Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
File:                     B692ED2FEFFD044C6DD7F20D70952648400A7744.mft (raw, json)
Hash identifier:          XVdfzBtYJzK2mOBxKWZa/CmMmK2C91CIybFKmiRxWUc=
Subject key identifier:   02:60:F5:DA:94:FF:39:3D:6B:6D:04:1B:D2:9A:66:D4:D2:46:04:31
Authority key identifier: B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44
Certificate issuer:       /CN=b692ed2feffd044c6dd7f20d70952648400a7744
Certificate serial:       3BC0B4EF9B9073E18DD4FE75F5031B6DF226F7C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
Manifest number:          0222
Signing time:             Tue 19 Aug 2025 23:18:42 +0000
Manifest this update:     Tue 19 Aug 2025 23:13:39 +0000
Manifest next update:     Thu 21 Aug 2025 00:13:39 +0000
Files and hashes:         1: 323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa (hash: W5LOE2UccwfvH+iw7FgcRMdLyrWt/Q18gyV5smhnXpM=)
                          2: B692ED2FEFFD044C6DD7F20D70952648400A7744.crl (hash: JYE5gmjqYLWkPjo/FTgJV+JihCP29CuEwEkRha0ZWfw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c0:b4:ef:9b:90:73:e1:8d:d4:fe:75:f5:03:1b:6d:f2:26:f7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b692ed2feffd044c6dd7f20d70952648400a7744
        Validity
            Not Before: Aug 19 23:13:39 2025 GMT
            Not After : Aug 21 00:13:39 2025 GMT
        Subject: CN=0260F5DA94FF393D6B6D041BD29A66D4D2460431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:a7:09:97:8b:e5:4c:53:b1:1f:d0:dd:65:
                    da:6d:4d:c9:38:90:20:6a:02:f6:a7:3f:b4:48:3e:
                    01:3a:2e:d7:11:04:6e:79:0b:3a:7b:bf:70:53:a3:
                    cd:b7:98:48:67:a0:a2:f5:c7:75:5f:5e:df:cd:2f:
                    ec:71:37:6d:53:ca:be:cb:19:09:9b:c5:23:ec:cb:
                    65:0e:93:1e:f7:c8:31:aa:d8:17:39:e4:cf:5b:75:
                    25:da:bf:5e:9b:3d:dd:9a:41:25:8b:f1:da:c8:64:
                    3c:d6:5d:16:b4:07:88:89:1c:d5:b1:18:db:5f:c9:
                    1a:3e:8c:ef:6e:fd:c7:5b:4e:37:78:6c:03:f1:fa:
                    41:3e:4a:01:3c:06:e7:08:47:a3:49:2f:b8:e2:68:
                    b2:8a:35:a4:4d:c9:26:2a:fd:9c:56:fd:27:8a:e0:
                    93:eb:cf:a4:71:6e:72:2b:01:81:66:b4:d2:b4:68:
                    b5:59:0a:26:75:95:93:72:86:fe:7f:59:be:f0:66:
                    74:c2:5d:1a:8a:9e:60:57:42:61:f4:7e:63:d0:92:
                    3f:a8:4e:94:34:ac:b7:b9:9c:83:6a:57:80:f4:c8:
                    6c:e6:12:f3:fa:e0:e1:34:a7:70:b3:4b:7c:e1:3d:
                    b7:5f:b2:68:d2:f1:90:24:90:e3:b3:4d:da:58:4d:
                    b7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:60:F5:DA:94:FF:39:3D:6B:6D:04:1B:D2:9A:66:D4:D2:46:04:31
            X509v3 Authority Key Identifier:
                keyid:B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c8:19:4d:b9:ce:ad:89:d2:40:f9:37:16:29:6f:43:48:30:
         42:e1:41:30:74:31:33:67:00:43:58:57:b3:15:4b:d0:ff:f5:
         93:15:fb:4c:7c:83:b0:6a:54:b2:e6:63:8a:f7:39:1a:00:c3:
         6e:8d:1d:d3:aa:5c:06:6b:8e:c2:07:4f:c4:df:9f:90:f6:1b:
         21:e1:08:54:23:5a:d6:22:78:22:46:1c:32:f0:fd:2e:dc:82:
         b3:84:c5:de:a8:cf:d1:56:a4:a5:fd:50:0f:9e:30:14:f8:c4:
         77:09:a1:a7:54:3c:b2:27:b2:af:d7:64:63:f7:d5:62:75:dc:
         08:ee:7a:be:55:05:e8:a0:6b:63:61:f8:15:33:98:7c:f9:46:
         6a:66:e9:4d:00:85:1c:2a:bd:ec:cb:45:38:ce:72:42:d7:1e:
         22:ca:22:6b:0d:e6:d5:0c:5d:f0:6f:58:cf:a1:be:6c:27:f4:
         e2:1a:80:0e:c7:d4:e3:a5:4b:5a:71:1c:9f:49:7b:6f:ba:53:
         cf:1e:b6:fc:22:d0:20:05:a0:c7:bb:ee:f6:f6:05:c8:b0:b1:
         87:c6:f6:70:68:57:01:b1:ac:a3:9a:28:a9:02:a7:9f:0c:cf:
         59:8a:9d:af:49:9f:3e:78:bc:0f:81:32:19:7c:bc:cb:45:bf:
         04:74:ce:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:48:34 2025 by rpki-client