Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
File:                     38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft (raw, json)
Hash identifier:          Nwi01nKb368SaMieZWtQPKy1n8wleKzVVbr0mwW0kDo=
Subject key identifier:   2D:3D:30:90:8E:5B:9B:A3:4E:B2:4A:89:02:28:1A:71:F5:DE:B9:C4
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       3FF131016A358442539F7318067F70CB6C02A14F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
Manifest number:          0147
Signing time:             Sat 03 May 2025 02:30:54 +0000
Manifest this update:     Sat 03 May 2025 02:25:54 +0000
Manifest next update:     Tue 06 May 2025 09:25:54 +0000
Files and hashes:         1: 3130332e3234372e34302e302f32322d3234203d3e203535363835.roa (hash: ANeXRudYRQj4brheIa8AOL0aZoGg1PXmE4qO0owNUkM=)
                          2: 3130332e3234372e34302e302f32342d3234203d3e203535363835.roa (hash: syH1wAS1MJE37vuCgOfSHfZ8nbZq+QzwV/xWmgvAdI0=)
                          3: 38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl (hash: Gq9j+Gdh+wkjegn11o1T1Sa3bsG5L3SlqRfXaBF32Uw=)
                          4: 3130332e3130382e3133312e302f32342d3234203d3e203535363835.roa (hash: ZjcfSae5HFvDvqeideaLIabcOtFfSEUtzUNHxjp54qE=)
                          5: 3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (hash: pU683GKaElbx02fGnAze4HxdiyKXbycozWmgiE+EA3I=)
                          6: 3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (hash: kBNBu6yeQhVM/8eFQmRNaz5z+ct6Yh5CCwCxI69k5F4=)
                          7: 3130332e3130382e3133302e302f32342d3234203d3e203535363835.roa (hash: /15wV8i/i7B6FG9n08XOQypn1bQfdzKavjdkmpF3lT8=)
                          8: 3130332e3130382e3132382e302f32322d3234203d3e203535363835.roa (hash: hPWPE86ID8N/pDjOig5ZnAROXRyFprGMRItIMoptWSY=)
                          9: 3130332e3130382e3132382e302f32342d3234203d3e203535363835.roa (hash: XgIzc0IbUT3BWzqPVrjaBsZEWwMYT+TR7O6PzuuQ5e4=)
                          10: 3130332e3234372e34322e302f32342d3234203d3e203535363835.roa (hash: ZVjcgaXDQ3D4zS6Ow7WrzE6JOTbumwvNfFh1MEq4Yks=)
                          11: 3130332e3130382e3132392e302f32342d3234203d3e203535363835.roa (hash: cC0bspkR4GLKr9LN2JfncBaT2JjHlS3Wp16ygdKgQmU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f1:31:01:6a:35:84:42:53:9f:73:18:06:7f:70:cb:6c:02:a1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: May  3 02:25:54 2025 GMT
            Not After : May  6 09:25:54 2025 GMT
        Subject: CN=2D3D30908E5B9BA34EB24A8902281A71F5DEB9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:94:92:1f:6e:4b:2c:fb:a5:f3:18:17:cb:
                    3a:2f:01:3c:66:ad:87:28:c7:49:1b:6d:b0:ad:4c:
                    b7:33:e9:a9:cd:f7:b5:9a:4e:2e:15:19:59:a8:c0:
                    18:c1:7b:71:7e:13:ee:2e:75:aa:25:9f:01:85:f9:
                    df:a6:65:59:78:93:e5:0d:9e:70:6c:27:f8:ce:cc:
                    7b:d0:a1:6b:75:f8:75:a1:ba:90:61:fc:73:ff:25:
                    04:29:9f:79:9e:55:11:ea:bb:ca:b5:55:a1:b1:b8:
                    3d:3b:5c:74:29:52:a3:8a:ac:2d:3e:74:54:f9:43:
                    34:a7:d3:ca:df:b5:1b:e8:6b:af:e5:19:3c:0c:a2:
