Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
File:                     3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json)
Hash identifier:          yUK2f77KYi0VOZaF7QOwGym7jzHfHRLWFNG3rULUEsQ=
Subject key identifier:   04:6C:F4:11:8B:64:2F:04:F7:AC:13:C4:68:F8:65:AB:37:3F:B5:88
Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
Certificate issuer:       /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Certificate serial:       0B3D70552CEC8F920CE09138BA53B13321658255
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
Manifest number:          017B
Signing time:             Sun 04 May 2025 12:00:39 +0000
Manifest this update:     Sun 04 May 2025 11:55:39 +0000
Manifest next update:     Wed 07 May 2025 12:07:39 +0000
Files and hashes:         1: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: cN13vDHgKlFDJ2jqSD3887+atWcqI0uOGjql+DnlAbA=)
                          2: 3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa (hash: V7RFCHjDQmX/bycVf9vGUXwZyU+bAqqIJro21SU5i0w=)
                          3: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3d:70:55:2c:ec:8f:92:0c:e0:91:38:ba:53:b1:33:21:65:82:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
        Validity
            Not Before: May  4 11:55:39 2025 GMT
            Not After : May  7 12:07:39 2025 GMT
        Subject: CN=046CF4118B642F04F7AC13C468F865AB373FB588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9c:fa:5e:f1:3a:c5:50:1c:e0:97:2f:8f:d5:
                    1a:a0:38:ea:72:84:17:ab:d5:a5:86:de:13:20:80:
                    eb:a0:c4:6c:29:2c:b1:73:10:ce:f8:6f:ca:26:ec:
                    2e:9b:7d:1a:13:d8:4e:a1:6a:96:95:19:e4:66:94:
                    c0:3d:d9:71:0a:3b:82:ba:06:15:82:b4:17:27:74:
                    54:71:0a:f3:c6:61:51:75:c0:0f:d3:a7:1d:78:f3:
                    2f:66:dd:ee:c2:8c:7c:6a:79:4b:33:b1:83:a9:f2:
                    10:52:bb:9d:13:b7:e5:c7:e7:92:5e:84:68:9a:ce:
                    fe:1c:77:ba:95:2d:c5:d7:90:c2:fb:10:ee:c1:8a:
                    6b:51:45:e6:15:3a:9e:db:80:93:ed:8d:df:33:7e:
                    dc:b7:42:59:65:63:c9:f9:35:da:7c:cc:ae:5a:57:
                    d9:c6:2f:e5:1f:01:6f:ce:26:15:d2:1d:39:24:d6:
                    46:0b:63:7d:5d:52:2d:73:88:27:b6:4d:f6:68:fe:
                    b5:db:93:fe:c9:bc:56:03:2e:ed:c9:9f:72:8c:50:
                    8d:02:ec:fb:d6:4d:8e:65:bf:f0:0e:9b:01:c8:42:
                    4c:a1:56:b1:1a:91:81:82:81:77:bf:24:52:d3:7c:
                    c1:a7:3c:19:9c:6a:e2:90:e8:82:e9:31:dc:55:53:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6C:F4:11:8B:64:2F:04:F7:AC:13:C4:68:F8:65:AB:37:3F:B5:88
            X509v3 Authority Key Identifier:
                keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:46:f7:d7:15:2f:cf:52:4f:f2:23:2b:30:d0:2d:b5:6f:0e:
         b1:50:0e:3c:b9:68:d8:5b:7f:32:ad:f8:d3:17:f0:30:2d:09:
         70:af:39:50:99:0b:a1:ab:de:0f:bc:1c:c6:88:4b:7a:88:d2:
         e9:23:e7:68:81:3a:e7:18:8f:5a:7e:7a:ce:d4:1f:b2:c6:58:
         29:59:ec:f2:63:e3:34:e8:55:e5:25:5a:5b:e1:11:81:63:27:
         73:ec:c5:d8:eb:b1:11:11:9c:c0:ae:fb:b0:29:55:84:eb:92:
         12:e3:75:82:ec:b2:af:f5:ee:3e:0d:41:ac:6e:20:f4:de:f6:
         34:df:2d:ab:e8:ee:6c:ec:15:58:f1:00:f7:d4:85:d7:bd:bd:
         e0:26:77:43:c1:8b:4a:0f:14:9b:b7:98:3f:c1:da:c1:a8:99:
         c3:8d:98:67:a0:32:4a:96:2f:1c:a5:c5:76:a4:be:71:63:fb:
         69:09:e9:57:f6:e1:16:40:03:9d:08:15:93:d3:38:45:fc:57:
         70:74:7c:0d:cf:c1:ec:ea:f7:ba:6e:3b:aa:48:38:98:b5:58:
         ef:87:ac:53:26:9e:89:b4:e6:97:59:b0:72:b3:0e:c1:34:dd:
         4c:fb:ec:e2:36:e8:7b:b7:b3:09:32:d7:e7:fd:27:1d:a7:60:
         30:4d:7a:d5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUCz1wVSzsj5IM4JE4ulOxMyFlglUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1
RUVDMjM5QjAeFw0yNTA1MDQxMTU1MzlaFw0yNTA1MDcxMjA3MzlaMDMxMTAvBgNV
BAMTKDA0NkNGNDExOEI2NDJGMDRGN0FDMTNDNDY4Rjg2NUFCMzczRkI1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhnPpe8TrFUBzgly+P1RqgOOpy
hBer1aWG3hMggOugxGwpLLFzEM74b8om7C6bfRoT2E6hapaVGeRmlMA92XEKO4K6
BhWCtBcndFRxCvPGYVF1wA/Tpx148y9m3e7CjHxqeUszsYOp8hBSu50Tt+XH55Je
hGiazv4cd7qVLcXXkML7EO7BimtRReYVOp7bgJPtjd8zfty3QlllY8n5Ndp8zK5a
V9nGL+UfAW/OJhXSHTkk1kYLY31dUi1ziCe2TfZo/rXbk/7JvFYDLu3Jn3KMUI0C
7PvWTY5lv/AOmwHIQkyhVrEakYGCgXe/JFLTfMGnPBmcauKQ6ILpMdxVUyr7AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBGz0EYtkLwT3rBPEaPhlqzc/tYgwHwYDVR0j
BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB
QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD
MjM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz
ZmUtNmU4MmU3ODNiMWUxLzAvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERD
MjA1RUVDMjM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAJG99cVL89ST/IjKzDQLbVvDrFQDjy5aNhb
fzKt+NMX8DAtCXCvOVCZC6Gr3g+8HMaIS3qI0ukj52iBOucYj1p+es7UH7LGWClZ
7PJj4zToVeUlWlvhEYFjJ3PsxdjrsRERnMCu+7ApVYTrkhLjdYLssq/17j4NQaxu
IPTe9jTfLavo7mzsFVjxAPfUhde9veAmd0PBi0oPFJu3mD/B2sGomcONmGegMkqW
LxylxXakvnFj+2kJ6Vf24RZAA50IFZPTOEX8V3B0fA3Pwezq97puO6pIOJi1WO+H
rFMmnom05pdZsHKzDsE03Uz77OI26Hu3swky1+f9Jx2nYDBNetU=
-----END CERTIFICATE-----
Generated at Wed May 7 14:45:05 2025 by rpki-client