Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft
File:                     E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json)
Hash identifier:          3gOjqGEWmaMXly/c9mKQiQ2Snrmhf1jXfWOnicqTzbQ=
Subject key identifier:   D0:5C:73:B4:9C:24:77:76:A5:B7:28:AF:4A:A4:07:E8:73:9D:9A:E1
Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9
Certificate issuer:       /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9
Certificate serial:       090EC10A4A4E4D8B1A521E8EFCD27768EC8DD27E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft
Manifest number:          0153
Signing time:             Sat 03 May 2025 11:22:07 +0000
Manifest this update:     Sat 03 May 2025 11:17:07 +0000
Manifest next update:     Tue 06 May 2025 14:17:07 +0000
Files and hashes:         1: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=)
                          2: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: OdahvnCzPWel0jB2Ik4F5DlSBLqi/JlKj1d3GM6qVt8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0e:c1:0a:4a:4e:4d:8b:1a:52:1e:8e:fc:d2:77:68:ec:8d:d2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9
        Validity
            Not Before: May  3 11:17:07 2025 GMT
            Not After : May  6 14:17:07 2025 GMT
        Subject: CN=D05C73B49C247776A5B728AF4AA407E8739D9AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:64:59:e4:a7:f5:53:ca:ec:8a:34:5c:ee:
                    a7:3c:fc:d0:32:23:4b:ab:e9:22:3f:2e:d9:c3:0f:
                    a3:4e:55:ee:49:5d:18:d4:6a:d6:3f:88:50:ae:79:
                    73:5d:db:67:ad:a4:e6:63:39:12:cd:2e:a9:24:28:
                    8d:55:b0:17:2b:89:19:33:1b:f5:a4:cf:d2:44:6f:
                    16:41:f8:51:af:9e:f3:d9:b6:a1:72:0e:ce:8d:b2:
                    98:b8:29:6c:43:3b:03:0f:79:96:9a:8f:01:dc:ed:
                    04:0b:2f:b4:59:c1:a4:75:db:a2:83:1b:34:20:41:
                    44:12:11:25:8c:55:39:f0:ff:b3:16:a8:3a:08:c2:
                    f5:67:a0:30:fa:73:f8:a3:11:7e:69:6a:a2:e9:08:
                    93:d9:ec:e5:f6:5e:a7:41:b6:72:b5:5a:e2:61:2f:
                    b7:b7:43:d1:0a:2a:88:a3:19:0f:60:43:62:b5:81:
                    24:04:db:f6:1a:02:eb:2a:af:38:d9:3f:8a:c9:d1:
                    48:ad:17:6f:62:0a:4e:3c:ec:51:21:7c:24:c1:c5:
                    56:5a:aa:a7:c3:9e:e8:00:76:ce:ef:09:d0:3b:7d:
                    68:6a:65:c9:6c:fe:ad:ff:38:05:ef:ef:80:22:ca:
                    95:59:ce:f5:b4:55:ab:a8:37:f3:e1:d8:6a:99:96:
                    28:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5C:73:B4:9C:24:77:76:A5:B7:28:AF:4A:A4:07:E8:73:9D:9A:E1
            X509v3 Authority Key Identifier:
                keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:31:9b:84:04:57:a0:39:79:ed:c8:5a:73:e6:0a:2a:0f:ce:
         5d:e6:0a:4f:b7:6a:f7:b4:79:ef:f5:32:12:f9:c1:b9:a2:48:
         4c:79:fc:45:af:fd:57:65:4e:4c:b5:68:74:7b:35:a7:72:22:
         0d:39:b9:77:74:02:14:36:ba:b2:37:6b:17:fd:c4:fe:de:8b:
         b3:1c:6f:ec:4b:9e:28:14:2d:ee:c8:5d:31:eb:af:bc:10:3d:
         75:27:0a:5b:65:5c:3c:3b:d1:34:c4:47:21:92:f7:a2:64:6d:
         05:8a:f5:b1:6f:c0:82:19:ba:a1:62:5f:7c:16:b5:b5:3e:8c:
         34:b8:4c:39:c7:5b:25:bf:14:95:45:90:de:01:ab:db:a7:90:
         cd:18:ae:9f:96:5a:a9:c1:a8:da:5c:7a:7a:9e:5e:84:85:d1:
         25:37:67:57:61:58:dc:06:81:1f:2b:0e:ec:3c:53:c4:e8:82:
         11:1d:5c:28:6b:6e:af:03:07:cd:ba:0d:21:5a:e1:cd:b6:af:
         12:8f:5f:7c:eb:70:39:6f:d3:e7:cd:c5:44:14:b4:59:f2:e7:
         d9:60:b6:02:de:00:d0:65:81:c2:03:e4:d5:86:94:b1:46:69:
         65:65:d9:74:d1:7f:97:f0:da:a1:ed:ad:e1:f7:79:a3:cd:9c:
         2d:b4:7e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:53:02 2025 by rpki-client