Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
File:                     C0877CC9EB843E8740AA80328E653F865C246295.mft (raw, json)
Hash identifier:          HOHPWw6amHZa24e2PCGrmO8tVv8rAu+xX9JRx/x199U=
Subject key identifier:   2D:D1:40:70:85:59:A1:6D:3C:76:5A:6C:FC:B2:61:49:72:5C:AB:54
Authority key identifier: C0:87:7C:C9:EB:84:3E:87:40:AA:80:32:8E:65:3F:86:5C:24:62:95
Certificate issuer:       /CN=c0877cc9eb843e8740aa80328e653f865c246295
Certificate serial:       6F1BC9009FAFA582B1A660F459FCA827CD333BC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
Manifest number:          0221
Signing time:             Wed 20 Aug 2025 01:18:04 +0000
Manifest this update:     Wed 20 Aug 2025 01:13:01 +0000
Manifest next update:     Thu 21 Aug 2025 05:06:01 +0000
Files and hashes:         1: C0877CC9EB843E8740AA80328E653F865C246295.crl (hash: odWZPGz5oxrHobveGhDo3b2J3GZfLQkPEQ2Mci4EFF8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1b:c9:00:9f:af:a5:82:b1:a6:60:f4:59:fc:a8:27:cd:33:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0877cc9eb843e8740aa80328e653f865c246295
        Validity
            Not Before: Aug 20 01:13:01 2025 GMT
            Not After : Aug 21 05:06:01 2025 GMT
        Subject: CN=2DD140708559A16D3C765A6CFCB26149725CAB54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:bc:c4:63:33:0c:01:fd:9f:5d:92:2c:c0:
                    c1:11:fd:f3:66:f4:01:30:d7:80:81:89:bc:70:aa:
                    01:a6:7a:8f:48:cb:75:24:50:d0:87:08:22:cf:17:
                    50:c0:8f:1b:68:05:86:be:1b:20:79:06:66:a6:d8:
                    be:35:81:2f:2a:2a:14:d7:3f:4d:c4:ec:cb:5a:98:
                    20:a7:50:5d:33:9d:d1:4c:26:dd:04:42:fe:2a:3a:
                    79:3f:fb:f7:66:6c:78:61:2b:2c:a4:d0:f9:a5:68:
                    d8:1a:fd:df:00:84:84:df:07:67:1f:75:ba:40:b9:
                    0c:e9:f4:6e:a2:e3:7b:8c:c0:91:81:96:58:99:e2:
                    2b:b6:9f:e4:ea:32:40:87:50:fa:37:32:a9:35:55:
                    19:75:a8:7a:e5:ad:e4:f9:d1:b8:12:2e:21:00:3a:
                    ef:03:1c:66:c3:ec:25:9d:63:8d:af:d6:32:ec:45:
                    08:d1:8f:ac:4c:e0:af:c8:7d:29:af:95:ec:a8:f6:
                    74:bf:3c:2d:55:9c:c1:57:d2:7d:89:cc:87:c2:f7:
                    7c:e7:8b:96:d9:70:74:19:ee:e7:f5:68:ee:a6:69:
                    70:6f:69:13:ef:d8:c7:9b:5d:0b:86:b5:30:3d:63:
                    ff:8b:58:f9:30:2a:3e:49:56:ab:46:3a:74:6c:c6:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D1:40:70:85:59:A1:6D:3C:76:5A:6C:FC:B2:61:49:72:5C:AB:54
            X509v3 Authority Key Identifier:
                keyid:C0:87:7C:C9:EB:84:3E:87:40:AA:80:32:8E:65:3F:86:5C:24:62:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:52:ee:f0:11:a2:00:15:54:61:f6:76:88:90:77:5c:67:11:
         c7:f9:f7:21:e6:5b:36:8d:86:cc:0b:3b:81:96:71:15:1d:06:
         0e:7d:b3:21:90:aa:9b:41:e5:4a:d5:8c:da:a1:5d:25:b8:8a:
         97:46:a0:73:b7:d0:73:02:3d:90:88:ef:11:ca:da:92:74:59:
         f1:21:96:38:94:e3:65:99:5d:d2:f6:9f:0b:d0:13:2a:e7:87:
         40:52:8c:35:76:71:49:ca:10:62:3b:ce:f0:f0:90:3a:d8:e9:
         40:cb:d1:b2:aa:07:26:57:ca:f1:93:2f:13:79:7a:ee:b6:b0:
         16:f0:23:21:f9:7a:55:c3:cd:dc:e0:b4:75:41:f2:9b:58:56:
         ac:9f:39:24:4f:b0:b0:2e:1f:84:33:59:1b:02:20:9c:f2:dc:
         f8:ca:83:b6:66:d4:4f:2e:4c:4d:23:35:b2:55:6b:3f:10:7d:
         d0:95:5d:c8:e7:2a:d2:54:e0:67:b7:f8:cb:97:0b:ac:f2:40:
         17:20:ce:59:23:db:3d:f3:d1:a9:75:cc:76:43:d1:ff:f6:ad:
         23:4a:9f:33:84:a0:f4:b0:ba:60:9c:d0:ff:4b:a3:ed:6e:aa:
         c8:b5:29:5c:6d:3b:9e:4a:95:67:1b:29:5e:72:15:b6:d8:f2:
         e2:75:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:32 2025 by rpki-client