Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          WRp7d+lrZSiHPONghRwdAzLDbGJbtd/rxDxq34fi4l4=
Subject key identifier:   75:2F:6D:AF:25:8A:99:B6:BC:C2:D8:84:EE:38:7C:D7:15:FC:51:D6
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       6067253904BD7EB2D49527FBD4C2B41EC12584C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          048B
Signing time:             Sat 28 Jun 2025 13:23:42 +0000
Manifest this update:     Sat 28 Jun 2025 13:18:42 +0000
Manifest next update:     Sun 29 Jun 2025 16:48:42 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: plampl7BQotZFIZIIeKxwxfbzkjeHbMa6EVIUAkUL90=)
                          2: AS212934.asa (hash: FtIA+3v46k/b1paIQers6TgaETpekLT7sDmQGTp55EI=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 16:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:67:25:39:04:bd:7e:b2:d4:95:27:fb:d4:c2:b4:1e:c1:25:84:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Jun 28 13:18:42 2025 GMT
            Not After : Jun 29 16:48:42 2025 GMT
        Subject: CN=752F6DAF258A99B6BCC2D884EE387CD715FC51D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f7:6e:1e:02:bb:3e:b5:56:b4:68:d0:8c:f9:
                    ff:b0:f9:87:2b:d4:8d:98:de:d8:69:1a:0d:9c:43:
                    9d:75:06:d5:03:ea:26:14:d7:b0:26:31:c4:b3:c9:
                    9a:7f:ce:9b:de:78:bd:70:6f:aa:c3:c0:67:8b:15:
                    bf:a7:02:8e:68:c5:48:bb:63:30:ac:1d:5a:03:24:
                    0d:ef:8b:8d:46:a5:d8:82:5f:87:56:d1:ef:61:c5:
                    e1:9b:45:b8:fd:e3:c0:f0:74:48:ec:89:66:c8:02:
                    c3:1e:48:19:f4:9d:6a:c7:28:be:de:36:b4:f3:d5:
                    26:d9:b0:5c:a3:f8:66:86:b1:d1:1e:92:5a:6c:5a:
                    aa:b8:cb:83:9b:d0:83:26:cb:97:a8:e2:e4:58:07:
                    25:43:ca:48:71:99:97:54:97:8a:81:c6:74:bd:5f:
                    a8:e7:22:3b:7b:7f:a1:35:0c:54:77:a5:05:4e:1e:
                    f4:3d:80:01:d3:46:99:dd:ef:8f:e4:0d:f6:66:5b:
                    f4:52:74:e7:31:87:ff:ef:24:0b:24:b8:d1:64:1e:
                    03:1a:4f:a5:c2:68:60:cd:2e:ad:ac:62:22:f6:cb:
                    81:c1:1e:24:da:71:94:c5:63:80:2b:cc:cb:3a:e6:
                    95:88:82:1c:3d:d6:2a:ff:97:fe:65:55:b7:8c:52:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2F:6D:AF:25:8A:99:B6:BC:C2:D8:84:EE:38:7C:D7:15:FC:51:D6
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e5:c3:06:30:e6:69:34:d3:f1:9c:56:3f:a1:0f:5a:46:8a:
         e3:28:b6:93:38:17:e6:2a:70:c4:59:35:aa:7c:5c:47:58:5c:
         68:4c:5a:26:0b:5f:f0:9e:63:ae:39:84:67:c6:24:4b:12:dd:
         22:52:0c:6b:92:c2:b9:77:e8:c2:6f:a1:af:8c:99:e7:37:76:
         3f:9a:91:fb:48:67:26:a0:22:2a:3e:6a:22:9d:44:a1:50:40:
         5a:16:9c:32:be:f8:a4:42:b1:1e:f9:67:a5:75:fd:15:03:10:
         39:e2:b0:36:0f:6d:af:65:18:c9:dc:3c:33:87:1c:c4:3a:a2:
         1a:df:46:ff:ac:8c:5f:e8:98:87:34:2b:33:31:49:be:6c:5d:
         0b:86:9c:b0:0d:f0:ff:8a:8a:66:6a:09:df:23:1a:f4:16:e3:
         dd:bc:36:b2:09:4b:23:53:57:9b:5a:b5:e4:21:72:b2:93:1c:
         bd:a9:38:07:92:ae:11:9e:a5:5f:d9:95:ed:28:00:47:33:20:
         0b:1a:32:cd:81:54:1d:26:8b:ea:94:a2:e6:1f:1b:bb:70:e0:
         ba:6b:cf:bb:1d:a1:17:e6:5f:7d:20:ab:1b:83:ae:1f:95:f6:
         2b:fc:8f:51:ed:81:33:f7:cf:ab:58:fc:63:fd:a2:cd:30:a2:
         01:23:8e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:13 2025 by rpki-client