Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
File:                     B70DB680698C8AC70A7CB7CA607541E554249317.mft (raw, json)
Hash identifier:          ihoLeZgmimaKfPRL9GRtvy7nI5WBQ1ffC0sncpZd/XI=
Subject key identifier:   7E:06:E7:37:8C:98:DA:D3:69:77:9F:67:F7:85:1F:A9:C2:14:42:26
Authority key identifier: B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
Certificate issuer:       /CN=b70db680698c8ac70a7cb7ca607541e554249317
Certificate serial:       7F8BD5657E6ED6C8AB3FB2F5668EA0D56E8CF0EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
Manifest number:          021E
Signing time:             Tue 19 Aug 2025 18:30:37 +0000
Manifest this update:     Tue 19 Aug 2025 18:25:35 +0000
Manifest next update:     Wed 20 Aug 2025 19:19:35 +0000
Files and hashes:         1: B70DB680698C8AC70A7CB7CA607541E554249317.crl (hash: iVnaHoaMxOk4w3H7laXJv4yXtrZsuLsTo+CPWD9e3Q0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8b:d5:65:7e:6e:d6:c8:ab:3f:b2:f5:66:8e:a0:d5:6e:8c:f0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70db680698c8ac70a7cb7ca607541e554249317
        Validity
            Not Before: Aug 19 18:25:35 2025 GMT
            Not After : Aug 20 19:19:35 2025 GMT
        Subject: CN=7E06E7378C98DAD369779F67F7851FA9C2144226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:17:d0:6e:80:2a:1e:88:f2:41:5b:73:64:75:
                    3a:bd:42:d5:17:33:79:90:08:e6:81:7e:88:f3:74:
                    de:15:cf:73:8d:c5:d4:01:74:45:60:23:2e:d0:68:
                    cc:dc:e1:67:86:04:b3:a5:38:ca:bc:67:fe:7b:60:
                    f2:c0:58:9a:0a:2b:16:0a:e7:a4:49:a8:05:0d:e5:
                    9a:ef:84:29:8e:f5:0b:17:09:1c:8f:a2:85:95:97:
                    2c:80:24:8e:92:8f:8d:11:0e:4a:10:22:15:3b:a8:
                    86:1d:e4:56:46:42:31:7d:3d:e6:c1:cb:a5:54:eb:
                    2c:e2:39:30:07:5b:fb:ec:99:a4:f5:a7:c0:24:8e:
                    6c:ff:69:28:d3:05:b8:01:98:6c:45:4a:93:ff:c8:
                    6b:6a:ae:57:6c:54:76:9b:29:a5:45:1c:f6:07:58:
                    64:62:22:fb:08:07:f6:0c:c2:65:2f:c4:19:e8:2f:
                    3d:87:3a:32:9d:d7:29:82:05:7b:d0:89:0a:a3:db:
                    48:dc:7e:ca:1c:6f:e2:07:13:6a:fc:db:97:06:00:
                    7d:1d:06:0f:30:70:26:04:e0:7e:44:83:60:eb:d1:
                    7b:cb:89:21:e5:5d:43:04:81:ca:c0:13:e1:c7:0a:
                    16:61:5d:de:32:ee:1a:45:94:2b:8b:80:1f:4b:f1:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:06:E7:37:8C:98:DA:D3:69:77:9F:67:F7:85:1F:A9:C2:14:42:26
            X509v3 Authority Key Identifier:
                keyid:B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:97:a8:b2:63:40:3f:59:90:e5:5e:6a:b6:80:2d:06:96:9d:
         87:5e:c5:79:4a:7f:b2:9b:5d:e2:6e:30:e1:1a:b1:50:e9:ab:
         09:e5:a9:aa:54:22:90:eb:45:f8:56:41:9b:3e:24:da:75:3e:
         c9:b9:7f:0d:9c:75:71:02:6a:67:dc:76:cc:37:a7:ad:2d:fa:
         32:c8:1f:bb:9f:b6:72:90:82:ab:98:76:83:2e:68:cd:9c:5c:
         79:b9:97:f0:1a:f5:80:b6:c0:5c:cb:4b:56:ce:50:c2:44:e2:
         70:00:ca:db:ac:ce:98:66:47:31:6e:bf:b8:17:c6:57:37:44:
         f7:b3:fd:77:46:98:68:1e:4a:08:dd:bb:79:fb:8b:c9:ef:08:
         ad:05:b3:15:ec:ef:1e:e2:10:41:91:b7:fd:ee:85:03:99:d0:
         18:98:a3:27:c7:be:cb:73:1b:24:e4:08:c9:15:f1:13:9f:b5:
         07:51:a7:33:e0:5a:3e:3b:f0:37:6b:c2:e2:09:1b:ea:13:8a:
         88:5e:3c:8a:46:a1:44:1b:01:f4:6f:79:3f:23:b7:19:f3:b7:
         b8:14:8a:e1:8c:74:30:77:5f:e4:6e:0d:6b:52:ef:37:a1:88:
         a8:b3:95:89:01:3d:e7:df:66:6d:25:54:de:54:70:ff:69:b5:
         f6:68:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:55 2025 by rpki-client