Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft
File:                     74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json)
Hash identifier:          vNNhKrQrzEcDSrzMi1A6Mut7oIjw7SaWbOuPurC0Rl8=
Subject key identifier:   B4:EC:CE:6D:17:D7:DA:AB:B4:3E:DF:0F:FB:56:9F:7E:18:3D:D0:70
Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13
Certificate issuer:       /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213
Certificate serial:       1B4AD6A4BC51C5673C6E6E6DC5D28B2AD1208CD2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft
Manifest number:          0110
Signing time:             Sat 15 Feb 2025 18:11:49 +0000
Manifest this update:     Sat 15 Feb 2025 18:06:49 +0000
Manifest next update:     Wed 19 Feb 2025 01:07:49 +0000
Files and hashes:         1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: P3fIdcISSOChHK6Ubx2mxQ6Hn0KEsfwgafFvzBtWuv0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4a:d6:a4:bc:51:c5:67:3c:6e:6e:6d:c5:d2:8b:2a:d1:20:8c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213
        Validity
            Not Before: Feb 15 18:06:49 2025 GMT
            Not After : Feb 19 01:07:49 2025 GMT
        Subject: CN=B4ECCE6D17D7DAABB43EDF0FFB569F7E183DD070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:6e:08:18:3a:17:60:3f:76:8e:2e:1c:45:
                    dc:ff:27:43:9f:d0:e1:82:bb:1b:84:89:cc:d0:1b:
                    a0:fb:9f:8d:e5:49:e9:60:5c:3f:9b:0a:1c:9a:4a:
                    f8:09:95:d2:29:b5:b9:23:4e:bf:ce:1e:95:d9:51:
                    c3:eb:c3:53:9a:a4:d4:ea:d5:0b:09:5d:5d:52:db:
                    fd:e4:e0:a7:53:48:df:7f:7b:bb:e2:25:bd:48:5f:
                    f3:83:bd:eb:8e:20:26:c9:6e:ae:18:88:31:d0:de:
                    cf:eb:4e:05:44:7c:8f:db:24:e5:be:1e:e9:53:10:
                    82:2a:df:f4:ef:7d:39:10:9f:fd:d2:7a:40:d5:57:
                    07:32:dd:88:e5:37:22:91:ef:14:a5:09:03:49:ac:
                    8e:ac:8e:35:5e:31:2a:b8:b5:67:8d:79:a9:6d:02:
                    9a:2b:43:1c:51:e5:bb:56:5b:25:bf:29:b2:ae:41:
                    2c:ae:e3:a2:bd:ce:70:ba:ed:4a:6c:24:3e:79:c3:
                    29:de:51:04:36:33:90:10:47:d1:1b:d7:33:7e:19:
                    cb:67:93:ce:8a:33:3d:0c:68:d5:0c:23:43:cc:19:
                    4b:05:9e:de:24:c8:85:54:56:e8:76:79:fb:77:a1:
                    d1:7d:4b:a7:e3:50:9d:16:27:4a:a3:0c:67:88:e3:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EC:CE:6D:17:D7:DA:AB:B4:3E:DF:0F:FB:56:9F:7E:18:3D:D0:70
            X509v3 Authority Key Identifier:
                keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f4:af:7c:a2:41:86:54:83:6d:4c:db:e8:3d:d1:37:e9:46:
         2d:3e:c4:12:ae:c8:cb:1c:c6:d1:6d:f9:43:76:82:cc:f2:92:
         0c:48:70:70:7c:cb:c6:11:23:d1:25:bd:8c:8a:1e:d5:37:ad:
         4e:c2:df:db:75:2d:96:ff:06:c6:8c:4b:33:bb:5b:36:0e:94:
         7e:00:76:4b:e0:8b:fa:66:f8:ca:47:24:1b:89:34:0e:21:49:
         bb:96:48:67:7c:a8:ad:7f:2e:b7:fe:09:5e:c8:ea:88:8e:37:
         cc:83:c5:2e:c0:aa:f0:75:a1:95:d7:c2:76:aa:bf:ef:49:be:
         12:ec:d4:d6:24:41:8a:9b:e1:d5:7b:ea:9a:d3:2a:b1:87:05:
         88:66:49:13:ec:c2:b7:3e:54:20:74:76:48:02:3f:83:5c:18:
         35:c2:92:51:6b:9a:57:ac:ae:a0:01:2e:85:cc:95:c8:19:29:
         ec:db:4a:2f:f0:6c:d7:94:bd:a8:d0:89:74:21:d7:d1:be:aa:
         a3:77:05:98:90:c3:fc:c4:20:6c:4c:05:5d:08:a7:fd:09:b9:
         02:b1:6a:e1:9c:d6:4f:65:4c:3b:5d:bf:cd:a5:07:c2:90:e2:
         ee:c1:ae:07:ee:d0:7d:ec:7f:de:c5:5a:09:18:b3:36:63:36:
         bf:55:8a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:52 2025 by rpki-client