Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/3/9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF.mft
File:                     9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF.mft (raw, json)
Hash identifier:          Oxwg2urmoL0O1z/Hi1RoKxRW4KxG4LprW6wWjLj+6WU=
Subject key identifier:   7B:B0:9C:34:C1:0F:BB:32:A1:5B:9A:92:B3:67:F0:98:F8:1A:91:E1
Authority key identifier: 9C:C4:05:53:ED:3A:1E:DD:CD:4D:A4:C7:BE:96:ED:B2:A8:11:0B:DF
Certificate issuer:       /CN=9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF
Certificate serial:       15EA7273A95DEA1FC31114DA07036A2F0BCB43
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/3/9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF.mft
Manifest number:          01AE
Signing time:             Thu 21 May 2026 08:26:17 +0000
Manifest this update:     Thu 21 May 2026 08:21:17 +0000
Manifest next update:     Fri 22 May 2026 08:33:17 +0000
Files and hashes:         1: 9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF.crl (hash: Uktv8WyqDp+m7bNpVak3kvkR5Mhqho3y9iBN2Dx6K8s=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ea:72:73:a9:5d:ea:1f:c3:11:14:da:07:03:6a:2f:0b:cb:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF
        Validity
            Not Before: May 21 08:21:17 2026 GMT
            Not After : May 22 08:33:17 2026 GMT
        Subject: CN=7BB09C34C10FBB32A15B9A92B367F098F81A91E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:36:bd:7b:b7:e9:40:45:48:b3:0e:d8:95:
                    60:e3:9a:a8:d0:7a:80:1b:b3:ce:ef:02:44:4f:e9:
                    32:51:b1:d0:57:91:df:05:a8:19:cd:75:e5:01:e4:
                    46:d8:e6:7f:e0:45:22:b8:38:b8:92:36:87:30:42:
                    43:aa:a8:85:e4:9e:b5:c8:bf:93:ae:28:99:93:ce:
                    fe:42:a1:aa:8c:13:86:53:8c:9a:d1:c6:90:40:bd:
                    88:37:4a:75:85:fa:42:5c:0a:bd:81:97:37:34:b8:
                    6d:b8:9b:81:23:1d:a0:a9:13:61:ef:32:1a:6d:cf:
                    7f:fd:6a:0b:06:47:38:81:19:62:16:0c:03:94:fb:
                    a0:d3:e5:40:e0:10:bd:f7:d8:dc:bb:ad:43:65:e2:
                    38:2f:35:7d:48:14:71:d9:ae:13:e3:18:33:a2:f5:
                    34:9c:01:a1:4c:c9:cf:8e:ea:ce:4b:02:01:c0:fb:
                    18:a4:3f:5c:f5:f8:b6:55:58:c1:ab:4a:e4:57:ec:
                    c8:a0:ab:42:49:23:86:10:84:32:f6:46:31:75:a0:
                    17:34:b5:72:58:d2:e7:b7:ca:1d:49:e9:1d:fd:e2:
                    03:3b:7f:97:09:4c:39:5a:61:36:0b:da:3c:28:8c:
                    2d:cc:41:aa:db:c0:f7:45:09:28:a6:12:6a:07:3e:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B0:9C:34:C1:0F:BB:32:A1:5B:9A:92:B3:67:F0:98:F8:1A:91:E1
            X509v3 Authority Key Identifier:
                keyid:9C:C4:05:53:ED:3A:1E:DD:CD:4D:A4:C7:BE:96:ED:B2:A8:11:0B:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/3/9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/3/9CC40553ED3A1EDDCD4DA4C7BE96EDB2A8110BDF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:af:de:88:35:2e:ad:86:31:f5:ed:9f:44:17:1b:17:06:0f:
         ab:ea:17:ca:50:05:65:7b:47:a2:bd:5c:82:66:c5:5c:f4:28:
         16:c8:69:d4:e3:03:fb:5f:cb:d4:af:c3:e1:2a:53:56:dd:05:
         6b:30:0d:a4:f4:3e:98:e1:b2:05:df:9d:de:a7:a3:4b:0f:8e:
         04:c8:57:c8:19:d7:f9:e0:7b:de:90:83:f0:0a:93:48:dc:41:
         13:20:6a:67:2e:03:3b:24:4b:db:2c:50:5c:5a:0b:cc:3b:5c:
         46:21:9c:2c:df:89:5c:b6:0f:33:d9:6f:a3:d0:0a:b8:26:ce:
         50:23:4f:21:d3:e5:9b:4d:aa:c1:5d:58:ed:3f:17:e1:ef:ff:
         96:ac:bb:fe:f1:57:56:11:52:0e:67:94:6a:64:72:78:56:fc:
         38:1d:3d:06:53:99:67:41:96:08:95:01:72:93:0b:c9:ad:79:
         84:87:d7:b8:b5:61:a3:0f:e2:35:42:b9:45:ff:72:f2:ad:02:
         ed:6f:97:6b:e9:8b:bc:5f:b8:c8:e8:ec:84:f2:30:58:02:9a:
         4c:4a:41:bb:07:13:e7:e7:d8:72:1a:57:03:18:ab:3f:c8:9f:
         61:f0:a2:54:01:77:5f:64:86:8a:86:56:3f:e1:64:c7:3b:24:
         8d:11:54:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 16:16:56 2026 by rpki-client