Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft
File:                     53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json)
Hash identifier:          paUAdnHF8M1YSg7lI1Y21QQ+CxrmgsNhVTcUju2Z9fw=
Subject key identifier:   08:DC:E9:E1:18:2F:2F:A2:3D:62:FE:01:0A:3A:2D:E0:DC:9B:29:F9
Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA
Certificate issuer:       /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA
Certificate serial:       2788E10C96C060DF6B9AF279F7244588E8EBA8E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft
Manifest number:          EA
Signing time:             Sun 16 Feb 2025 09:10:36 +0000
Manifest this update:     Sun 16 Feb 2025 09:05:36 +0000
Manifest next update:     Wed 19 Feb 2025 16:00:36 +0000
Files and hashes:         1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: 33t3gs+XE0iH9XGfs3MF2ysVnp1ifrJalhTvCyvEdp0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:88:e1:0c:96:c0:60:df:6b:9a:f2:79:f7:24:45:88:e8:eb:a8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA
        Validity
            Not Before: Feb 16 09:05:36 2025 GMT
            Not After : Feb 19 16:00:36 2025 GMT
        Subject: CN=08DCE9E1182F2FA23D62FE010A3A2DE0DC9B29F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a6:f7:0e:9f:c9:ae:64:f5:9c:cf:31:d8:48:
                    d5:25:c4:97:5b:86:8c:b8:2c:d9:f4:6a:c2:1e:b9:
                    8e:18:d7:74:fe:3c:a1:d3:7c:58:cf:ac:19:f1:ea:
                    15:16:64:f4:07:96:dc:b1:a6:9f:91:cf:96:a9:19:
                    36:26:f5:8f:ff:4b:34:1e:72:ee:66:b5:eb:8c:a9:
                    1f:f9:a6:c4:6f:aa:05:2c:6c:dd:f5:58:0d:bd:74:
                    57:b7:6f:1f:5b:c0:f8:34:17:8e:81:25:c3:bb:1a:
                    66:ce:f2:6d:02:f3:2d:1d:b7:ef:e0:ec:84:f5:9e:
                    74:4c:57:06:89:10:7b:a7:45:32:ab:94:50:9b:46:
                    52:4a:12:17:f5:5a:e5:a1:40:c9:a5:32:e1:a4:44:
                    53:5e:9a:fb:7b:e3:3c:9f:7b:c6:13:92:e7:f5:d0:
                    42:1e:20:18:5d:0b:7c:dd:35:b8:96:8b:ea:21:ce:
                    d6:db:13:73:1a:4c:a1:da:bd:06:40:57:af:ca:76:
                    d2:c3:a0:f0:23:fa:c4:b0:83:24:a7:93:5d:67:8c:
                    26:1a:88:58:df:ce:49:fd:b0:69:7d:48:4f:c4:e2:
                    7b:39:e2:18:c8:68:b2:b3:cf:14:c2:e9:e3:b0:e7:
                    02:13:03:ee:7f:b4:e9:f7:d6:04:2b:3a:a4:48:c0:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DC:E9:E1:18:2F:2F:A2:3D:62:FE:01:0A:3A:2D:E0:DC:9B:29:F9
            X509v3 Authority Key Identifier:
                keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:f9:a5:f9:e4:64:2a:03:c2:b2:6f:27:da:b8:29:30:8b:
         d0:3f:f3:98:9e:76:29:61:a5:64:70:ff:0b:81:36:66:90:66:
         d5:63:df:4f:fd:58:3c:44:0a:b6:89:46:8f:24:b1:ea:80:6d:
         2e:ea:0b:33:83:6f:5d:94:83:a1:6e:c7:24:00:a9:ca:f6:7e:
         76:eb:cc:1d:69:16:19:cd:4f:58:51:65:83:03:33:38:81:2b:
         5c:e3:55:5c:b4:ed:99:7a:53:7a:3d:64:74:7b:ad:6c:e0:74:
         9c:07:13:3e:9a:a5:4c:23:ae:53:7b:99:26:97:06:48:3b:66:
         4e:c5:9e:4c:6a:1e:28:5e:58:97:5c:f3:c4:d3:e9:bc:73:51:
         5f:b6:b9:7d:87:7d:40:71:04:e2:11:af:bd:38:73:0b:18:48:
         da:56:e8:59:57:96:f1:62:80:59:b8:13:56:0f:18:17:2e:af:
         1c:88:d9:4d:6d:b0:81:ac:84:eb:d7:c0:1f:ea:83:1d:79:2c:
         73:eb:30:10:32:9d:e1:3c:15:60:85:54:0c:46:6d:5e:da:14:
         ca:4b:ff:36:94:b2:82:df:f0:60:e7:e8:02:bc:71:4a:30:25:
         ab:23:0b:1c:12:c5:ed:7e:5a:38:38:84:41:c8:9e:b9:4a:b5:
         dd:60:d0:2a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJ4jhDJbAYN9rmvJ59yRFiOjrqOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2
RDExNjBBQTAeFw0yNTAyMTYwOTA1MzZaFw0yNTAyMTkxNjAwMzZaMDMxMTAvBgNV
BAMTKDA4RENFOUUxMTgyRjJGQTIzRDYyRkUwMTBBM0EyREUwREM5QjI5RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTpvcOn8muZPWczzHYSNUlxJdb
hoy4LNn0asIeuY4Y13T+PKHTfFjPrBnx6hUWZPQHltyxpp+Rz5apGTYm9Y//SzQe
cu5mteuMqR/5psRvqgUsbN31WA29dFe3bx9bwPg0F46BJcO7GmbO8m0C8y0dt+/g
7IT1nnRMVwaJEHunRTKrlFCbRlJKEhf1WuWhQMmlMuGkRFNemvt74zyfe8YTkuf1
0EIeIBhdC3zdNbiWi+ohztbbE3MaTKHavQZAV6/KdtLDoPAj+sSwgySnk11njCYa
iFjfzkn9sGl9SE/E4ns54hjIaLKzzxTC6eOw5wITA+5/tOn31gQrOqRIwO3tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCNzp4RgvL6I9Yv4BCjot4NybKfkwHwYDVR0j
BBgwFoAUU1dlRMLXwp3sUkWkqBwZaG0RYKowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMC81MzU3NjU0NEMy
RDdDMjlERUM1MjQ1QTRBODFDMTk2ODZEMTE2MEFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2RDEx
NjBBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw
MTMtMGIyMDFiMmMwZDllLzAvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5
Njg2RDExNjBBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGSL+aX55GQqA8KybyfauCkwi9A/85iedilh
pWRw/wuBNmaQZtVj30/9WDxECraJRo8kseqAbS7qCzODb12Ug6FuxyQAqcr2fnbr
zB1pFhnNT1hRZYMDMziBK1zjVVy07Zl6U3o9ZHR7rWzgdJwHEz6apUwjrlN7mSaX
Bkg7Zk7FnkxqHiheWJdc88TT6bxzUV+2uX2HfUBxBOIRr704cwsYSNpW6FlXlvFi
gFm4E1YPGBcurxyI2U1tsIGshOvXwB/qgx15LHPrMBAyneE8FWCFVAxGbV7aFMpL
/zaUsoLf8GDn6AK8cUowJasjCxwSxe1+Wjg4hEHInrlKtd1g0Co=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:02 2025 by rpki-client