Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft
File:                     69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft (raw, json)
Hash identifier:          1h3bDfahkTXxRnAmDpvNVld1KC6G1CkwuXVg1NBleKw=
Subject key identifier:   9C:87:A4:E3:20:69:66:9A:5C:F6:6F:6C:FB:99:41:48:D2:7A:62:39
Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7
Certificate issuer:       /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7
Certificate serial:       0F9DE764B07F253FCB11C4778D250C44EEA46A17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft
Manifest number:          01B4
Signing time:             Sat 03 May 2025 08:11:43 +0000
Manifest this update:     Sat 03 May 2025 08:06:43 +0000
Manifest next update:     Tue 06 May 2025 14:20:43 +0000
Files and hashes:         1: 69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl (hash: 3T9UNgBu2Y/jPnDSEo3vNlZncz3zse/PyFLRdXrl9sM=)
                          2: 3130332e3139362e3131392e302f32342d3234203d3e20313530323131.roa (hash: heu4e8sIQY0GrzrCMXaxDxeM2U05OsH3YIXr+Hp2kfg=)
                          3: 3130332e3139362e3131382e302f32342d3234203d3e20313530323131.roa (hash: k338Lmr2nBFKtOYrTW3s+aTUS4KKRTx1cKwMsZkav7w=)
                          4: 3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (hash: ZuytWq4PWrbArnGlNtL3kdcVQRo24jWxli7Scbb4h7Y=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9d:e7:64:b0:7f:25:3f:cb:11:c4:77:8d:25:0c:44:ee:a4:6a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7
        Validity
            Not Before: May  3 08:06:43 2025 GMT
            Not After : May  6 14:20:43 2025 GMT
        Subject: CN=9C87A4E32069669A5CF66F6CFB994148D27A6239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:5c:97:24:fd:7b:c2:27:59:c1:b4:0f:0a:
                    72:b6:63:e3:5f:7c:cc:ed:96:d6:a5:64:27:70:de:
                    5d:47:77:14:66:e3:06:3d:7f:9d:76:66:b7:89:1d:
                    46:ed:6e:a0:aa:b7:0c:9d:d8:1b:48:97:70:d9:03:
                    3e:b0:b4:76:b2:f2:ad:d1:ec:92:b8:54:11:05:0d:
                    5e:8d:b8:ad:4f:4d:6c:8c:15:54:8e:e7:81:98:61:
                    bf:2d:6f:3d:e1:a7:6f:6f:75:67:63:da:bd:43:2d:
                    9b:b7:0d:79:ce:1d:a7:ff:11:6d:29:16:3f:ba:33:
                    69:c0:f4:d3:d4:90:dc:fa:0a:18:bf:0a:e3:28:6e:
                    73:52:e8:cd:08:c0:70:a6:40:c0:9e:d9:b5:39:80:
                    ea:09:1b:e1:a1:47:3d:b8:e0:27:b0:9d:1a:9e:60:
                    25:a2:c0:7e:e9:04:b4:73:b8:a4:ac:22:ae:ca:c5:
                    dc:9a:54:78:71:f7:a5:12:27:d1:16:f7:d9:78:9c:
                    c9:21:7c:89:6f:30:a3:78:54:8b:aa:61:e8:d1:a5:
                    72:53:68:cc:2a:0e:3a:fe:eb:7f:72:a0:1b:56:67:
                    ea:11:89:ea:a7:d1:88:d1:f1:14:f2:e7:cc:86:93:
                    b8:70:6e:4d:f0:bb:87:b8:b1:0a:8b:e9:d3:da:bb:
                    e1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:87:A4:E3:20:69:66:9A:5C:F6:6F:6C:FB:99:41:48:D2:7A:62:39
            X509v3 Authority Key Identifier:
                keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4c:43:43:5a:71:69:c2:42:62:c2:85:cb:43:85:b7:12:73:
         1f:cd:44:e3:ac:85:cd:95:c9:5d:7b:57:19:67:b9:17:d8:4d:
         25:71:9f:83:10:73:d6:78:f3:74:04:cf:77:90:86:fa:ea:8b:
         98:b5:e7:ea:79:bd:8d:9d:a9:69:1c:28:72:48:ea:5e:59:11:
         81:de:01:c6:ae:a8:50:7d:5c:5c:e6:e2:f1:9c:e0:66:54:21:
         f0:59:2c:80:4f:40:2b:f7:25:d4:86:7b:08:d9:c9:54:e8:a8:
         33:69:82:10:4f:75:d7:e5:12:4e:5c:b7:a2:36:ac:a1:70:a9:
         35:4b:27:6d:2a:61:cd:4e:ca:0a:40:fe:45:a3:e0:8b:b2:67:
         af:cf:95:e7:a6:79:71:e1:32:af:a5:b8:77:4b:ad:fa:63:b3:
         0b:29:13:05:1c:3a:f5:89:73:7f:4f:49:e8:1e:a2:2c:02:90:
         b7:83:92:91:f6:2a:93:a9:0d:61:2f:73:15:6c:b4:48:b5:26:
         fc:74:25:30:76:7d:27:26:09:f4:8c:0b:52:27:da:ee:82:63:
         a7:6f:d1:c4:92:c3:a3:52:fb:7d:1d:94:93:ad:1a:e7:65:de:
         00:5b:28:6a:e9:41:73:c3:91:de:4f:3e:f0:28:84:08:e1:93:
         cc:02:88:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:08:15 2025 by rpki-client