Manifest

$ rpki-client -vvf rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
File:                     0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft (raw, json)
Hash identifier:          aNMKv2JT0OJEtiGgtyFHE/xlaa/uWOFAyqCiSvnHw1I=
Subject key identifier:   AF:7F:5D:15:7A:3E:2A:6F:33:57:89:58:31:DB:21:46:2B:B7:9A:B0
Authority key identifier: 0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0
Certificate issuer:       /CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932
Certificate serial:       43EBED0F94387C851A48954CEA57ED2F0A76DCB5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer
Subject info access:      rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
Manifest number:          B3
Signing time:             Wed 22 Oct 2025 16:04:28 +0000
Manifest this update:     Wed 22 Oct 2025 15:59:28 +0000
Manifest next update:     Thu 23 Oct 2025 19:06:28 +0000
Files and hashes:         1: 0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl (hash: tfw2a3DzGfvEbCCoX00vt0NPyEpcmd9sfQOkLKfK5dE=)
                          2: 32332e3134302e35322e302f32342d3234203d3e203332353931.roa (hash: oZRtVcSi4lYHDLHNFVp6cKh6gXIDWw99wQ2eImbTS0Y=)
                          3: 323630323a663633333a3a2f34302d313238203d3e2030.roa (hash: Gm4KC4yKfvUQGJIav09rOCnI6G67sL4yLr2b6lVR5jE=)
                          4: 323630323a663633333a3a2f34382d3438203d3e203332353931.roa (hash: nygGspUjWISDJvN3+yYoWERgYa1de//Gz0U2CTubz18=)
                          5: AS32591.asa (hash: jPFYj/1kozNrsSDc+ajpDpFIhmwjdkNt/m65RzoGG3g=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:eb:ed:0f:94:38:7c:85:1a:48:95:4c:ea:57:ed:2f:0a:76:dc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932
        Validity
            Not Before: Oct 22 15:59:28 2025 GMT
            Not After : Oct 23 19:06:28 2025 GMT
        Subject: CN=AF7F5D157A3E2A6F3357895831DB21462BB79AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e8:86:99:23:0e:7e:50:d8:18:a2:a2:ec:3b:
                    94:36:61:01:73:71:e7:73:a4:91:59:4d:97:8c:23:
                    17:26:4b:25:36:83:ed:2a:bc:da:3d:57:26:99:17:
                    8f:b6:de:51:62:76:4c:1c:c8:01:07:d0:dd:d3:41:
                    ab:63:b8:1e:a4:75:4c:8e:47:12:53:23:54:de:b8:
                    33:a4:9a:46:f9:86:0a:93:c7:f0:ca:ba:22:4a:5e:
                    0c:1d:cb:6c:3e:85:0a:57:4e:d2:1f:28:c2:3e:e8:
                    84:f0:13:5c:33:b2:96:b1:bf:ff:3b:39:a7:40:e6:
                    c0:87:23:98:60:61:fb:11:e0:47:52:a9:f7:74:71:
                    84:62:6c:c0:3a:2c:b2:76:44:ba:cf:09:2c:62:c7:
                    72:15:9e:47:6d:94:01:d0:d5:5a:0d:48:32:db:f3:
                    27:b8:7d:b8:50:08:22:37:20:77:44:81:6c:c4:b8:
                    18:2b:95:59:6f:76:1f:ff:ac:30:38:b1:3b:e7:75:
                    cc:a7:72:9d:5c:7a:88:e0:93:9a:a9:5d:e6:eb:8b:
                    74:e3:2c:38:61:66:f8:3e:4a:35:39:38:7c:e3:4d:
                    56:38:46:3b:ea:e1:b6:b6:7a:a8:74:99:48:98:cb:
                    21:1e:35:93:ee:90:5d:ff:e1:23:16:7c:ef:27:b8:
