Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          NqqeYMosk+uaxQU+FQJnwWZYO93rnDmeIRCWUPlMYwc=
Subject key identifier:   CA:D9:AE:3F:53:22:3C:91:6F:BB:34:7F:7C:36:B5:00:03:F2:4F:E5
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       1C25F716B140F0498F324C824EB39561CFEE7076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          0553
Signing time:             Fri 14 Nov 2025 14:08:12 +0000
Manifest this update:     Fri 14 Nov 2025 14:03:12 +0000
Manifest next update:     Sat 15 Nov 2025 16:38:12 +0000
Files and hashes:         1: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: Ut1P4qHfz2rJqX0Ib+9FVcd8b3kukFiL6AbwWWNTg84=)
                          2: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Nov 2025 16:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:25:f7:16:b1:40:f0:49:8f:32:4c:82:4e:b3:95:61:cf:ee:70:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Nov 14 14:03:12 2025 GMT
            Not After : Nov 15 16:38:12 2025 GMT
        Subject: CN=CAD9AE3F53223C916FBB347F7C36B50003F24FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:76:18:b8:3b:54:f6:4e:95:76:60:4b:04:
                    62:f2:3d:76:9f:1c:35:00:38:5e:1a:66:46:5f:34:
                    c9:fe:4b:2b:20:c7:6c:e6:6d:98:33:e9:9f:8d:df:
                    ae:06:a9:a0:04:50:6a:b0:7c:c7:d0:7d:c4:8f:e0:
                    d1:d4:bc:15:03:56:c0:26:71:73:fe:45:61:77:8c:
                    a0:3a:53:40:a0:76:32:fd:74:18:c6:2b:80:ed:bd:
                    67:c6:b5:6a:2f:7d:03:9c:ca:7f:c2:7d:83:56:50:
                    29:8b:b3:76:8f:e8:1e:8a:a9:b1:58:86:64:76:ac:
                    eb:b6:a4:60:85:af:dc:0b:7c:b8:29:6a:4c:ef:dd:
                    4e:c9:fe:b3:ed:4a:43:2e:9a:4a:b1:cc:8d:0c:a8:
                    f1:ca:71:61:38:9a:8c:29:ed:15:21:0a:2c:66:8b:
                    25:7a:0f:a8:fa:ea:71:b5:7a:e0:8b:d8:d1:21:47:
                    67:4a:92:84:50:e3:b8:1d:e4:3a:21:a2:60:45:00:
                    21:83:a5:5f:d0:17:b2:4f:38:22:df:fd:27:52:30:
                    1f:2b:f2:b0:33:13:08:7e:ec:9d:ef:f2:fb:6b:18:
                    c2:ec:d1:00:5f:a5:ad:55:8e:4f:45:e8:d1:32:d0:
                    c1:65:39:6b:1f:a6:94:01:9d:b1:3b:dd:fa:4b:ba:
                    90:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D9:AE:3F:53:22:3C:91:6F:BB:34:7F:7C:36:B5:00:03:F2:4F:E5
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:ab:91:19:7b:a2:c3:6e:f4:4c:82:56:9d:2a:b2:83:9e:
         f2:0e:f2:2d:c8:d4:1e:36:cd:fc:a2:33:d7:8f:85:ba:8e:e5:
         d8:34:58:35:55:61:4e:02:bb:a9:c1:bc:e7:f6:77:68:62:fe:
         a7:af:63:8d:75:50:07:28:46:0c:80:9f:62:a0:5c:e4:9c:05:
         29:e8:e4:17:90:74:98:bc:7a:74:70:c7:5b:8c:7c:62:fe:f4:
         51:d8:04:ef:8e:53:76:65:e6:71:9b:ff:49:36:e7:15:10:77:
         02:21:fe:80:cd:97:09:e8:41:0f:8c:80:2c:18:32:e4:51:bd:
         80:79:87:0d:30:89:50:f8:de:e0:3b:de:e3:ee:73:9d:62:f8:
         8d:ab:9f:1f:c4:87:96:87:92:06:63:10:38:7d:6c:35:07:15:
         69:d1:4a:dd:a4:ee:13:5a:1a:4e:70:0b:ac:93:22:91:6e:bb:
         70:e0:bc:6c:20:27:d9:f4:e1:26:71:08:da:b7:a5:0f:08:74:
         6f:8a:16:ad:bd:97:c4:60:c1:c9:51:13:16:4d:7b:32:95:f5:
         d0:bf:be:70:d3:3f:3c:19:a0:c2:f1:3d:f4:bc:11:0c:14:5a:
         74:28:27:1d:57:25:5e:ec:78:dd:e6:f4:d6:75:b1:e7:42:c2:
         e8:6e:14:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 01:12:25 2025 by rpki-client