Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
File:                     5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json)
Hash identifier:          DAvcHE0GLXtOIU8jcO2suc1gUAVg5XCsm5F9schhlFI=
Subject key identifier:   3D:C4:0F:2B:71:9B:C2:7A:65:FE:1F:6F:F5:3A:D4:6E:92:5A:CE:59
Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92
Certificate issuer:       /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392
Certificate serial:       2D4338DEA8B67DCA4678A7EA1CF5E30B5C2E5637
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft
Manifest number:          0171
Signing time:             Sat 03 May 2025 05:31:02 +0000
Manifest this update:     Sat 03 May 2025 05:26:02 +0000
Manifest next update:     Tue 06 May 2025 17:19:02 +0000
Files and hashes:         1: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: O+un8Pm/pMdCWnyuHTjDZbgaVeNrBF+/C3hQG9txS3k=)
                          2: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: RBUkVebuQcs/eoD+DsobzhNFA6Y0GlvHxLIjvG85Lgo=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:43:38:de:a8:b6:7d:ca:46:78:a7:ea:1c:f5:e3:0b:5c:2e:56:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392
        Validity
            Not Before: May  3 05:26:02 2025 GMT
            Not After : May  6 17:19:02 2025 GMT
        Subject: CN=3DC40F2B719BC27A65FE1F6FF53AD46E925ACE59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:81:2f:33:c4:10:32:c9:77:bf:f2:5b:72:60:
                    5e:9f:c0:fb:62:dc:00:44:56:f8:c9:3e:99:c0:14:
                    b6:61:ac:0d:74:34:25:02:07:d8:76:8f:d3:8f:e8:
                    72:8d:eb:c9:c1:20:1e:80:72:94:af:57:54:94:f4:
                    6e:97:90:04:46:f4:ae:cf:c8:c8:18:e9:40:d7:a1:
                    07:18:e3:4b:07:64:52:a0:65:1d:9f:c1:dd:58:10:
                    ac:f2:36:54:70:ed:d9:dd:48:56:04:2c:c7:65:40:
                    27:fb:1e:18:85:e5:b4:32:7a:b2:b4:33:71:97:78:
                    f1:99:29:27:22:59:f1:ca:2f:77:23:92:54:fb:fb:
                    b6:85:6c:a6:29:7e:b9:c8:d1:a5:94:8f:01:8c:19:
                    de:66:0b:55:22:7e:b8:d0:12:40:e7:b0:41:2e:85:
                    48:36:9d:97:95:bf:67:23:24:fb:5c:60:c1:63:e9:
                    b6:d6:69:88:2f:63:23:44:4e:bd:91:32:ef:8a:06:
                    91:0d:81:2f:23:db:22:a4:36:a6:e4:31:3a:18:b7:
                    c8:ef:0b:9c:10:a7:5e:9a:08:9f:30:c1:93:38:69:
                    b9:aa:01:98:cf:7b:d6:91:39:18:cd:c5:a1:ad:25:
                    0a:ea:d9:2b:4e:34:07:47:c1:a6:84:ed:64:a2:fb:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C4:0F:2B:71:9B:C2:7A:65:FE:1F:6F:F5:3A:D4:6E:92:5A:CE:59
            X509v3 Authority Key Identifier:
                keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:04:c6:eb:9c:65:d8:cc:58:6a:c6:c2:54:6d:f3:00:07:98:
         96:da:62:c8:00:04:7d:ba:9c:2e:71:b0:a8:0c:7d:ab:29:98:
         6c:2b:3a:6f:27:55:54:78:88:47:77:f9:ec:f9:41:ce:04:b6:
         82:7c:2e:ae:9c:4a:86:62:cb:a2:b6:cc:e9:69:37:4d:fe:83:
         06:3d:6e:38:05:07:5c:8b:84:6f:34:95:2b:c8:c3:68:92:23:
         f3:27:e3:5c:20:cc:f2:f0:ae:7f:4b:12:70:f6:e9:18:de:48:
         fe:7f:7d:95:f8:7e:63:2c:2f:7f:5b:f7:ee:0d:67:c7:6b:58:
         b0:b4:58:ba:8e:c8:92:17:8a:a9:d1:7b:af:e5:a4:ee:6d:b8:
         5c:59:23:35:10:57:8d:41:14:c7:d1:34:98:f3:7f:8e:0c:62:
         97:37:e7:87:5e:7f:ff:5f:0c:56:94:20:23:9a:8b:a2:fc:d6:
         5b:fa:62:96:07:24:bf:14:dc:04:14:8c:69:a3:9f:fb:2b:3e:
         32:1f:5a:fb:66:65:b8:8a:ae:c0:41:91:6d:15:4a:c9:56:8d:
         87:7a:69:25:23:85:2a:6c:6d:a7:51:f5:3a:1f:33:61:83:0d:
         e2:3f:11:2d:a8:9a:b0:aa:9c:0c:b4:c2:11:fa:f7:f2:30:a0:
         e9:67:01:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:16:21 2025 by rpki-client