Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          grSYDaF5BCXwhDTVh+9lCwxBCQolwTJQtAqEWtrTyAM=
Subject key identifier:   F3:95:BD:17:E1:0E:27:EF:6E:B9:F9:B8:2B:8C:25:C2:E6:87:94:9F
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       19A5BFEAB6A7FA3CD049EDD1BE9CD8878886F5BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          048F
Signing time:             Tue 01 Jul 2025 17:48:50 +0000
Manifest this update:     Tue 01 Jul 2025 17:43:50 +0000
Manifest next update:     Wed 02 Jul 2025 21:40:50 +0000
Files and hashes:         1: AS212934.asa (hash: FtIA+3v46k/b1paIQers6TgaETpekLT7sDmQGTp55EI=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: cpPKHjoWRxbvi+Vx3O9AygO+BO62XExeiS4+k6GQ4Kc=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a5:bf:ea:b6:a7:fa:3c:d0:49:ed:d1:be:9c:d8:87:88:86:f5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Jul  1 17:43:50 2025 GMT
            Not After : Jul  2 21:40:50 2025 GMT
        Subject: CN=F395BD17E10E27EF6EB9F9B82B8C25C2E687949F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:7b:e1:f3:ce:56:43:33:3b:bc:c1:9b:f2:
                    9c:ac:ac:cf:52:99:f4:80:5d:fb:56:81:43:46:fe:
                    9a:01:0f:a4:77:f6:9d:ac:86:e6:54:95:90:92:02:
                    a4:ee:8c:99:40:99:3b:bd:9a:9f:8d:56:65:de:ab:
                    31:8e:7a:f8:ac:97:ba:20:cb:a1:c1:13:f7:9c:e7:
                    75:26:9a:40:b6:77:63:ee:fe:3c:78:b3:0e:75:29:
                    e1:a2:63:a0:d4:76:5c:fc:e5:33:16:59:51:87:85:
                    b5:52:b4:92:c7:79:13:05:31:1b:2d:6d:20:77:6d:
                    e5:f1:eb:8d:a7:4e:1c:58:38:c8:9f:d6:33:70:fe:
                    02:d4:58:7c:38:31:58:a1:a3:6a:14:49:b9:ad:c5:
                    60:99:f1:22:75:93:37:63:d7:55:51:3e:7d:50:dc:
                    36:69:d4:1b:f4:20:f6:7e:22:77:3c:55:3b:fa:c0:
                    f5:f7:8f:a8:07:d6:34:d1:b3:68:aa:da:2c:bb:5b:
                    d5:10:7e:d6:70:74:9d:f0:11:e7:72:84:37:42:3e:
                    36:c4:f2:08:31:03:7f:18:c5:c7:b8:9d:da:4a:01:
                    db:ab:c2:71:5b:06:61:3a:d4:58:45:cd:9a:38:97:
                    d8:df:57:b3:e4:bc:df:fb:6e:36:f9:55:15:20:68:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:95:BD:17:E1:0E:27:EF:6E:B9:F9:B8:2B:8C:25:C2:E6:87:94:9F
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:08:5e:fe:37:ff:9b:66:2e:83:a7:d2:1f:73:f3:eb:ae:d7:
         53:40:1d:3c:7d:2d:2b:09:09:97:e0:26:f1:f6:d3:cc:7b:f0:
         28:61:b1:3f:d4:f4:f9:20:f2:0c:a1:a6:7d:59:9b:f2:56:d1:
         75:b6:1f:37:cd:61:60:d0:79:7b:4f:df:3f:6e:22:fa:26:4e:
         b4:67:6d:54:52:2c:c3:38:62:91:ad:63:23:0a:23:97:75:bf:
         99:3b:15:6e:a5:a8:a9:e5:16:1b:6a:c6:84:52:43:64:19:cf:
         9b:8c:36:c4:c7:ee:28:03:48:b3:25:af:63:1a:f1:41:fd:42:
         c9:74:de:c1:45:54:73:e4:1d:d4:d8:fc:28:10:0c:8e:62:64:
         04:27:28:3b:a6:48:20:2a:2e:89:8a:9f:73:ab:68:87:5a:97:
         d6:ca:43:a3:e3:a8:0a:63:0b:b1:d7:b3:3d:cd:12:c4:04:db:
         10:db:91:d4:53:26:90:57:7c:8e:f1:a8:42:b7:9b:10:56:ad:
         5d:90:57:0b:65:a3:55:53:91:97:2b:d6:27:2f:b8:b9:4c:06:
         59:f9:39:d2:7e:76:75:b9:2f:a8:fb:f0:e4:0b:73:e0:93:2c:
         98:a5:63:4c:4a:29:40:42:fb:8f:af:0b:bd:a9:ad:34:4d:0a:
         3f:c8:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:18:38 2025 by rpki-client