                    f0:35:93:92:55:60:e9:d7:4a:20:09:10:ff:98:1c:
                    69:fc:fd:24:87:00:d9:76:55:ba:3c:c5:6c:62:7b:
                    60:83:0c:5d:6b:cc:ae:0d:e7:49:7d:ab:3e:84:24:
                    f2:a3:0e:c7:1c:82:2e:06:a2:55:3a:aa:2d:40:46:
                    7b:c8:e8:b5:a5:06:04:b1:48:64:ef:b3:4d:37:62:
                    d3:6f:88:d7:03:1f:bc:4e:a5:c5:3a:22:34:ff:96:
                    28:92:33:59:74:b9:35:f8:e5:6a:f6:f8:76:80:54:
                    33:71:d4:32:04:2e:85:ff:51:31:92:4a:6f:a7:64:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3D:30:90:8E:5B:9B:A3:4E:B2:4A:89:02:28:1A:71:F5:DE:B9:C4
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:69:dc:a4:85:71:61:e3:3e:d3:e9:86:55:20:9f:20:2c:14:
         29:50:59:8f:ab:d5:10:82:8f:16:61:a3:57:c4:45:43:54:e6:
         ad:e9:33:be:43:a6:6d:a7:93:86:3a:42:cd:8c:2b:a2:79:91:
         60:06:7f:f3:da:33:bc:d4:df:8c:3a:93:97:a9:ea:c0:f2:bb:
         a3:78:78:c4:0f:04:e8:02:fc:80:c3:29:de:bb:62:6e:d6:f3:
         36:6d:2c:eb:b6:c7:27:ce:53:80:32:42:32:25:89:15:c2:d1:
         8f:b1:f4:7e:7e:84:14:80:30:7e:f7:f8:6c:c8:ae:f6:0e:ac:
         64:4b:f2:8c:2f:8d:43:f8:bb:22:dd:0d:49:98:bf:24:9a:a4:
         3a:fb:d3:e1:6b:e9:c5:21:35:ce:06:2d:9a:ce:9c:49:fe:2c:
         54:31:57:17:b1:44:86:7a:be:bd:4a:a5:23:df:b1:09:9f:08:
         47:c5:49:09:0e:8b:b6:a9:16:20:d4:79:76:40:79:d4:e9:d5:
         f7:a4:d0:db:04:99:5f:d3:a4:38:98:01:3c:b3:b4:86:db:dc:
         ba:3c:74:dc:46:4b:22:eb:8f:82:72:22:37:c5:42:43:ad:70:
         81:90:c4:15:ea:5c:da:e3:75:91:b8:25:ed:a5:76:5a:ec:6c:
         64:1b:c2:29
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUP/ExAWo1hEJTn3MYBn9wy2wCoU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3
MjJDMjk0RDAeFw0yNTA1MDMwMjI1NTRaFw0yNTA1MDYwOTI1NTRaMDMxMTAvBgNV
BAMTKDJEM0QzMDkwOEU1QjlCQTM0RUIyNEE4OTAyMjgxQTcxRjVERUI5QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvGZSSH25LLPul8xgXyzovATxm
rYcox0kbbbCtTLcz6anN97WaTi4VGVmowBjBe3F+E+4udaolnwGF+d+mZVl4k+UN
nnBsJ/jOzHvQoWt1+HWhupBh/HP/JQQpn3meVRHqu8q1VaGxuD07XHQpUqOKrC0+
dFT5QzSn08rftRvoa6/lGTwMovA1k5JVYOnXSiAJEP+YHGn8/SSHANl2Vbo8xWxi
e2CDDF1rzK4N50l9qz6EJPKjDsccgi4GolU6qi1ARnvI6LWlBgSxSGTvs003YtNv
iNcDH7xOpcU6IjT/liiSM1l0uTX45Wr2+HaAVDNx1DIELoX/UTGSSm+nZLx9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULT0wkI5bm6NOskqJAigacfXeucQwHwYDVR0j
BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD
ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD
Mjk0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI4MDg5YTctMGE2OC00ZDY3LWFk
YWItNzZkN2Q5MjcxZmRlLzAvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEw
NUQ3MjJDMjk0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAENp3KSFcWHjPtPphlUgnyAsFClQWY+r1RCC
jxZho1fERUNU5q3pM75Dpm2nk4Y6Qs2MK6J5kWAGf/PaM7zU34w6k5ep6sDyu6N4
eMQPBOgC/IDDKd67Ym7W8zZtLOu2xyfOU4AyQjIliRXC0Y+x9H5+hBSAMH73+GzI
rvYOrGRL8owvjUP4uyLdDUmYvySapDr70+Fr6cUhNc4GLZrOnEn+LFQxVxexRIZ6
vr1KpSPfsQmfCEfFSQkOi7apFiDUeXZAedTp1fek0NsEmV/TpDiYATyztIbb3Lo8
dNxGSyLrj4JyIjfFQkOtcIGQxBXqXNrjdZG4Je2ldlrsbGQbwik=
-----END CERTIFICATE-----
Generated at Wed May 7 14:14:07 2025 by rpki-client