
Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/4D63138C2E456961030128191238D71ABCAE4AA6.mft
File: 4D63138C2E456961030128191238D71ABCAE4AA6.mft (raw, json)
Hash identifier: jWU0g7TmVXtQlR5QMi9G2YWrPXaTAI4L4yO1gaxAyOE=
Subject key identifier: 8C:60:6E:B6:8B:4B:2F:47:D0:9A:07:DA:FF:B5:BE:13:C9:E1:05:BE
Authority key identifier: 4D:63:13:8C:2E:45:69:61:03:01:28:19:12:38:D7:1A:BC:AE:4A:A6
Certificate issuer: /CN=8d8a672dd7429c4af25e720e5399be1904f3293aab89abd168
Certificate serial: 1BEA202C586C8160B6754A4232D8743C4B68E07B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7429c4af25e720e5399be1904f3293aab89abd168.cer
Subject info access: rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/4D63138C2E456961030128191238D71ABCAE4AA6.mft
Manifest number: 3B
Signing time: Sat 06 Sep 2025 07:00:02 +0000
Manifest this update: Sat 06 Sep 2025 06:55:02 +0000
Manifest next update: Sun 07 Sep 2025 07:20:02 +0000
Files and hashes: 1: 4D63138C2E456961030128191238D71ABCAE4AA6.crl (hash: Lu61b8YAnlY+VVrTRjOxaz8jN/WINK3OVNdqdpOhk58=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ea:20:2c:58:6c:81:60:b6:75:4a:42:32:d8:74:3c:4b:68:e0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8a672dd7429c4af25e720e5399be1904f3293aab89abd168
Validity
Not Before: Sep 6 06:55:02 2025 GMT
Not After : Sep 7 07:20:02 2025 GMT
Subject: CN=8C606EB68B4B2F47D09A07DAFFB5BE13C9E105BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:1a:fe:26:aa:94:7a:77:a5:bd:7c:f0:20:
1f:78:cc:bb:9a:26:e8:39:d9:81:c2:66:c0:90:d0:
33:82:c6:39:92:47:03:c4:b4:99:f3:aa:9c:e1:bf:
8a:03:fb:1c:4d:4c:8d:a7:fb:98:ff:f4:48:9a:70:
b7:38:bd:5d:89:e4:7e:e2:ef:ea:31:9c:15:e0:dd:
a8:82:63:c3:03:ae:bd:eb:f5:54:5c:6a:55:e2:3d:
43:df:8f:32:bd:d9:04:ae:12:bd:80:25:bf:04:44:
23:e1:c5:e6:7a:26:10:0a:2e:f0:93:f4:e3:e0:76:
81:6c:19:5e:01:c6:95:eb:db:96:14:1e:63:86:24:
8a:27:16:a6:f1:ef:c7:9d:9f:b7:1c:87:ad:13:02:
2c:f0:a0:74:db:ba:fd:71:ca:55:34:f1:38:0b:21:
c2:a5:76:51:ed:9e:41:26:8b:0e:e1:3d:d9:63:29:
52:19:60:03:55:ad:df:38:4e:95:b9:b7:ee:33:ac:
94:79:d4:64:7e:78:af:83:65:b4:78:85:86:e1:dd:
e1:2d:76:17:56:52:2d:f8:2e:a9:fa:c1:e1:a5:24:
5e:b9:8d:79:c6:10:47:04:8d:bb:ee:01:1f:22:5a:
46:9a:b6:eb:1f:fb:17:31:f1:14:4c:e3:20:62:f8:
ae:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:60:6E:B6:8B:4B:2F:47:D0:9A:07:DA:FF:B5:BE:13:C9:E1:05:BE
X509v3 Authority Key Identifier:
keyid:4D:63:13:8C:2E:45:69:61:03:01:28:19:12:38:D7:1A:BC:AE:4A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/4D63138C2E456961030128191238D71ABCAE4AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd7429c4af25e720e5399be1904f3293aab89abd168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/1/4D63138C2E456961030128191238D71ABCAE4AA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:94:1d:a9:cc:42:37:09:4e:ac:5d:75:0d:7f:86:db:6e:48:
1d:05:e2:4b:b9:2a:14:67:78:c1:db:26:e2:d2:f3:6b:30:45:
94:b2:25:0c:89:84:3b:4e:ca:e0:5f:58:a2:c7:d9:54:8f:68:
4f:67:68:df:c2:08:00:17:e7:e9:fd:a3:5a:a5:c4:ce:28:dc:
43:64:b5:6d:38:06:86:c9:54:87:f0:4e:42:1a:09:26:1b:78:
f3:39:da:03:e9:6b:7d:e5:fb:82:d3:20:43:a5:9a:b5:4c:24:
a4:bf:1a:f7:ab:dd:26:fd:7e:85:b4:e3:9a:7c:10:35:4f:4e:
c3:25:a9:77:d1:c2:ae:46:1d:15:c3:79:8f:d3:6c:aa:f6:e6:
51:d4:fd:3e:f8:47:fe:e4:05:8c:12:6f:ee:4b:53:fb:74:eb:
f1:ca:61:57:3c:31:4a:89:3f:1a:50:10:51:fb:11:02:d8:91:
70:4d:64:4a:fe:ef:9b:ca:f3:2c:20:82:86:ec:8e:6f:d5:78:
83:e3:fb:2f:41:48:d7:f3:17:54:cd:a6:5c:c6:5d:7c:c1:27:
06:de:d1:58:24:1d:e0:c5:c2:46:30:d5:0b:d1:30:91:90:db:
a8:f2:16:e3:09:3c:35:76:5c:77:73:c8:05:2c:a1:3a:18:db:
32:64:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 08:55:46 2025 by rpki-client