Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft
File:                     1A0FC4695466F0034FDC7BD35D97BF935042446D.mft (raw, json)
Hash identifier:          dyU11GLFjc5SFy4V9u2KFdLzUmnbysBokhTMwvbWL/U=
Subject key identifier:   42:C2:B4:61:2F:B5:E1:F0:AD:0F:8C:DD:52:7B:97:41:81:D7:CD:BA
Authority key identifier: 1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D
Certificate issuer:       /CN=1A0FC4695466F0034FDC7BD35D97BF935042446D
Certificate serial:       33F3DE1514251D7685424E9F03D204165C4AE041
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft
Manifest number:          04CD
Signing time:             Sat 03 May 2025 13:51:59 +0000
Manifest this update:     Sat 03 May 2025 13:46:59 +0000
Manifest next update:     Tue 06 May 2025 22:34:59 +0000
Files and hashes:         1: 3130332e32302e3139362e302f32332d3234203d3e203538353536.roa (hash: uhFXD5HucnvLa577o/lzdkI4bHtpnmfQ2EHjnkZ6ZlU=)
                          2: 1A0FC4695466F0034FDC7BD35D97BF935042446D.crl (hash: og3UJymqg+5W4MNxRWHQLURbfNruwh6EuBZdN40ceh8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f3:de:15:14:25:1d:76:85:42:4e:9f:03:d2:04:16:5c:4a:e0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A0FC4695466F0034FDC7BD35D97BF935042446D
        Validity
            Not Before: May  3 13:46:59 2025 GMT
            Not After : May  6 22:34:59 2025 GMT
        Subject: CN=42C2B4612FB5E1F0AD0F8CDD527B974181D7CDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:61:32:a9:de:11:41:9b:d0:f3:6d:b1:1f:6a:
                    ea:ab:7c:2f:4b:da:d3:22:81:ba:9c:73:96:a6:11:
                    eb:7c:5e:21:06:57:7d:b7:78:d7:1e:8b:eb:15:d0:
                    de:32:4a:9c:e0:c6:7d:fe:36:09:67:ba:82:f3:ff:
                    ec:ff:e5:b0:a1:7c:bc:9d:05:01:40:d9:47:82:4e:
                    8c:a6:9c:93:1d:25:64:e0:90:cf:6a:b7:1b:61:61:
                    f7:32:75:9a:2f:37:82:52:47:75:18:6f:09:21:26:
                    6d:5e:46:6e:49:82:f7:2c:56:64:8c:08:a5:11:3d:
                    6c:c3:e2:12:24:39:6b:61:0b:38:19:dc:42:d5:08:
                    fd:43:e6:31:03:7c:f8:b0:b6:15:8d:0a:3a:e3:aa:
                    b7:10:94:1c:18:7b:c6:b5:96:9e:03:d6:1e:c1:0d:
                    99:74:5b:50:69:a3:c9:6c:72:ee:b4:15:72:ed:a5:
                    b0:ed:70:f6:02:23:86:61:71:91:39:c3:1f:fc:40:
                    41:87:e9:ec:5e:30:ac:eb:78:d9:be:79:41:88:8e:
                    4c:5e:2f:40:c5:85:6a:84:0f:27:bf:3a:11:d9:2b:
                    03:fe:77:48:d9:25:45:41:1c:06:ee:72:16:01:15:
                    ce:74:df:4e:20:b2:b6:49:5c:5e:bd:cd:e5:3c:5c:
                    04:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C2:B4:61:2F:B5:E1:F0:AD:0F:8C:DD:52:7B:97:41:81:D7:CD:BA
            X509v3 Authority Key Identifier:
                keyid:1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:51:33:7b:3a:8c:d7:52:91:ff:72:13:25:ad:ee:d2:7e:d2:
         0b:f4:f2:fb:41:55:98:e3:6a:e5:0c:15:56:ee:dd:b2:b8:60:
         1c:7d:21:dd:fe:b2:4f:d5:93:92:ed:ca:da:19:69:70:ff:86:
         b9:69:82:27:55:33:0f:66:e6:56:6e:c1:a9:c6:83:64:0c:c1:
         8d:cc:32:ff:eb:27:79:6a:a1:b0:18:44:2a:62:3a:25:a7:ad:
         2d:b1:d2:26:67:90:bc:2b:cf:f5:93:50:5c:d6:5b:2b:c4:ae:
         81:b0:2e:8b:07:4e:f1:d0:eb:d9:11:e6:ec:88:09:d1:d5:9b:
         3d:85:50:23:b8:39:80:40:d3:80:5c:d2:41:7f:40:a9:30:c4:
         66:db:65:ef:06:22:09:58:c9:bc:24:fd:4a:4b:66:ac:92:0b:
         6f:0d:48:48:0f:ce:d5:44:20:06:23:d9:6b:18:aa:ca:e2:0b:
         e6:43:f8:4f:5c:3b:01:7d:ce:d0:45:f3:56:28:72:6f:dd:a6:
         9d:16:43:36:17:10:83:80:99:cf:59:02:61:7a:28:b0:cb:07:
         92:0d:82:32:5d:d5:b5:d7:40:ef:e8:67:f8:be:5a:7b:36:26:
         bf:6d:5f:28:09:52:77:73:49:bf:f9:b7:d5:4f:70:f3:fa:20:
         96:bb:45:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:35:11 2025 by rpki-client