Manifest

$ rpki-client -vvvf rpki.axivora.net/repo/Axivora-Net/1/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.mft
File:                     00F736ADDA2A4172D32FC166E5EBA9341512CDC1.mft (raw, json)
Hash identifier:          P/f9Zn3T1aeL5benc9GeGR2Qxrc6YUwkQ3O+T+NNwK4=
Subject key identifier:   9B:CA:11:0C:16:C5:4D:CB:F9:05:88:E0:3E:7B:9F:6B:B2:4F:F3:58
Authority key identifier: 00:F7:36:AD:DA:2A:41:72:D3:2F:C1:66:E5:EB:A9:34:15:12:CD:C1
Certificate issuer:       /CN=00F736ADDA2A4172D32FC166E5EBA9341512CDC1
Certificate serial:       72DB51A1A0366A2C6D4D2D0A942F6456DAE82A68
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/1/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.mft
Manifest number:          0150
Signing time:             Thu 01 Oct 2026 23:37:14 +0000
Manifest this update:     Thu 01 Oct 2026 23:32:14 +0000
Manifest next update:     Sat 03 Oct 2026 02:15:14 +0000
Files and hashes:         1: 326131343a373538303a6361303a3a2f34342d3434203d3e20323135373532.roa (hash: 9bl/r9kCLhycZfH94xHNVtAaw5837/fJltXyS8UcRFs=)
                          2: 326131343a373538303a6363303a3a2f34342d3438203d3e20323034353339.roa (hash: ac2Mfh1KdbG2j82zStJziAG6i/zvAOzgIL5QigJdcX0=)
                          3: 326131343a373538303a6365303a3a2f34342d3438203d3e20323034353339.roa (hash: p1CZMp4aIwHCRSTkb5t+tJHUmbYDZ8KNtUZ+AKhjzcs=)
                          4: 326131343a373538303a6331303a3a2f34342d3438203d3e20323034353339.roa (hash: zvzzDdXYL/Ryn6U5dU7fLEMUGudD9rLt32LQTGjB1Qk=)
                          5: 00F736ADDA2A4172D32FC166E5EBA9341512CDC1.crl (hash: LmrQuSl3K+ISJRLN3bIXu2EwrTKmWu97HgQe8Gu4cjI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:db:51:a1:a0:36:6a:2c:6d:4d:2d:0a:94:2f:64:56:da:e8:2a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F736ADDA2A4172D32FC166E5EBA9341512CDC1
        Validity
            Not Before: Oct  1 23:32:14 2026 GMT
            Not After : Oct  3 02:15:14 2026 GMT
        Subject: CN=9BCA110C16C54DCBF90588E03E7B9F6BB24FF358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:cf:b4:38:39:31:43:f8:e0:1b:59:8d:01:
                    eb:4c:cb:f3:65:b4:13:c5:7c:74:a3:42:24:d1:b5:
                    5f:68:ea:cb:fe:a6:9a:bb:eb:83:89:d8:d1:09:e3:
                    5d:a8:59:9f:00:45:d1:32:22:d0:3a:8a:28:b1:df:
                    17:8d:17:12:21:80:8e:a5:e8:48:59:cf:7c:a7:56:
                    da:ae:ea:47:a2:bc:20:6a:77:fc:61:47:80:73:91:
                    90:ac:88:2a:6f:67:9e:44:e8:41:86:15:ee:cc:d3:
                    b0:7b:f0:b1:d5:61:af:cf:08:d9:8a:1c:fa:cc:a3:
                    d2:a9:5e:b5:90:a5:2c:b5:8a:09:a9:8b:bb:35:62:
                    a1:51:19:e2:db:17:e9:f5:50:86:fd:64:aa:37:5f:
                    91:f5:f0:bf:58:85:12:9b:e1:11:c6:10:c9:71:ae:
                    af:19:4b:82:b1:84:d7:55:2b:63:2b:db:2f:23:08:
                    81:23:81:46:f8:3c:fc:80:45:2b:7c:89:0c:5c:7b:
                    a8:67:15:13:cf:53:85:92:22:f6:fd:95:7a:e4:eb:
                    bb:7d:58:20:ba:8c:4a:0d:07:51:31:e2:9d:f4:f7:
                    12:f9:71:52:4e:ca:d3:cb:58:b4:a3:dd:ac:2c:24:
                    ab:7e:6a:54:a7:26:bf:07:7e:65:3c:2d:f6:2c:a5:
                    87:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CA:11:0C:16:C5:4D:CB:F9:05:88:E0:3E:7B:9F:6B:B2:4F:F3:58
            X509v3 Authority Key Identifier:
                keyid:00:F7:36:AD:DA:2A:41:72:D3:2F:C1:66:E5:EB:A9:34:15:12:CD:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/1/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/1/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:73:87:32:83:5b:76:5b:7e:2b:ed:8e:c8:2a:1c:30:62:1c:
         a3:43:51:ee:2d:9d:7e:b6:2f:71:a3:c5:89:c2:dc:42:2b:97:
         dc:d3:14:78:60:e8:6d:4b:0f:b0:a4:ff:85:13:d9:b0:0c:2e:
         5a:ee:5c:2b:9b:5b:a1:2a:1b:92:ae:91:78:a0:f3:1a:93:9e:
         1f:fe:37:f9:61:3b:08:84:96:10:d3:d7:41:28:a3:c4:a1:ac:
         bc:65:56:cd:84:ae:ca:0c:53:71:f9:9a:ca:16:7e:81:f3:89:
         bb:4c:3a:0e:bb:fa:c3:02:38:91:0e:8f:0b:d3:a8:cd:fb:23:
         ab:f1:51:04:78:11:2f:9c:6f:73:d1:b1:44:91:cf:f1:66:fa:
         70:57:38:3a:fc:37:73:05:a5:1c:7b:9d:90:d2:4d:fb:d4:7f:
         e3:dd:9c:8c:60:74:db:8f:9b:ef:26:26:4c:a4:d8:ed:7d:30:
         ab:02:6e:22:3a:ec:a8:d1:3d:0a:8c:09:b8:9c:48:3c:e3:3d:
         e8:3e:8c:21:33:b4:80:ff:73:99:ff:51:d6:f0:92:5b:97:30:
         81:2e:ea:74:22:32:75:5a:93:cd:3f:14:b8:56:80:c4:7c:9f:
         b6:2e:20:8c:dd:bc:b2:bb:7f:b7:c7:44:41:02:0a:cb:d0:b1:
         3d:29:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----