Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft
File:                     754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft (raw, json)
Hash identifier:          QsuHJ0RBC3fL7zcDuqZCIachiLp4L8h7p099YwY/tCs=
Subject key identifier:   DB:49:27:BB:8A:1A:22:33:BA:BA:F6:29:E9:1D:2C:6D:95:FC:22:6A
Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB
Certificate issuer:       /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB
Certificate serial:       0DD891BF256C91A4F0FA4DBD6487F311D5569E6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft
Manifest number:          01DC
Signing time:             Sat 15 Feb 2025 22:51:35 +0000
Manifest this update:     Sat 15 Feb 2025 22:46:35 +0000
Manifest next update:     Wed 19 Feb 2025 09:33:35 +0000
Files and hashes:         1: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: Sf9PeSZZ7a8NKRrtWUTmVWuqUtTX2GsdEZGDuX14gwU=)
                          2: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl (hash: V41lEeznuSQr8bj84mblrlKaN6tgbaWS55Ht6wEMYNI=)
                          3: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: 7iXx5jGESFjpBjO3AiKnrpyYnQjS82YYkQqBjeaeWk0=)
                          4: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: e0FCZrIOKWaH0btSP4kAUqXaQNeE2QggQ8Gj6R8jPew=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d8:91:bf:25:6c:91:a4:f0:fa:4d:bd:64:87:f3:11:d5:56:9e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB
        Validity
            Not Before: Feb 15 22:46:35 2025 GMT
            Not After : Feb 19 09:33:35 2025 GMT
        Subject: CN=DB4927BB8A1A2233BABAF629E91D2C6D95FC226A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:c6:dc:40:6e:5b:31:3e:0a:33:cd:4a:3f:
                    5b:02:92:7c:db:f6:9a:20:08:9b:59:12:ed:50:4e:
                    28:30:fe:3a:0e:41:ee:22:9e:28:d7:ce:45:7d:d5:
                    02:42:ad:64:44:c3:91:00:56:25:ad:99:8b:dd:5c:
                    46:3a:0a:27:ff:95:e2:5d:4e:69:60:d9:c7:ab:b7:
                    89:d5:55:4e:57:fc:bf:b3:c5:83:84:00:88:dd:f4:
                    7e:aa:ec:ca:8c:5f:45:e0:84:8b:ea:2f:f0:2a:74:
                    83:62:9c:56:ec:8b:29:bb:2d:f8:d2:49:79:35:33:
                    a2:19:d7:c3:30:ed:93:b5:29:6c:5f:c7:dc:05:db:
                    cd:5d:c6:20:9d:c0:8d:38:50:05:29:e1:47:d5:00:
                    3e:44:29:72:5f:db:31:7e:3e:b4:81:41:15:5f:2c:
                    ab:72:28:ee:09:8c:05:79:20:9e:24:59:a2:96:7b:
                    f3:f7:b6:63:cd:ee:da:07:34:bf:27:5d:1d:86:d0:
                    fe:61:d4:00:d8:22:c6:75:a0:51:6c:5f:03:c9:20:
                    2c:f0:52:11:e2:e2:94:aa:4b:f0:94:2b:b0:9c:91:
                    ae:6f:0c:f6:b5:f8:d9:93:a9:42:7d:78:d2:aa:e3:
                    0c:ff:14:37:4e:18:82:ef:7a:16:43:61:a4:40:b3:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:49:27:BB:8A:1A:22:33:BA:BA:F6:29:E9:1D:2C:6D:95:FC:22:6A
            X509v3 Authority Key Identifier:
                keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:d2:b0:59:64:1b:8c:33:a8:49:84:dd:2c:76:81:a7:8f:9f:
         52:86:e6:62:8f:b9:13:4c:97:e5:03:b3:a3:3c:9d:95:6e:38:
         e0:fa:59:ff:f4:21:2f:02:58:7e:60:1b:39:e7:97:61:35:e4:
         40:fb:9a:73:92:4f:d9:a2:97:ee:3c:00:ec:15:91:9e:31:86:
         51:fa:c3:f0:90:98:4f:8a:c1:de:cb:77:6d:09:71:e8:ac:d1:
         af:87:65:45:04:9b:06:06:9e:aa:3d:2a:d8:ec:93:9b:2d:aa:
         3c:f0:7b:6f:2c:ea:9d:75:82:05:e4:14:a1:c7:bd:28:de:38:
         36:6b:19:ad:36:4d:98:98:9d:51:00:cf:78:8a:2e:7b:88:7b:
         0f:ef:be:ec:b8:34:0f:8c:44:09:3b:34:22:4c:72:7d:28:c9:
         36:c7:2f:91:bf:95:de:2e:d0:db:15:b2:a4:a6:7d:46:4d:38:
         65:15:a3:b5:50:23:5a:ba:26:a2:d7:2f:c3:b1:be:81:76:68:
         4c:64:f3:56:87:cd:f5:12:2a:85:9d:30:4e:b6:d7:1e:ae:77:
         6b:84:8d:2f:4f:8d:81:41:4b:79:bb:13:88:75:93:b5:e0:bf:
         85:a1:a5:b0:22:3f:02:43:b9:47:a9:82:ca:46:5d:a7:ea:16:
         6f:59:32:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:12 2025 by rpki-client