Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft
File:                     2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json)
Hash identifier:          8wh8bXPPQQYPEwQFsQAT7SgyVZtD3Eq2uHNv8WL7s3I=
Subject key identifier:   7B:59:6D:E6:94:1F:36:7C:EA:7D:2B:FE:C6:94:39:2F:A3:5D:6D:6D
Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37
Certificate issuer:       /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37
Certificate serial:       13073E246DBBF2B94CDC8ECFE28578E6CBCFDE02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft
Manifest number:          8F
Signing time:             Sat 03 May 2025 03:42:12 +0000
Manifest this update:     Sat 03 May 2025 03:37:12 +0000
Manifest next update:     Tue 06 May 2025 15:20:12 +0000
Files and hashes:         1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: bbaAF2xpaI5GXqM9lFN7Gf2QSju68hKj1OR5gSiJpgE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:07:3e:24:6d:bb:f2:b9:4c:dc:8e:cf:e2:85:78:e6:cb:cf:de:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37
        Validity
            Not Before: May  3 03:37:12 2025 GMT
            Not After : May  6 15:20:12 2025 GMT
        Subject: CN=7B596DE6941F367CEA7D2BFEC694392FA35D6D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:98:d6:15:0b:7d:8e:f2:1a:0e:7c:21:e0:
                    74:24:81:f2:15:8e:31:96:0b:35:d4:01:7d:38:5b:
                    82:65:82:c2:8c:28:de:fe:2a:28:9a:d6:b0:e5:60:
                    8f:7d:ac:c4:c6:4d:d4:0b:95:19:e5:54:af:4f:df:
                    3d:fe:fc:dd:d6:dc:d8:11:8b:d9:f6:75:40:7b:b8:
                    c9:8e:a1:b6:7b:ba:24:66:76:c1:a3:c3:95:03:f2:
                    35:3d:90:8d:37:e3:70:50:57:39:29:02:e5:f8:6e:
                    84:c4:82:fa:8b:4f:eb:2a:ac:cf:92:9d:70:6f:8a:
                    0a:f1:b2:22:c9:ef:35:99:88:9d:86:57:d2:d0:0b:
                    72:42:dc:45:4f:29:7a:f0:2b:b7:a6:7c:db:da:ab:
                    fd:27:59:02:08:1b:55:bb:ef:5a:22:d7:ab:d6:1a:
                    a4:f7:0f:33:90:34:de:d5:20:63:05:f6:0a:40:da:
                    ae:41:e5:b2:f8:8a:fa:9d:ce:2d:17:b4:44:c8:92:
                    35:af:d7:e2:04:80:92:9a:95:58:91:b7:43:70:2b:
                    bc:1b:c2:28:d3:49:48:c1:b2:56:86:c5:c6:d7:00:
                    c2:df:6f:05:79:b9:9b:ac:1f:e7:86:05:32:7c:e9:
                    a1:93:d5:95:56:23:6f:a1:2c:94:d7:a6:39:b0:39:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:59:6D:E6:94:1F:36:7C:EA:7D:2B:FE:C6:94:39:2F:A3:5D:6D:6D
            X509v3 Authority Key Identifier:
                keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:58:1d:50:8d:f5:9a:e1:3a:c8:f3:11:34:61:92:44:1a:b7:
         0f:05:d2:29:30:3e:58:ba:52:f0:5b:3e:2b:e2:72:16:f7:1d:
         aa:66:4b:39:88:06:18:8f:ab:43:44:fb:eb:24:da:43:3d:ad:
         42:85:19:da:9a:ec:d6:ab:87:86:42:11:8c:ef:30:a3:1d:1e:
         48:b8:59:35:70:0a:00:ea:f0:37:85:58:86:e0:75:2e:10:bb:
         44:de:b8:29:bc:ab:05:53:85:36:9b:92:64:36:3c:43:e8:56:
         b3:6f:59:cb:ac:96:b2:33:a0:96:5c:a8:c0:dd:57:fb:5a:16:
         ff:78:ef:33:a9:2c:cf:9f:89:07:10:20:1b:f4:71:de:71:3e:
         59:8b:dc:0b:f6:c1:4a:a4:af:83:80:f9:e5:70:08:4b:4c:03:
         b2:04:08:ee:f0:21:67:cd:23:42:c7:54:33:b7:53:0c:4f:40:
         10:d3:d1:7e:31:e8:4e:89:77:3f:6b:c3:70:6d:50:2d:ee:3d:
         d3:03:d9:21:f5:48:39:11:4d:3d:e0:8c:e7:2d:f9:7d:e6:c5:
         69:a4:14:4d:dd:0d:5e:fe:49:b2:ab:bd:70:e8:6f:d0:ae:0f:
         47:76:fa:20:36:c8:c9:0b:29:e9:8a:fb:1d:9b:cd:79:17:a2:
         45:f2:83:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:57:17 2025 by rpki-client