Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          twYN+Alod5io2NXDwlA4shj1xAYASQr2a+ohv/Nn31Y=
Subject key identifier:   90:9C:EF:61:63:21:1C:DF:84:70:8C:EE:CA:28:3F:33:C9:7A:43:1B
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       427417D969F3B73760878812D1C4DA79AA5B71C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          0444
Signing time:             Sat 10 May 2025 06:21:26 +0000
Manifest this update:     Sat 10 May 2025 06:16:26 +0000
Manifest next update:     Sun 11 May 2025 09:52:26 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: cqDEl8qST3Z+dQf1uXTBixocv5BG/5OUCrjAZZN5Zww=)
                          2: AS212934.asa (hash: FtIA+3v46k/b1paIQers6TgaETpekLT7sDmQGTp55EI=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 09:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:74:17:d9:69:f3:b7:37:60:87:88:12:d1:c4:da:79:aa:5b:71:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: May 10 06:16:26 2025 GMT
            Not After : May 11 09:52:26 2025 GMT
        Subject: CN=909CEF6163211CDF84708CEECA283F33C97A431B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:89:a3:93:15:6f:3b:06:c7:96:56:22:6a:7e:
                    e1:71:be:7a:e0:35:a7:1b:c0:b1:d3:39:27:ce:0c:
                    a5:06:0c:0a:69:f5:e0:0c:03:a0:c3:33:7d:8a:29:
                    73:fb:69:0b:37:f7:ec:02:5f:9c:80:fe:ae:16:21:
                    7c:f1:d8:23:52:e5:0a:8b:d2:9f:60:1a:32:2d:85:
                    09:d5:12:71:2d:23:9e:74:f0:a7:15:43:1b:50:67:
                    1c:26:32:85:8f:91:d6:05:f5:7a:13:5b:54:8e:46:
                    b2:e0:8d:b0:f8:94:aa:9e:c0:84:a1:d3:e4:a3:25:
                    4a:34:3c:17:39:46:88:f7:77:1a:d7:be:06:6b:1e:
                    b6:8f:5e:bd:7f:bd:77:06:02:d0:24:63:43:ee:35:
                    b1:84:c2:6b:ac:84:ae:6a:50:c7:5f:2f:da:ab:3d:
                    92:06:23:48:35:31:4a:cd:92:e7:78:3c:98:be:8c:
                    39:32:95:b8:e2:ba:95:81:ff:98:d1:6d:6c:cc:94:
                    78:63:09:25:d9:e8:7e:33:a1:77:35:c1:58:d1:35:
                    19:87:99:72:7f:c5:5f:cd:ba:a5:5f:71:9b:f2:4f:
                    cc:f5:34:4f:88:12:78:a3:30:91:5a:19:dc:18:b7:
                    1c:b8:f0:f6:ec:eb:36:0a:5d:08:dc:f5:19:3f:7f:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9C:EF:61:63:21:1C:DF:84:70:8C:EE:CA:28:3F:33:C9:7A:43:1B
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:76:f0:b7:ba:c3:7d:6a:57:e2:c5:6c:c0:8b:c5:a5:9f:
         7b:93:8b:28:e1:27:0c:db:2d:96:5d:58:cc:31:09:45:1a:86:
         f7:01:f5:aa:87:6f:cd:ce:5a:54:34:5e:6c:ec:41:e7:21:75:
