Manifest

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
File:                     28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft (raw, json)
Hash identifier:          B/XbH2B59ZVrsDfL5aVSpOfbfaYTjznrqEzZZAYrrJc=
Subject key identifier:   95:2D:ED:0C:C8:3F:E4:A4:C5:9C:AE:B4:AD:D6:B0:F7:A5:D6:03:2A
Authority key identifier: 28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2
Certificate issuer:       /CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
Certificate serial:       690C40C4F1F025A8A677A3FA7FEBD52337724F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
Manifest number:          01D9
Signing time:             Wed 14 May 2025 08:39:23 +0000
Manifest this update:     Wed 14 May 2025 08:34:23 +0000
Manifest next update:     Thu 15 May 2025 12:28:23 +0000
Files and hashes:         1: 28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl (hash: yr8HPczCG4SMCUuVr8cIkrs2luQ0nj7k8FuphII0pMA=)
                          2: AS51396.asa (hash: LPntScnqKTV0B/ca4ayh0Ad7plN1tSxen2CVMDLBZ+E=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl
                          rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0c:40:c4:f1:f0:25:a8:a6:77:a3:fa:7f:eb:d5:23:37:72:4f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d23ec5e787aaae052a8773fd9dfec5b1fbc3a2
        Validity
            Not Before: May 14 08:34:23 2025 GMT
            Not After : May 15 12:28:23 2025 GMT
        Subject: CN=952DED0CC83FE4A4C59CAEB4ADD6B0F7A5D6032A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:1f:f6:22:ca:f9:0f:0b:b4:f5:78:07:2c:
                    2d:53:4b:fe:dc:bc:1c:d8:11:52:69:87:3b:fa:ef:
                    40:a3:c4:5b:9c:f5:94:bb:13:79:44:03:96:9b:24:
                    f5:01:a0:c7:f1:9e:e2:ce:da:fe:78:b3:78:30:40:
                    d1:1a:3c:0e:db:d5:97:4b:a2:15:72:6f:7b:fe:5c:
                    bb:f2:87:b6:d4:ac:ed:e4:26:c8:d9:80:a8:8a:dd:
                    e2:3d:c4:c1:8f:02:33:1b:0c:52:09:db:7c:e7:11:
                    c6:c3:84:c7:04:49:88:d0:02:0e:0d:4a:08:ad:b2:
                    56:84:04:4a:83:fb:ca:c9:58:ac:11:c3:3f:4e:85:
                    2a:54:c8:34:bb:49:f4:c2:9d:7c:81:8c:5c:c5:b8:
                    97:d7:05:3f:a1:c9:7c:6f:82:09:0b:c2:9d:c1:97:
                    b2:14:d0:47:d6:53:04:d2:5c:1a:b0:ff:d4:fc:2d:
                    77:99:5e:e8:f3:7a:79:fd:5c:99:48:85:7f:02:eb:
                    b9:7e:b9:bf:89:c6:d0:31:33:95:7d:8e:85:e3:36:
                    ce:f7:d3:02:58:98:a2:ed:0a:ba:d3:a6:04:db:d5:
                    de:7e:66:14:29:a7:4c:78:9a:48:a2:1a:ef:73:00:
                    57:9c:0c:08:fe:3d:ee:11:ea:42:38:26:1e:94:4e:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2D:ED:0C:C8:3F:E4:A4:C5:9C:AE:B4:AD:D6:B0:F7:A5:D6:03:2A
            X509v3 Authority Key Identifier:
                keyid:28:D2:3E:C5:E7:87:AA:AE:05:2A:87:73:FD:9D:FE:C5:B1:FB:C3:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNI-xeeHqq4FKodz_Z3-xbH7w6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/1/28D23EC5E787AAAE052A8773FD9DFEC5B1FBC3A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ce:8c:df:21:fd:5b:6c:a1:c9:45:7c:f7:fc:31:07:8c:d3:
         97:66:6e:f9:b1:36:3b:b6:b3:95:95:23:b7:b8:9a:cf:a2:7e:
         89:92:8b:ea:38:29:0b:b6:9f:c5:01:ca:05:eb:68:06:08:4d:
         6f:6d:0f:d1:35:60:bb:cd:15:56:af:f7:fd:6d:8c:4e:5b:d6:
         30:ee:8c:a2:23:a2:cd:d5:19:ad:62:a9:7b:03:64:aa:3a:44:
         d8:cf:2e:21:93:59:70:6f:9f:61:63:76:6e:8a:fc:b1:56:fe:
         6b:c2:49:aa:a3:d6:65:6f:aa:2a:3f:43:a5:f1:24:14:af:a5:
         ab:63:7d:c6:f5:ba:9f:ae:af:94:a3:57:71:c7:56:a4:72:a8:
         dd:d9:55:1a:74:4e:31:e5:05:e0:b5:d4:99:87:db:9f:5e:83:
         84:50:1a:e3:58:c4:a0:68:f7:ca:73:72:53:12:c7:93:da:7b:
         ab:e3:78:02:57:5f:e5:3a:89:a4:14:6a:cf:c1:cb:fb:4a:9d:
         3b:61:de:4e:9b:2c:b8:62:0c:0e:26:74:6f:94:0a:16:8b:8c:
         09:5d:e8:03:ab:a0:60:ec:ca:96:45:03:af:94:33:87:de:2c:
         d5:4c:c2:d7:d9:ef:bf:42:8e:7e:23:0e:9d:e3:9f:25:f4:e3:
         c2:fc:7e:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 14 11:56:20 2025 by rpki-client