Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft
File:                     EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft (raw, json)
Hash identifier:          HL/XlyYthTEi+W0Dgb0tNsUZdCkittjwkWEnlm2ZarE=
Subject key identifier:   5A:04:DC:3A:8D:87:F0:54:82:9B:D7:6C:8F:2A:86:4A:77:DA:EE:0F
Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68
Certificate issuer:       /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68
Certificate serial:       266397559C0ABE450590AFD4156A326866FF1F94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft
Manifest number:          019A
Signing time:             Sun 04 May 2025 10:50:44 +0000
Manifest this update:     Sun 04 May 2025 10:45:44 +0000
Manifest next update:     Wed 07 May 2025 13:17:44 +0000
Files and hashes:         1: EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl (hash: vKDpin4S4zcLGc+VJ3gf8pnnfs5T+OPOn9SPOzXhYyg=)
                          2: 3130332e32302e38372e302f32342d3234203d3e2039333431.roa (hash: nU+kB+NyHUbVoehF82OX5jrQgK7DFWejShKduq8TLqc=)
                          3: 3130332e32302e38362e302f32332d3233203d3e2039333431.roa (hash: X0XLAhvGZfiRvCVCUyNsPxOOwPw6McDgsETmSQQOHuM=)
                          4: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (hash: VkkcM1AqEwXsS/hQawzqHg+YyvXNA8/GMbHDz4dyi9o=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:63:97:55:9c:0a:be:45:05:90:af:d4:15:6a:32:68:66:ff:1f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68
        Validity
            Not Before: May  4 10:45:44 2025 GMT
            Not After : May  7 13:17:44 2025 GMT
        Subject: CN=5A04DC3A8D87F054829BD76C8F2A864A77DAEE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e9:e4:02:25:62:94:a9:93:61:72:41:72:9f:
                    88:5a:c7:c6:2b:7a:c8:29:ab:f3:04:2d:8b:a9:81:
                    b0:a4:2c:d8:11:51:4a:98:49:86:63:20:1a:0c:7d:
                    1f:76:a8:58:ab:aa:46:5d:6b:d0:06:d8:41:eb:e5:
                    92:e5:50:64:40:69:f3:17:c2:e9:e4:a7:90:af:5a:
                    47:ed:53:00:04:29:81:30:b6:a8:43:0f:82:0e:23:
                    51:16:44:bd:88:34:66:aa:ad:f4:2d:5b:8a:aa:43:
                    06:c6:6a:cf:70:78:ac:9d:14:ec:22:fa:70:d1:19:
                    da:29:eb:a5:3d:41:9e:06:a2:58:bb:18:73:d9:a6:
                    64:f6:7f:62:89:0c:d1:ce:b8:9e:2e:fd:8c:95:88:
                    61:c4:ef:e3:80:f3:5c:6c:57:30:58:ab:41:5d:8c:
                    e2:bb:96:a8:b7:d8:9a:7f:0b:29:7a:0f:45:a9:5e:
                    0d:54:73:3e:02:c5:8d:d0:5e:f1:7c:a0:fa:07:4c:
                    ce:0f:c9:17:30:99:dd:07:dc:a9:1b:42:80:2c:98:
                    57:c5:3b:82:b5:ae:05:a7:6b:4a:24:7d:44:a6:3a:
                    88:5b:ef:6a:cc:91:9b:b6:25:82:e7:ed:fa:86:d1:
                    bd:92:2c:40:d5:cc:c0:52:0b:fb:45:20:b8:ea:b8:
                    a4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:04:DC:3A:8D:87:F0:54:82:9B:D7:6C:8F:2A:86:4A:77:DA:EE:0F
            X509v3 Authority Key Identifier:
                keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1b:f6:81:ff:74:36:ad:67:75:6d:17:ba:4e:b1:3e:aa:94:
         63:8b:92:3e:e5:8b:f0:73:11:d3:8a:d3:05:d5:84:bf:f7:73:
         91:71:fa:29:51:a0:80:c4:35:cd:10:23:64:05:16:8a:c1:55:
         fc:2a:6c:fc:ba:72:50:d1:a6:f3:1a:cf:d7:50:04:c4:ce:dd:
         d7:f0:41:0c:bd:8f:90:13:a3:32:21:e5:c8:36:f9:a9:b2:2b:
         a0:12:2f:10:2e:72:a8:b7:fc:01:1f:c3:cf:e0:59:f4:f3:db:
         ea:d8:bf:6b:a4:2b:ad:b1:c3:80:31:02:8f:3a:2e:f6:ee:26:
         2e:56:89:75:28:73:af:fe:26:f1:d7:84:2b:91:81:1c:dd:7d:
         23:fd:d7:25:54:e7:24:f6:6e:ca:f1:27:e4:c5:dd:cb:14:7c:
         13:18:23:58:c0:8e:d3:86:b0:ac:9a:92:d0:cb:37:49:d9:10:
         af:69:5a:0e:1d:8c:62:b2:41:d2:94:76:3b:bc:fb:d4:5f:f0:
         b5:23:65:67:dc:9b:ba:15:5f:77:b9:36:4c:4b:4a:41:4f:8b:
         af:5f:ec:62:ab:88:b3:81:b8:6c:e2:c4:d5:4e:8d:9e:d1:45:
         22:43:1f:ca:61:3a:ab:3e:87:1f:6e:75:16:6c:c5:55:2b:2c:
         2f:17:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:12:12 2025 by rpki-client