Manifest

$ rpki-client -vvf repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft
File:                     A640AA61F1D62B9C940459804AE11BE99AD43842.mft (raw, json)
Hash identifier:          nOq0VvQ4k0st/eEYpUUrpMRz+Amqa5+bbn7+OmIK/5c=
Subject key identifier:   28:D0:EF:C4:71:9A:C9:A3:C3:0F:B6:1D:7C:EF:B7:AF:60:95:16:A4
Authority key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Certificate issuer:       /CN=a640aa61f1d62b9c940459804ae11be99ad43842
Certificate serial:       0ADE071C8D8D3636B20150B6B5A0796EF3AC1224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft
Manifest number:          0107
Signing time:             Tue 03 Jun 2025 10:20:00 +0000
Manifest this update:     Tue 03 Jun 2025 10:15:00 +0000
Manifest next update:     Wed 04 Jun 2025 13:09:00 +0000
Files and hashes:         1: 326131343a396530303a393130303a3a2f34302d3430203d3e203630323233.roa (hash: OcIfOI8Jb5u8vNNWna6QrbpheSZTAyuqn0ohlsjyBDw=)
                          2: A640AA61F1D62B9C940459804AE11BE99AD43842.crl (hash: o3tZ8kOxSE8wlNZPuku11CxGtWxFtRzragL4qj/+FxM=)
                          3: 326131343a396530303a383a3a2f34382d3438203d3e20323132373038.roa (hash: gkQb5vwT4FTbu1vlWQoKqksEAkrPgYNqY9cfyVmBRJo=)
                          4: 326131343a396530323a3a2f33312d3332203d3e20323133343438.roa (hash: 61qoqDWJ8FYsZcXh7/rWaXtP6WGq5fs9jbyLvb6s5ZE=)
                          5: 326131343a396530363a3a2f33322d3332203d3e20323136343235.roa (hash: tWzmlJclnuPUD2SHDWJvPFCGFtViLmTjn25JTJTUVMw=)
                          6: 326131343a396530303a6130303a3a2f34302d3438203d3e20333935383831.roa (hash: IBW+gKrm1jCZAjCEsDmCjo8Ey1/asRQvJdaUciWOvkY=)
                          7: AS60223.asa (hash: 0VfXOTJh/MHzuSl5QWfvvpRjtgJa7u6GjarU45LtLwA=)
                          8: 326131343a396530303a343a3a2f34382d3438203d3e203139313438.roa (hash: +pJba/8Xqwqz6GxWG5aE54WFuzIEO7aAQFkQoyQl1sU=)
                          9: 326131343a396530303a3330303a3a2f34302d3430203d3e203630323233.roa (hash: OgTW7WzxR6g+6szzdgCFhGWBRyPDwCwaKEVA7kGKa4I=)
                          10: 326131343a396530303a383a3a2f34382d3438203d3e203139313438.roa (hash: 0kZRhHUq0Q5cMeQlGPesx/OlWxzPHqZcR6uvayJhZ7s=)
                          11: 326131343a396530303a393030303a3a2f34302d3430203d3e203630323233.roa (hash: +sdKUvG7KNct0W/9yKQ55EQssNuukXpt8jZj98VvwYI=)
                          12: 326131343a396530363a3a2f33322d3438203d3e203336383332.roa (hash: S8TKZ/WVLOW7v2r6OhCSu4cWLuYCe6lC/UIiOKF9e5o=)
                          13: 326131343a396530303a3430303a3a2f33382d3338203d3e2030.roa (hash: xjfkdIlYBgSQ/OgvXVyyGTYWazwIv9I7ClkzF5Sz0e8=)
                          14: 326131343a396530303a3230303a3a2f34302d3430203d3e20323134353135.roa (hash: x4Wz4xUi49scDcHSN021TbaKuu0PCcvyL3sKxMSMfkM=)
                          15: 326131343a396530303a6330303a3a2f33382d3338203d3e2030.roa (hash: LRPItWUYl4X3RadeQ2KKkUWzKHbDaWzmJvhwRfpqzHU=)
                          16: 326131343a396530303a313030303a3a2f33382d3438203d3e2030.roa (hash: 6ExBLuSQxWHojzPXWa9GzIXEEEhnYmej4adivPlDSJU=)
                          17: 326131343a396530303a393230303a3a2f34302d3438203d3e203630323233.roa (hash: fxdZqdtAye+L0RTZG8aQuXn/fH66DPRWXyHXEJKMRxA=)
