Manifest

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File:                     9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier:          dogCopvzt7b6WPKCsxl722+NpXim5kfj4lLf0mAU24s=
Subject key identifier:   D4:1D:6D:AC:F7:EC:F3:1E:5E:C3:DF:C0:D2:84:9E:32:C4:CD:3B:1F
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       20ADB56675B49FEC2362742C73FFC86A4963B161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number:          02A6
Signing time:             Fri 28 Mar 2025 22:13:57 +0000
Manifest this update:     Fri 28 Mar 2025 22:08:57 +0000
Manifest next update:     Sat 29 Mar 2025 23:28:57 +0000
Files and hashes:         1: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: 03J/danHrRrUf5+1VD3u6MMOJbhoX9hiSFBAhf9ApE0=)
                          2: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: FfYGvZr4SFWPjlAzX82KpSKmBRhTz7G//KPcNec2hhc=)
                          3: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: hlakHutOeiqXWY8ni8ubfuIzzRWe+NPQTBtQHYYvHKU=)
                          4: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: ulx6RKWeZv7oKnpaNFV95Hac18fP+TNAepjWakUMmA0=)
                          5: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: 4z11sQdUJz1Zykfa5O/UqcXdJZq+xLbs1EF1QSPhnXw=)
                          6: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: xh8Sz+UX718ObRCWgtCtKu1Ea/C7rUKcDeEuMvnakOU=)
                          7: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: pgeYu3iShqQKvlIx2f1qXuAoowtyTG7BHfXN/foqY2A=)
                          8: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: uEYjBirJT+i0hlQMTypSSmmJ9f6MpXLy/c4beoodP6A=)
                          9: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: 9o9sYCBvv89cZi/setzqWtCpYi4p2zeAk4HPlkj79To=)
                          10: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: 55PDBfiNO7785lQ74TpDgI+R/EhhJs+Qx7PPaQwuhVc=)
                          11: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: 8i2Uhg35vt+EQ6r1FdnJelDCfkdVacT4X7Ea+iyOf2k=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ad:b5:66:75:b4:9f:ec:23:62:74:2c:73:ff:c8:6a:49:63:b1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000
        Validity
            Not Before: Mar 28 22:08:57 2025 GMT
            Not After : Mar 29 23:28:57 2025 GMT
        Subject: CN=D41D6DACF7ECF31E5EC3DFC0D2849E32C4CD3B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:51:db:2d:65:08:ed:69:33:6f:8a:3c:65:71:
                    a9:ad:12:a7:e5:11:76:6d:7e:cd:fb:90:80:38:8e:
                    48:ea:4f:0e:b3:5d:7f:df:f3:d4:07:38:bc:16:6f:
                    ea:c2:b3:0d:71:e9:d7:56:08:e9:7a:bb:5c:31:49:
                    32:a1:cd:fc:61:ea:17:70:27:a8:4b:c2:f6:c9:8d:
                    dd:25:7b:92:c4:a7:c5:4a:37:97:97:79:a1:56:09:
                    d3:65:45:3c:7f:89:12:03:00:d1:71:1f:92:6d:68:
                    40:31:e0:43:36:81:46:ba:59:04:9a:b7:46:c5:c9:
                    73:86:81:bc:4e:70:f9:2e:88:f5:29:e6:01:64:e0:
                    24:bf:27:e4:62:fc:c1:d2:66:a2:ec:a9:1c:3d:81:
                    a7:70:15:f9:98:0a:df:d0:87:43:58:bd:84:4c:dc:
                    83:2b:2b:ad:be:c0:d3:f5:20:ce:ac:6f:11:3b:9c:
                    71:57:47:75:a0:ef:ae:f5:99:d4:50:61:dd:1c:94:
                    69:c8:b3:4f:24:88:9d:75:b6:82:66:bb:98:26:ca:
                    8c:be:b6:d4:23:e3:01:1b:83:ba:83:8e:14:e9:b7:
                    28:dc:04:86:34:45:0e:03:f8:b2:f6:1f:12:db:3f:
                    10:a4:26:c3:26:70:b6:b6:1d:73:7f:78:ca:ce:6c:
                    36:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1D:6D:AC:F7:EC:F3:1E:5E:C3:DF:C0:D2:84:9E:32:C4:CD:3B:1F
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8f:82:c7:bf:52:f9:79:ea:1a:aa:27:4b:53:d8:50:e1:df:
         57:57:c3:c8:74:e4:2a:98:64:82:a9:9f:6f:af:75:82:03:14:
         b7:34:54:a1:03:55:3b:0e:04:e6:f3:57:63:1d:45:05:da:37:
         93:33:54:e2:53:9f:16:2e:bc:2a:17:c4:a2:8c:2d:d4:9b:ef:
         a1:fe:7a:56:33:1d:c8:aa:d2:8f:e3:f8:b4:a2:b7:5b:bc:7c:
         b5:c9:5f:31:a2:de:47:4b:0a:f6:cf:da:aa:4c:3a:29:66:24:
         93:a5:d7:00:c4:3a:f8:7e:29:21:86:93:48:8b:ca:90:98:9d:
         7f:7b:5a:58:35:40:0c:61:1f:3f:b5:a6:c3:74:6d:4b:70:8a:
         9f:0e:6f:17:48:e0:66:e7:2e:87:7c:32:af:52:8a:39:4f:7a:
         63:1f:1e:d4:82:db:09:6c:9a:92:42:c5:c9:40:d3:ef:35:11:
         fe:fe:df:2b:42:44:1c:f8:8c:51:c6:d8:a8:d7:ea:75:b4:a4:
         ca:66:b4:a4:99:fe:f6:a6:f8:e1:a0:23:b7:37:08:7d:c6:84:
         06:75:66:71:a0:07:ba:88:ec:10:22:be:92:22:3c:45:43:e3:
         59:c9:1e:c1:25:a8:3f:db:1f:01:bf:58:3f:18:8d:d7:82:20:
         7c:59:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:31 2025 by rpki-client