Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft
File:                     CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json)
Hash identifier:          A0btFU3wAa3/NmTzPSMhkoFRUYahfejIAAddKjyp1jI=
Subject key identifier:   F8:7E:C4:5F:48:42:4C:AA:94:A7:E7:4D:82:4E:25:85:59:63:C1:55
Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3
Certificate issuer:       /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3
Certificate serial:       59294CA1A106616A163482352CD85352B6A62714
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft
Manifest number:          04CB
Signing time:             Sat 03 May 2025 04:30:51 +0000
Manifest this update:     Sat 03 May 2025 04:25:51 +0000
Manifest next update:     Tue 06 May 2025 10:46:51 +0000
Files and hashes:         1: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: inTtE/2z3zxOo2M8puwuxje9wrX7I3TQwEI651FTI7w=)
                          2: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: 6/BGm352ofBFwmMWeXlwLiQDWFsCjJihfEUy/SjVwOI=)
                          3: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: ioqboiUAr3O36qQyOflg7QH1kHVcsCYDnZhglF1dRBk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:29:4c:a1:a1:06:61:6a:16:34:82:35:2c:d8:53:52:b6:a6:27:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3
        Validity
            Not Before: May  3 04:25:51 2025 GMT
            Not After : May  6 10:46:51 2025 GMT
        Subject: CN=F87EC45F48424CAA94A7E74D824E25855963C155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:64:93:af:f8:2b:a9:87:71:18:a6:43:d8:99:
                    63:50:fb:75:be:d8:9d:36:a5:6c:39:df:0c:74:b2:
                    f7:0a:bb:4f:1f:be:62:45:0f:6d:ca:d2:75:2f:ac:
                    e7:d9:1f:9d:79:d8:55:13:84:8a:ae:e8:36:a0:7a:
                    1f:83:11:26:6b:f5:31:ea:d3:06:47:fa:4a:52:22:
                    61:ab:e5:53:22:42:b3:8e:90:cb:64:a6:1c:54:b0:
                    80:5a:2f:41:7b:82:18:cf:64:92:f9:0d:6f:c4:c7:
                    82:62:00:13:af:76:ee:e3:77:6a:da:3e:c4:a1:00:
                    e5:b0:d3:e8:cd:4f:4b:a7:e5:89:fe:58:fa:98:55:
                    27:0d:5d:97:f3:69:8c:1e:8f:2d:70:a5:17:9b:29:
                    8c:fc:c4:5b:43:cc:6f:e1:95:f9:99:55:38:3c:a8:
                    d5:c7:e0:4e:d6:d8:4a:21:2f:8a:49:b4:e9:cc:d0:
                    91:f5:40:da:99:e6:5c:0c:6e:9d:4c:bd:9f:b5:04:
                    f8:fb:2b:5d:c9:ff:38:77:44:e3:c1:0f:0a:d3:bc:
                    07:cc:2d:7f:8d:bf:83:d6:e6:d7:5b:6b:87:e5:32:
                    b1:ce:3a:02:fa:a9:e4:bf:8d:06:4b:13:d2:e2:38:
                    35:65:fd:2b:24:fa:62:11:bc:2f:c7:26:c7:d0:c7:
                    02:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7E:C4:5F:48:42:4C:AA:94:A7:E7:4D:82:4E:25:85:59:63:C1:55
            X509v3 Authority Key Identifier:
                keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fb:1a:d8:52:ce:0d:da:5f:87:0c:7f:4e:90:ab:4c:d5:95:
         cf:c6:a7:76:7a:45:39:bc:10:c1:c7:00:96:29:6c:4e:1b:42:
         ec:d2:c0:a3:e1:c9:9d:ac:e1:6c:c3:24:ec:30:1d:7a:80:16:
         12:2f:01:e1:e9:c0:80:4b:c0:f0:e3:6c:4b:c8:db:3a:24:bc:
         8f:7a:ce:89:24:57:48:f3:b0:20:21:0d:fc:bb:b5:41:12:b8:
         d4:48:3e:74:7a:49:9e:b5:c6:08:6c:92:31:e1:b9:95:1b:a8:
         85:52:0c:6f:a1:5f:69:25:1e:d3:d3:5a:96:03:1d:98:1a:c7:
         dc:cb:e0:ba:81:22:87:89:5d:1e:ff:85:4c:27:c8:ba:8e:31:
         cb:55:fa:5b:3a:c7:ea:2b:ba:a6:3c:46:4d:6c:e0:4a:d0:c1:
         82:52:51:3d:3d:2c:a9:10:1a:f7:12:b7:e0:1b:c6:5c:f6:fe:
         87:f7:f8:ca:b8:16:fc:f6:00:59:84:6e:49:cf:85:23:4e:6f:
         f7:69:09:18:01:46:35:11:85:dd:9f:07:b6:b9:82:6d:7c:f5:
         7b:fb:64:e0:cf:c1:57:c3:5c:63:a8:a3:92:d5:4b:5e:38:53:
         a3:ae:c2:86:2e:97:4f:a6:62:38:62:52:24:43:ac:ec:c2:14:
         b0:4b:92:77
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWSlMoaEGYWoWNII1LNhTUramJxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz
M0U5OEVFMzAeFw0yNTA1MDMwNDI1NTFaFw0yNTA1MDYxMDQ2NTFaMDMxMTAvBgNV
BAMTKEY4N0VDNDVGNDg0MjRDQUE5NEE3RTc0RDgyNEUyNTg1NTk2M0MxNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1ZJOv+Cuph3EYpkPYmWNQ+3W+
2J02pWw53wx0svcKu08fvmJFD23K0nUvrOfZH5152FUThIqu6Dageh+DESZr9THq
0wZH+kpSImGr5VMiQrOOkMtkphxUsIBaL0F7ghjPZJL5DW/Ex4JiABOvdu7jd2ra
PsShAOWw0+jNT0un5Yn+WPqYVScNXZfzaYwejy1wpRebKYz8xFtDzG/hlfmZVTg8
qNXH4E7W2EohL4pJtOnM0JH1QNqZ5lwMbp1MvZ+1BPj7K13J/zh3ROPBDwrTvAfM
LX+Nv4PW5tdba4flMrHOOgL6qeS/jQZLE9LiODVl/Ssk+mIRvC/HJsfQxwInAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+H7EX0hCTKqUp+dNgk4lhVljwVUwHwYDVR0j
BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4
M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5
OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl
ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3
OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAv7GthSzg3aX4cMf06Qq0zVlc/Gp3Z6RTm8
EMHHAJYpbE4bQuzSwKPhyZ2s4WzDJOwwHXqAFhIvAeHpwIBLwPDjbEvI2zokvI96
zokkV0jzsCAhDfy7tUESuNRIPnR6SZ61xghskjHhuZUbqIVSDG+hX2klHtPTWpYD
HZgax9zL4LqBIoeJXR7/hUwnyLqOMctV+ls6x+oruqY8Rk1s4ErQwYJSUT09LKkQ
GvcSt+Abxlz2/of3+Mq4Fvz2AFmEbknPhSNOb/dpCRgBRjURhd2fB7a5gm189Xv7
ZODPwVfDXGOoo5LVS144U6OuwoYul0+mYjhiUiRDrOzCFLBLknc=
-----END CERTIFICATE-----
Generated at Tue May 6 17:19:09 2025 by rpki-client