                    31:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7F:5D:15:7A:3E:2A:6F:33:57:89:58:31:DB:21:46:2B:B7:9A:B0
            X509v3 Authority Key Identifier:
                keyid:0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f0:90:8e:2d:13:65:27:da:38:c3:0a:49:f2:34:0c:44:cb:
         fe:4f:57:35:a3:43:25:d5:62:0e:f9:98:1c:39:f1:ce:91:6b:
         fb:ae:63:77:d0:ac:20:f1:46:6d:65:b6:e3:99:a0:80:9e:9e:
         66:f2:d1:b7:5f:b8:24:eb:7a:84:79:d1:09:15:c3:d1:50:e0:
         52:64:f9:98:e8:51:fc:4d:96:1d:6a:f1:45:24:a6:37:ec:2a:
         4f:37:11:9a:3b:f1:a7:4d:de:df:f1:78:dc:a2:bf:03:6d:98:
         46:d5:3b:53:5c:ef:4e:79:77:29:0e:42:87:48:e2:60:c3:23:
         d9:59:ba:0f:aa:cc:ab:e8:5f:8f:eb:8d:5e:15:97:bf:f2:42:
         5b:dc:3e:4c:c2:e5:b8:f5:1b:46:15:0b:87:eb:c4:63:5f:93:
         93:37:14:a0:7d:2f:cc:4f:fd:e0:5a:b8:04:71:01:a4:88:d1:
         ee:07:ec:53:f9:e2:2c:7a:a2:8c:a2:ac:9f:17:d5:58:f1:3e:
         a1:17:6a:87:dc:18:21:2f:bc:74:b6:1c:6b:80:7d:ae:a4:0d:
         c4:a5:69:5f:9b:d3:bc:88:6e:76:61:01:63:17:a7:86:28:72:
         90:0f:f4:0e:3c:5b:09:23:9e:1c:68:e7:59:bf:97:0d:f1:70:
         9d:64:b6:9a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUQ+vtD5Q4fIUaSJVM6lftLwp23LUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzBhMzA4ZTg3MTY2ZDU3MzM1OTAyN2FmOTk3NWE0MTZk
NWEzZjE3NmU0NGY0NWM5MzIwHhcNMjUxMDIyMTU1OTI4WhcNMjUxMDIzMTkwNjI4
WjAzMTEwLwYDVQQDEyhBRjdGNUQxNTdBM0UyQTZGMzM1Nzg5NTgzMURCMjE0NjJC
Qjc5QUIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+iGmSMOflDY
GKKi7DuUNmEBc3Hnc6SRWU2XjCMXJkslNoPtKrzaPVcmmRePtt5RYnZMHMgBB9Dd
00GrY7gepHVMjkcSUyNU3rgzpJpG+YYKk8fwyroiSl4MHctsPoUKV07SHyjCPuiE
8BNcM7KWsb//OzmnQObAhyOYYGH7EeBHUqn3dHGEYmzAOiyydkS6zwksYsdyFZ5H
bZQB0NVaDUgy2/MnuH24UAgiNyB3RIFsxLgYK5VZb3Yf/6wwOLE753XMp3KdXHqI
4JOaqV3m64t04yw4YWb4Pko1OTh8401WOEY76uG2tnqodJlImMshHjWT7pBd/+Ej
FnzvJ7gx5QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFK9/XRV6PipvM1eJWDHbIUYr
t5qwMB8GA1UdIwQYMBaAFAuJAEijo5W8H6SWXS3Vft19keLgMA4GA1UdDwEB/wQE
AwIHgDBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5jYW5vcHMu
b3JnL3JlcG8vQ2FuT3BzLVBBU1MvMC8wQjg5MDA0OEEzQTM5NUJDMUZBNDk2NUQy
REQ1N0VERDdEOTFFMkUwLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUF
BzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp
LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQy
OC0xY2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDgyYTRkMDYtY2VkOC00ODUx
LTgwYjItNjBkM2RhMTFmZDZmLzMwYTMwOGU4NzE2NmQ1NzMzNTkwMjdhZjk5NzVh
NDE2ZDVhM2YxNzZlNDRmNDVjOTMyLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYB
BQUHMAuGXHJzeW5jOi8vcnBraS1yZXBvLmNhbm9wcy5vcmcvcmVwby9DYW5PcHMt
UEFTUy8wLzBCODkwMDQ4QTNBMzk1QkMxRkE0OTY1RDJERDU3RUREN0Q5MUUyRTAu
bWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQCP8JCOLRNlJ9o4wwpJ8jQMRMv+T1c1o0Ml1WIO+ZgcOfHOkWv7
rmN30Kwg8UZtZbbjmaCAnp5m8tG3X7gk63qEedEJFcPRUOBSZPmY6FH8TZYdavFF
JKY37CpPNxGaO/GnTd7f8Xjcor8DbZhG1TtTXO9OeXcpDkKHSOJgwyPZWboPqsyr
6F+P641eFZe/8kJb3D5MwuW49RtGFQuH68RjX5OTNxSgfS/MT/3gWrgEcQGkiNHu
B+xT+eIseqKMoqyfF9VY8T6hF2qH3BghL7x0thxrgH2upA3EpWlfm9O8iG52YQFj
F6eGKHKQD/QOPFsJI54caOdZv5cN8XCdZLaa
-----END CERTIFICATE-----