Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft
File:                     9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft (raw, json)
Hash identifier:          vpSxnWDN29g/mAISvI5c+ZHjzaVvus7M45lCGRz68HQ=
Subject key identifier:   06:5C:DD:61:78:E8:B6:E4:61:9E:AD:F2:2B:BE:3E:D2:E7:1E:3D:53
Authority key identifier: 9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA
Certificate issuer:       /CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA
Certificate serial:       58FB95AC84D611763624EF8849D1E6DDEEFF80B4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft
Manifest number:          3A
Signing time:             Sat 03 May 2025 21:00:03 +0000
Manifest this update:     Sat 03 May 2025 20:55:03 +0000
Manifest next update:     Wed 07 May 2025 05:15:03 +0000
Files and hashes:         1: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl (hash: yuyZi6xtjFmr8/ek2898u1+l1Vph8Rlm5X9JsJttHSc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fb:95:ac:84:d6:11:76:36:24:ef:88:49:d1:e6:dd:ee:ff:80:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA
        Validity
            Not Before: May  3 20:55:03 2025 GMT
            Not After : May  7 05:15:03 2025 GMT
        Subject: CN=065CDD6178E8B6E4619EADF22BBE3ED2E71E3D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:1a:21:57:63:a7:79:44:de:05:05:22:da:
                    de:bf:27:4f:96:66:36:41:0c:0c:9a:de:de:bb:55:
                    3f:6e:08:a1:66:07:ee:35:60:85:4e:83:5d:d4:fb:
                    fd:38:76:50:cc:a6:be:8a:4e:ab:19:cf:b9:bf:be:
                    11:e7:48:73:77:75:6e:f9:61:b6:a0:89:d4:ae:f7:
                    86:42:29:ac:f1:11:67:57:04:63:d2:f9:fb:94:74:
                    1d:1c:df:ed:10:a8:c5:42:b3:0c:46:52:af:cb:65:
                    9f:b2:0a:36:ea:ab:8c:c2:ff:36:b6:79:ab:81:31:
                    92:6b:91:2b:1f:aa:e3:88:22:c8:88:f5:d1:84:28:
                    9c:39:9d:9f:26:b7:86:01:69:82:f3:71:c4:31:34:
                    ca:8b:40:a8:75:0a:36:40:a6:e2:28:a3:eb:36:8b:
                    9c:5d:08:d5:de:42:6d:7c:e5:d1:bc:a2:2c:38:93:
                    ab:af:11:85:58:d1:3d:47:f2:91:1f:c4:08:2d:62:
                    a4:d8:ac:53:c3:a4:20:da:d7:2a:ee:7d:b4:4b:3c:
                    ff:b4:51:0a:a4:37:44:e4:48:37:3d:c2:46:fb:6d:
                    d9:a7:f6:bf:90:ab:83:5c:1b:1b:80:b1:84:c0:19:
                    ba:4d:3e:8a:60:2a:61:64:d8:c5:c8:41:d8:e1:eb:
                    9c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5C:DD:61:78:E8:B6:E4:61:9E:AD:F2:2B:BE:3E:D2:E7:1E:3D:53
            X509v3 Authority Key Identifier:
                keyid:9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:83:57:4b:47:45:42:cf:ad:41:38:be:f9:69:04:8b:47:48:
         ea:d1:3f:ff:48:fe:97:75:d7:3c:35:35:96:02:d6:b7:61:db:
         3d:4f:9a:2b:0b:5f:62:4f:32:70:fa:63:0f:b5:75:63:cc:3a:
         61:84:cf:8d:bd:83:a3:aa:b2:e8:2f:de:98:f9:a7:36:c5:1c:
         fd:d4:1f:2f:22:56:82:6d:23:ca:3e:13:d8:79:4a:1f:19:d1:
         50:f4:02:45:7c:b2:00:35:39:a0:e0:56:dc:98:bb:da:8c:fe:
         1e:f1:ac:b6:5e:89:cd:e1:63:08:85:bf:b2:d4:78:75:ac:65:
         95:5f:f2:55:de:e5:6d:69:29:90:37:68:8d:12:30:54:7b:52:
         92:1d:ff:48:07:8e:81:86:8d:94:28:c9:5b:a3:95:94:58:d9:
         43:54:0e:c6:89:b6:7f:58:27:d3:35:b1:e9:16:a3:21:81:e7:
         c9:d9:dc:92:99:9c:ec:ff:dd:7f:25:ad:c4:04:f6:91:48:62:
         de:ff:0f:05:2a:55:76:0a:2a:23:67:e4:90:58:9a:cb:c2:08:
         3e:9e:12:b3:c3:61:de:06:a1:9c:de:f9:a4:c5:7d:a0:24:23:
         1d:e5:ff:de:c5:27:64:9f:d9:15:50:37:12:7d:e8:e2:1e:71:
         18:5b:c4:65
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWPuVrITWEXY2JO+ISdHm3e7/gLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5
REFGRkFFQTAeFw0yNTA1MDMyMDU1MDNaFw0yNTA1MDcwNTE1MDNaMDMxMTAvBgNV
BAMTKDA2NUNERDYxNzhFOEI2RTQ2MTlFQURGMjJCQkUzRUQyRTcxRTNENTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lBohV2OneUTeBQUi2t6/J0+W
ZjZBDAya3t67VT9uCKFmB+41YIVOg13U+/04dlDMpr6KTqsZz7m/vhHnSHN3dW75
YbagidSu94ZCKazxEWdXBGPS+fuUdB0c3+0QqMVCswxGUq/LZZ+yCjbqq4zC/za2
eauBMZJrkSsfquOIIsiI9dGEKJw5nZ8mt4YBaYLzccQxNMqLQKh1CjZApuIoo+s2
i5xdCNXeQm185dG8oiw4k6uvEYVY0T1H8pEfxAgtYqTYrFPDpCDa1yrufbRLPP+0
UQqkN0TkSDc9wkb7bdmn9r+Qq4NcGxuAsYTAGbpNPopgKmFk2MXIQdjh65zDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUBlzdYXjotuRhnq3yK74+0ucePVMwHwYDVR0j
BBgwFoAUn18Y7AIvXgRlcs1fXMQh+p2v+uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MmFlNWUyMS0wOGNjLTRjYTQtYjk5Yy01ZmY1YTBkNDY0OTAvMC85RjVGMThFQzAy
MkY1RTA0NjU3MkNENUY1Q0M0MjFGQTlEQUZGQUVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5REFG
RkFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5
OWMtNWZmNWEwZDQ2NDkwLzAvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIx
RkE5REFGRkFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJiDV0tHRULPrUE4vvlpBItHSOrRP/9I/pd1
1zw1NZYC1rdh2z1PmisLX2JPMnD6Yw+1dWPMOmGEz429g6Oqsugv3pj5pzbFHP3U
Hy8iVoJtI8o+E9h5Sh8Z0VD0AkV8sgA1OaDgVtyYu9qM/h7xrLZeic3hYwiFv7LU
eHWsZZVf8lXe5W1pKZA3aI0SMFR7UpId/0gHjoGGjZQoyVujlZRY2UNUDsaJtn9Y
J9M1sekWoyGB58nZ3JKZnOz/3X8lrcQE9pFIYt7/DwUqVXYKKiNn5JBYmsvCCD6e
ErPDYd4GoZze+aTFfaAkIx3l/97FJ2Sf2RVQNxJ96OIecRhbxGU=
-----END CERTIFICATE-----
Generated at Wed May 7 18:01:34 2025 by rpki-client