4:bd:
                    44:94:8b:bc:33:0f:ff:ed:38:00:2e:ed:fb:e9:b4:
                    c9:e9:7c:37:11:87:77:dc:c4:c6:1f:81:68:cb:ad:
                    1b:3c:fc:3d:35:b3:49:f6:32:b2:f5:11:68:3c:1f:
                    67:78:14:85:30:3f:31:1b:01:b8:c5:6c:da:f4:94:
                    40:1d:d8:db:32:1c:41:34:58:6d:5d:09:4c:90:e6:
                    9b:d5:c6:8e:9e:4f:9d:42:bc:45:c6:c5:55:85:97:
                    cb:92:5f:84:11:ef:54:6b:c8:24:0d:2d:7d:df:45:
                    59:d0:69:c4:0a:3f:c8:21:4c:d6:8e:b7:28:75:b0:
                    24:93:eb:16:27:b8:47:cd:b0:a3:a0:f0:e8:cc:8a:
                    98:dc:36:49:45:61:ab:3f:42:2a:99:4a:a2:f0:a5:
                    a3:21:d1:7e:c9:f9:e3:eb:50:94:96:30:67:fa:5f:
                    11:22:40:da:71:29:10:78:af:d8:3b:cb:f9:ad:21:
                    4c:32:8c:7f:06:29:1f:d8:0c:f3:dd:5f:7a:ac:a7:
                    e7:ce:8d:c1:90:ef:34:47:ce:06:9c:66:67:f3:1b:
                    d4:1a:17:5e:57:3b:c2:cb:8c:50:7b:7c:76:10:5d:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E9:4A:F7:33:B1:14:E2:79:27:2E:F8:45:DD:70:06:87:43:0F:A5
            X509v3 Authority Key Identifier:
                keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:41:b1:08:55:b8:b4:53:61:a7:f2:0a:dd:7b:1d:01:b5:24:
         1d:55:81:7d:89:8f:66:ba:9d:0e:a2:19:bf:cd:57:e3:ca:8a:
         94:0c:78:60:a6:00:90:60:83:91:5c:e1:c5:13:62:3e:a3:e3:
         6d:1b:43:0b:ce:ea:a7:fa:a2:80:b2:db:ce:71:d9:60:09:c0:
         f6:a9:58:28:c1:b8:d4:00:0a:20:f6:fc:14:6a:c2:ec:44:79:
         6a:4b:b0:15:b6:d7:ac:03:45:58:01:ed:24:6f:52:12:94:62:
         2a:b7:20:12:4e:63:d9:8c:1b:9e:d8:81:e3:c5:0b:03:d4:3a:
         8a:b5:65:69:7a:e3:11:fb:cb:63:3b:22:90:f6:c4:8d:9a:22:
         53:d2:ed:3c:6f:03:c7:c6:e8:7f:95:f6:2e:1b:ab:f8:0f:66:
         53:8c:29:07:a6:f0:6f:fa:6d:b0:40:64:9e:bd:67:24:9d:29:
         8f:ed:77:27:5e:3b:5c:c5:cc:36:c6:f6:3f:ab:43:12:e4:87:
         7c:36:70:a3:cc:ea:b4:f8:ec:f7:b4:9b:d3:04:75:9e:33:dc:
         8a:5c:c4:26:4a:28:0c:d7:a0:8a:33:c3:77:89:2f:cc:64:86:
         7f:aa:9d:88:61:8a:3c:8f:4c:fc:8b:97:34:12:19:86:53:8c:
         5c:43:b5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:27:55 2025 by rpki-client