                          18: 326131343a396530303a343a3a2f34382d3438203d3e20323132373038.roa (hash: K7w4WCMhsh2q/gv76WfM6/5a/3xzr5wbQe0LCCk9eSg=)
                          19: 326131343a396530303a3830303a3a2f33392d3430203d3e20323136303738.roa (hash: KXrP5XgowVFAYww6BWJGjNegozCUncXMfvJUxLIit08=)
                          20: 326131343a396530313a3130303a3a2f34302d3438203d3e20323133363530.roa (hash: LlJ7tyCGomIraMvtign/aBrCJxnl/8dLagjZil4xPss=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:de:07:1c:8d:8d:36:36:b2:01:50:b6:b5:a0:79:6e:f3:ac:12:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a640aa61f1d62b9c940459804ae11be99ad43842
        Validity
            Not Before: Jun  3 10:15:00 2025 GMT
            Not After : Jun  4 13:09:00 2025 GMT
        Subject: CN=28D0EFC4719AC9A3C30FB61D7CEFB7AF609516A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:f7:e2:62:25:48:5c:7c:6b:80:d1:3e:ae:
                    3e:22:4b:97:4f:5a:78:77:cb:dc:53:72:2d:15:4e:
                    4e:8e:b7:9d:f5:8d:18:0a:77:9f:45:74:5e:81:57:
                    1d:26:1a:a3:5f:d7:cf:12:17:d3:af:c1:dc:e5:8d:
                    a5:5e:a4:04:e6:33:49:d6:1d:a7:e2:8e:48:e5:42:
                    93:b6:e0:b3:a7:d2:87:39:f1:c2:3f:76:12:6d:32:
                    22:ed:7c:98:66:12:50:6e:47:94:43:a9:58:ff:7f:
                    69:0f:da:49:05:22:62:6a:4c:58:a5:c4:ed:84:89:
                    88:4f:3d:4b:6e:b7:79:3c:a3:8c:a3:54:0f:67:0b:
                    46:ff:39:fb:f0:94:d4:41:e8:4c:93:12:7d:29:72:
                    7f:8d:34:1b:07:e1:68:2e:f5:d2:17:45:7f:ad:ce:
                    f5:66:98:97:d4:c1:c9:32:4d:ea:85:bf:79:57:03:
                    a7:8d:27:30:f8:ac:4b:33:2a:95:af:2f:b5:be:16:
                    98:69:f4:c4:e4:5c:7c:8a:4a:f2:ea:ef:fb:df:8f:
                    47:9f:e4:18:96:da:1e:46:5b:f9:78:3b:ef:8a:bb:
                    7e:38:cd:61:dd:21:45:42:d8:0b:6f:5f:51:14:33:
                    9e:72:fd:80:ef:0a:53:6f:09:17:a0:74:77:db:2c:
                    14:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D0:EF:C4:71:9A:C9:A3:C3:0F:B6:1D:7C:EF:B7:AF:60:95:16:A4
            X509v3 Authority Key Identifier:
                keyid:A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:93:ac:04:33:ef:71:c4:5b:69:a1:ae:ac:8f:4a:a7:0a:78:
         65:0b:fc:39:25:71:92:e4:09:9c:98:43:65:29:5e:df:6b:0f:
         f5:3c:7b:d5:44:87:4f:92:f7:62:7a:d2:53:e1:4c:1c:68:f4:
         79:14:4d:91:f9:ac:1d:37:38:09:a8:43:36:4c:9e:a2:c2:82:
         72:ba:35:5f:be:d1:a1:2f:1f:d2:d7:5e:4c:5e:c0:57:b5:bd:
         60:87:d2:31:75:8c:c9:e9:60:dc:15:aa:cc:b9:96:68:ef:4c:
         89:4b:9c:3d:f5:ac:64:6b:fd:b4:07:c4:c1:d8:43:db:72:86:
         21:4b:3d:a9:f9:12:58:43:f8:9f:8b:2e:b8:e0:04:d5:35:f3:
         ec:f9:69:e0:1a:94:bd:3c:56:f9:82:db:95:86:cd:f4:72:d0:
         b3:3a:e5:0f:5d:49:d0:3e:7a:b9:73:cc:3c:d1:ab:7a:fa:53:
         5c:8b:ad:e2:b5:d2:77:20:f0:fc:e6:eb:b8:08:02:1c:d3:90:
         6a:88:0b:26:dd:65:a0:8e:e4:06:8d:52:4a:e5:21:b7:fc:f7:
         0f:c8:cf:2f:fb:bc:53:c8:02:e7:49:70:81:78:a6:44:45:55:
         9c:bf:d2:19:ef:df:8a:e6:ab:54:ed:fb:68:a9:be:f3:4f:00:
         f3:6d:41:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:10:42 2025 by rpki-client