Manifest

$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
File:                     7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft (raw, json)
Hash identifier:          3jy93/m18o6rya4PtAWCFrCRF0/PDJGUBUeqnqUgRkw=
Subject key identifier:   81:14:C8:CE:CA:CB:F0:28:B5:0E:11:B8:07:73:70:04:07:08:44:BC
Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
Certificate issuer:       /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Certificate serial:       3DF49A750048C3BFAB7EB50BC0C5253EF5FB1511
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject info access:      rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
Manifest number:          01BF
Signing time:             Wed 27 Mar 2024 15:31:55 +0000
Manifest this update:     Wed 27 Mar 2024 15:26:55 +0000
Manifest next update:     Thu 28 Mar 2024 19:00:55 +0000
Files and hashes:         1: AS970.asa (hash: jzB2E7kaYrBxVJiGnbS9WFbNqd9sk8sfdsau+W2bmK8=)
                          2: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl (hash: KqtYanENxq8CV2O/N2+6sBpCht3yf7mlXYsq/QaYwUI=)
                          3: 64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.cer (hash: DMtdrF8ZWZlpns0Wj20pqeFCJelC7+Gl6i/ZlCHcRSU=)
                          4: 3130342e33372e34322e302f32332d3234203d3e20393435.roa (hash: xw3XOfvRZUaoz642di+XOyW27hy/wOxkel4XrTakyVI=)
                          5: 3130342e33372e34302e302f32322d3232203d3e2030.roa (hash: 3Dx9MrwmJlSexiC4AkX+YCkpXccMrukkkSZIGH658cU=)
                          6: AS21957.asa (hash: faF7+8kBApl5YlYOGr9e511kueO4rxaKjvlL8v1gaa8=)
                          7: 3130342e33372e34302e302f32342d3234203d3e20393730.roa (hash: nQN+4wOuwotL/QEiaZ7hL2BRDxbM05YmppHCrNkMcGw=)
                          8: 3130342e33372e34312e302f32342d3234203d3e203231393537.roa (hash: XaNBV09FvARLrTtiUD7xLrsJU5+S/V2B1ry0LCMI7Cg=)

Validation:               OK
Signature path:           rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl
                          rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Mar 2024 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f4:9a:75:00:48:c3:bf:ab:7e:b5:0b:c0:c5:25:3e:f5:fb:15:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
        Validity
            Not Before: Mar 27 15:26:55 2024 GMT
            Not After : Mar 28 19:00:55 2024 GMT
        Subject: CN=8114C8CECACBF028B50E11B807737004070844BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:c9:67:34:2a:55:08:d5:96:ad:fe:bd:99:
                    49:a2:15:0b:12:70:3d:7b:f6:7d:e1:20:89:a6:fb:
                    8b:25:de:fa:f5:df:ef:cf:4e:71:c5:58:3a:62:66:
                    57:f7:29:55:c4:89:18:92:d6:a5:5b:3a:d4:b8:18:
                    9a:7e:1f:8d:da:c2:86:b1:08:2c:81:ca:c9:84:aa:
                    29:92:82:65:93:e8:2c:9a:db:a5:a0:3b:5a:9f:f7:
                    f3:50:93:d0:8b:70:48:10:92:0f:d9:f9:43:e6:98:
                    a2:70:29:8e:f7:e8:43:8d:dd:e6:c5:52:ac:50:f8:
                    0e:95:26:78:f6:09:df:cc:9a:36:55:fa:58:5c:47:
                    47:63:a1:57:d9:25:4e:69:3b:e1:2e:9c:12:7a:60:
                    92:e7:01:47:02:ea:72:70:c6:87:1f:42:8e:4e:1c:
                    b3:e8:71:a8:3e:70:16:98:52:4e:0e:92:eb:50:d3:
                    b6:b3:f4:62:3f:47:d8:15:3d:28:4f:f2:32:2c:5d:
                    b6:bd:61:4f:ba:c0:2a:01:e7:33:12:02:e2:b9:e5:
                    9d:ac:28:bc:03:8d:74:3c:81:64:60:a7:db:c7:ae:
                    f8:3f:e1:61:da:27:f1:e2:c5:ab:2b:41:6f:4e:93:
                    a7:65:69:1c:5f:ae:14:c9:7b:4e:5a:7f:d2:9a:d1:
                    51:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:14:C8:CE:CA:CB:F0:28:B5:0E:11:B8:07:73:70:04:07:08:44:BC
            X509v3 Authority Key Identifier:
                keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ef:65:00:70:f8:01:ec:2a:5d:58:c5:4b:f2:75:34:ae:5e:
         b6:92:43:52:a7:dc:ed:c2:42:69:4a:47:18:ba:8b:f0:97:36:
         50:77:6d:fb:4f:ae:86:74:bc:17:fe:ac:7a:a5:87:0e:ac:04:
         78:08:97:6c:92:bb:e6:99:9e:d8:04:2c:bf:e3:47:cb:c1:ca:
         29:c2:0e:89:e4:ee:84:2d:98:94:f0:18:06:c2:b5:90:f1:a8:
         92:b5:cf:07:e2:63:6b:9f:75:55:a5:1d:4d:c7:1b:c7:96:17:
         8b:27:06:0c:ce:dc:96:9d:7d:c3:89:84:0c:c9:d8:4f:9c:f2:
         ea:89:04:50:ab:c8:1e:b2:38:ab:43:2a:7b:7a:dd:a1:30:56:
         aa:02:9c:fc:f0:93:8d:f1:51:eb:9c:9a:16:94:36:85:33:77:
         89:34:13:da:b3:a3:8f:0d:9d:33:47:89:b1:3c:b3:f1:a2:7d:
         f5:f6:14:05:9d:ad:cc:23:44:3f:4c:ab:47:25:9a:ff:1e:c6:
         9b:71:6d:ae:46:f0:65:5c:14:3f:ec:ec:53:40:cd:b1:7f:87:
         c7:0c:5f:9c:82:03:7e:32:28:6f:4d:bc:62:17:a5:3e:02:74:
         2e:a2:2c:7e:1d:9e:15:2d:0b:3d:18:83:f3:75:62:ab:d1:84:
         2e:5f:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 15:54:33 2024 by rpki-client on console-fra.rpki-client.org