Manifest

$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
File:                     7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft (raw, json)
Hash identifier:          RbCe1u2WM2hlXO0NhE8KWJR0YWO3nDP9brs0s0Gybno=
Subject key identifier:   83:FA:B7:2C:64:FF:24:6B:00:01:22:A7:FA:6F:9D:C0:BA:68:ED:F9
Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
Certificate issuer:       /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Certificate serial:       28988DC98286F3D6D4E70A177612D5310E391F8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject info access:      rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
Manifest number:          03D5
Signing time:             Tue 03 Jun 2025 15:38:36 +0000
Manifest this update:     Tue 03 Jun 2025 15:33:36 +0000
Manifest next update:     Wed 04 Jun 2025 18:23:36 +0000
Files and hashes:         1: AS21957.asa (hash: v9+444bGaAkQtqJOIXn9P1VMcTrlW/WFkfocSw9xo/c=)
                          2: 3130342e33372e34302e302f32342d3234203d3e20393730.roa (hash: ek8Vg6kOrYHQQyaRN7UOy+nZ8uz9bhWO7ZAUVfTbaRI=)
                          3: 3130342e33372e34312e302f32342d3234203d3e203231393537.roa (hash: IRTKWsv2EGeDRsQ97JvbtSG0Rc6W53GcEAl3eMmmpqs=)
                          4: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl (hash: wg56NbUHz6XTkVigzehKtk7QT/ZdplOPuurjYMMwnkw=)
                          5: AS970.asa (hash: uUtIUuFVFE42+T1fqnnQdo7h/4VRg1akAdGbbCnAbEY=)
                          6: 3130342e33372e34302e302f32322d3232203d3e2030.roa (hash: vHzV9yuwB4p+FXvV7pq6ibofX3Oxg5SwuBjEw2YE3Pg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:98:8d:c9:82:86:f3:d6:d4:e7:0a:17:76:12:d5:31:0e:39:1f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
        Validity
            Not Before: Jun  3 15:33:36 2025 GMT
            Not After : Jun  4 18:23:36 2025 GMT
        Subject: CN=83FAB72C64FF246B000122A7FA6F9DC0BA68EDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:78:64:03:07:89:35:3e:88:ae:79:75:a1:
                    a3:21:9e:06:9b:a1:94:d0:63:56:6e:52:9a:c2:56:
                    c5:85:62:43:f9:42:5d:2d:c2:fc:33:14:25:18:61:
                    99:f5:12:32:d7:92:ee:86:7a:74:44:fe:3f:db:dd:
                    33:d9:07:1d:8a:a2:67:96:b7:20:31:53:2b:49:fd:
                    62:d0:f6:de:c5:96:6b:6f:6c:86:38:c6:ed:09:95:
                    c0:bb:a4:a4:bb:a9:aa:02:41:9c:2b:9d:75:5f:45:
                    fc:c3:e6:da:6f:08:2b:2f:1c:aa:f4:1c:0f:5c:a7:
                    2f:eb:fb:4b:c3:9d:11:fe:a5:de:f5:75:9c:ba:63:
                    fd:89:e7:b0:e6:5c:48:31:08:28:38:de:86:d1:13:
                    fd:c8:0f:f8:46:b3:ae:f0:da:cd:ba:ee:e7:12:73:
                    35:26:2f:e1:4e:8d:53:8d:7e:3b:ed:89:16:88:ee:
                    86:ec:f0:00:47:cd:58:98:fc:42:42:3f:e6:31:d4:
                    ad:7b:a2:34:2b:53:67:72:0f:6b:a0:4e:81:cd:82:
                    38:8e:43:f9:d3:f4:83:96:a2:59:3f:7e:5e:d4:0e:
                    28:ff:df:d5:e3:42:4d:21:8e:bc:14:e0:13:f2:6f:
                    48:a8:e3:1a:c4:59:d3:2b:97:8c:4d:bb:d4:b9:45:
                    bf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FA:B7:2C:64:FF:24:6B:00:01:22:A7:FA:6F:9D:C0:BA:68:ED:F9
            X509v3 Authority Key Identifier:
                keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e0:12:6d:10:5c:46:56:f1:d8:af:a4:d3:a9:07:f1:1b:f4:
         8b:00:90:e3:29:61:ca:32:2e:d7:1a:7e:4b:b7:44:10:f8:11:
         98:7f:91:a2:cb:58:d3:aa:74:12:a1:65:f9:ea:66:75:a9:d8:
         a9:54:39:37:b6:ab:7b:2c:75:74:ee:e6:67:a6:9b:1f:be:cf:
         48:ad:c1:86:c2:f2:b2:23:ca:0b:e3:8a:c7:9c:08:de:ec:08:
         08:7a:d8:ad:f5:6a:08:15:f2:c0:94:7e:da:3c:47:f1:fd:67:
         d0:d4:e1:6b:70:06:68:58:7e:d9:3c:d5:aa:a2:93:8e:84:da:
         f0:7e:bd:9b:53:31:68:ca:fb:52:12:c6:48:89:94:13:ae:bd:
         b8:e5:d6:01:3f:63:68:24:b9:e9:33:40:64:7a:f5:80:48:d7:
         77:97:b5:0f:b0:ec:2e:aa:47:da:f1:a5:80:06:ca:b6:b7:e6:
         54:cb:72:fc:cb:33:71:66:d2:29:c0:d6:d9:37:ea:5f:b2:51:
         41:ad:de:dd:48:c9:c2:66:c7:91:d1:d9:ea:10:ac:63:ad:12:
         8d:de:1f:52:7b:03:55:ef:7b:70:6f:a1:fd:c8:15:ba:07:b4:
         6a:3e:06:35:db:c0:e1:22:26:e6:ec:dc:b8:24:f2:dc:43:7a:
         96:d0:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----