Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft
File:                     6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft (raw, json)
Hash identifier:          FsuqDxey8zzYZJlJxKGkFZm9N9PuvQmVYeumcqrAIJ8=
Subject key identifier:   9E:4E:A2:4E:27:5D:05:4B:78:30:03:9C:8B:9F:4C:17:CE:DD:15:6D
Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01
Certificate issuer:       /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801
Certificate serial:       440C4B81D474EEBA9A5A3B1383DFB6D5E8F5FE47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft
Manifest number:          0148
Signing time:             Sat 15 Feb 2025 17:01:06 +0000
Manifest this update:     Sat 15 Feb 2025 16:56:06 +0000
Manifest next update:     Tue 18 Feb 2025 23:44:06 +0000
Files and hashes:         1: 3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (hash: AiL+g1EooKWTtHWBu9kN++0bhh/1b9qWboQYM9JSjI0=)
                          2: 3130332e3133312e3130342e302f32332d3234203d3e203539313531.roa (hash: B82wfhLkFG26Wgxhbhj75gasKnE7y0LTbhfYXiDw4Lc=)
                          3: 6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl (hash: F9qh2NV1xnfHjNhxkv/9KnljwTiA+ZfAsxJF3Ez5nJo=)
                          4: 323430303a653332303a3a2f33322d3438203d3e203539313531.roa (hash: 6P8mTgYGo32WPKmNCbLwXvT8t2XWCE8fFh2BcSizJBo=)
                          5: 3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (hash: clujjP0gMVXTK896cZFjDD0rWMqaqVNL/f+1BiuQ3UY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0c:4b:81:d4:74:ee:ba:9a:5a:3b:13:83:df:b6:d5:e8:f5:fe:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801
        Validity
            Not Before: Feb 15 16:56:06 2025 GMT
            Not After : Feb 18 23:44:06 2025 GMT
        Subject: CN=9E4EA24E275D054B7830039C8B9F4C17CEDD156D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:73:67:6b:88:88:6e:b8:b5:da:82:1c:e9:13:
                    0f:d5:12:62:4a:11:b7:74:dd:b0:c8:28:f8:49:d8:
                    c4:18:f9:24:8f:49:59:96:72:88:aa:68:2a:16:ef:
                    5d:4a:e1:5c:e4:0b:89:96:7e:aa:9c:76:90:09:fc:
                    ac:fa:16:be:54:3b:a6:e5:49:73:f6:8a:e8:66:22:
                    77:6e:c4:cf:0d:fb:b2:a3:d2:2c:16:62:23:dd:16:
                    d9:56:6b:08:68:a2:e1:8b:d6:39:e2:82:0b:6f:b8:
                    4e:0d:0c:a0:a6:c7:18:b3:27:87:59:a4:de:df:59:
                    be:ed:2b:43:8f:02:6b:5d:e6:45:b1:b2:82:5a:1e:
                    d6:42:11:83:6b:37:71:c1:77:d5:ab:3f:cc:ea:e7:
                    15:7e:bb:c6:ae:46:c3:0e:18:77:a1:c1:26:83:94:
                    52:f6:75:f1:bb:e9:6b:b3:87:5f:b8:7b:f5:45:ab:
                    c4:e2:00:5b:12:f9:30:09:d2:d6:1d:df:b2:59:57:
                    3f:c6:f6:1a:b8:7a:2c:df:31:3d:1d:51:a8:54:04:
                    9b:ae:eb:ec:5b:eb:0e:9a:9c:10:41:1f:f2:74:4e:
                    3a:56:b9:d8:47:3a:68:6a:b0:65:b5:98:5d:ad:5b:
                    c4:e6:15:f4:4e:be:d9:04:b1:02:c5:a2:9c:77:a3:
                    42:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4E:A2:4E:27:5D:05:4B:78:30:03:9C:8B:9F:4C:17:CE:DD:15:6D
            X509v3 Authority Key Identifier:
                keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:70:32:9a:4a:02:77:1c:65:cb:85:0c:db:76:3a:17:9d:51:
         74:df:73:9f:8b:ab:63:b5:37:a7:a3:02:85:6a:f8:1b:93:17:
         21:67:ac:d7:09:5c:ac:e1:e5:8c:0c:8b:ef:02:ea:aa:c9:93:
         e2:df:21:e5:3d:44:93:6f:4c:ea:0d:57:86:39:b4:f7:54:62:
         0d:d8:46:36:ff:93:63:fb:11:da:bd:93:b2:83:5c:ee:9d:f1:
         09:b2:06:80:51:2b:d9:1b:2c:c8:f8:1b:51:f7:cf:f2:be:2f:
         c1:d6:b7:04:6a:a3:11:60:c3:be:67:e5:54:30:71:d1:2b:17:
         97:bd:5f:4d:15:48:3d:5d:ca:38:6a:bd:29:ff:06:a6:4f:5f:
         80:c9:04:53:2c:85:90:dd:c0:38:e7:b9:a3:fa:a0:0b:2d:52:
         bf:02:5b:20:cc:53:35:e7:b7:b8:05:22:98:6a:3d:eb:a2:10:
         f6:28:89:76:a2:39:8a:a4:0b:20:62:a1:90:5e:2e:65:e4:ce:
         04:74:29:40:0e:af:69:da:47:0c:d8:c1:39:29:e7:81:75:23:
         df:41:e5:7f:b9:39:aa:d0:de:81:30:45:ff:db:ee:e6:2b:63:
         a5:47:3c:f4:69:2b:16:8f:31:1f:71:2d:bb:fb:14:5b:f5:ed:
         c1:0c:c4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:05 2025 by rpki-client