         6e:eb:62:ed:fd:40:a3:32:71:17:4a:3a:37:c5:cb:f3:ee:6a:
         9f:e9:ba:0c:8b:03:37:22:28:0c:c3:7a:af:bd:d0:58:e9:6e:
         07:cb:7a:15:28:fe:4a:31:a0:29:14:5c:95:35:29:e2:58:5e:
         8f:ee:b0:e2:d9:41:80:52:84:0b:7a:4f:69:da:a5:01:c0:a3:
         90:ef:89:95:b1:9c:48:3f:73:be:81:c1:48:54:8b:41:ae:24:
         4d:ef:5e:f7:cd:67:84:3a:0e:5d:45:b0:8b:d9:21:18:07:42:
         9d:e1:26:b3:a5:27:71:88:49:5d:25:17:f4:58:b1:cc:f0:d8:
         4e:2b:42:14:ed:0a:30:d7:55:2f:eb:a9:d4:2a:9a:2f:9e:8c:
         a5:8f:03:52:9a:4e:c2:d9:3a:d8:07:35:76:4d:44:99:c9:36:
         ad:97:35:a1:76:ea:1f:7f:2c:ca:e1:db:f5:b0:0f:a6:bb:16:
         06:e4:6f:6d:5e:cf:0b:40:8d:1a:c5:29:66:41:9f:7c:46:28:
         e2:b5:f5:c3
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUQnQX2Wnztzdgh4gS0cTaeapbccgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBlNDRmMDlmZjIwMWNiMmJjNjdiMTZkNDkwZjdhNmQx
MGNkOWRmMTAeFw0yNTA1MTAwNjE2MjZaFw0yNTA1MTEwOTUyMjZaMDMxMTAvBgNV
BAMTKDkwOUNFRjYxNjMyMTFDREY4NDcwOENFRUNBMjgzRjMzQzk3QTQzMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDliaOTFW87BseWViJqfuFxvnrg
NacbwLHTOSfODKUGDApp9eAMA6DDM32KKXP7aQs39+wCX5yA/q4WIXzx2CNS5QqL
0p9gGjIthQnVEnEtI5508KcVQxtQZxwmMoWPkdYF9XoTW1SORrLgjbD4lKqewISh
0+SjJUo0PBc5Roj3dxrXvgZrHraPXr1/vXcGAtAkY0PuNbGEwmushK5qUMdfL9qr
PZIGI0g1MUrNkud4PJi+jDkylbjiupWB/5jRbWzMlHhjCSXZ6H4zoXc1wVjRNRmH
mXJ/xV/NuqVfcZvyT8z1NE+IEnijMJFaGdwYtxy48Pbs6zYKXQjc9Rk/fz6JAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUkJzvYWMhHN+EcIzuyig/M8l6QxswHwYDVR0j
BBgwFoAUgORPCf8gHLK8Z7FtSQ96bRDNnfEwDgYDVR0PAQH/BAQDAgeAMH4GA1Ud
HwR3MHUwc6BxoG+GbXJzeW5jOi8va3JpbGwuYWNjdXJpc3RlY2hub2xvZ2llcy5j
YS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzMvODBFNDRGMDlGRjIwMUNCMkJD
NjdCMTZENDkwRjdBNkQxMENEOURGMS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dPUlBDZjhnSExLOFo3RnRTUTk2YlJETm5mRS5jZXIwgYkGCCsGAQUFBwELBH0w
ezB5BggrBgEFBQcwC4ZtcnN5bmM6Ly9rcmlsbC5hY2N1cmlzdGVjaG5vbG9naWVz
LmNhL3JlcG8vQWNjdXJpcy1UZWNobm9sb2dpZXMvMy84MEU0NEYwOUZGMjAxQ0Iy
QkM2N0IxNkQ0OTBGN0E2RDEwQ0Q5REYxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7x28Le6w31qV+LF
bMCLxaWfe5OLKOEnDNstll1YzDEJRRqG9wH1qodvzc5aVDRebOxB5yF1buti7f1A
ozJxF0o6N8XL8+5qn+m6DIsDNyIoDMN6r73QWOluB8t6FSj+SjGgKRRclTUp4lhe
j+6w4tlBgFKEC3pPadqlAcCjkO+JlbGcSD9zvoHBSFSLQa4kTe9e981nhDoOXUWw
i9khGAdCneEms6UncYhJXSUX9FixzPDYTitCFO0KMNdVL+up1CqaL56MpY8DUppO
wtk62Ac1dk1Emck2rZc1oXbqH38syuHb9bAPprsWBuRvbV7PC0CNGsUpZkGffEYo
4rX1ww==
-----END CERTIFICATE-----
Generated at Sat May 10 20:06:38 2025 by rpki-client