Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File:                     B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier:          /Wl0tktTLFcjKKGlA0V6yCKa9SLg7hp/W/eU/a1oUN8=
Subject key identifier:   4D:58:59:EB:94:D3:3B:A4:1B:0F:68:B0:D3:90:BB:AB:76:A0:F7:01
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer:       /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial:       2BB67A02BEA2904A89C05D2D0E9562D012983DB0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number:          0199
Signing time:             Fri 09 May 2025 20:03:56 +0000
Manifest this update:     Fri 09 May 2025 19:58:54 +0000
Manifest next update:     Sat 10 May 2025 20:34:54 +0000
Files and hashes:         1: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: boH033iGSzqAov3Sbdhp48PgqZJPn0h922lfSzFYLso=)
                          2: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: k/wmSIsicW6bIEYBgom+wqdJSOY7iu6zbHSV4HudHUM=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b6:7a:02:be:a2:90:4a:89:c0:5d:2d:0e:95:62:d0:12:98:3d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
        Validity
            Not Before: May  9 19:58:54 2025 GMT
            Not After : May 10 20:34:54 2025 GMT
        Subject: CN=4D5859EB94D33BA41B0F68B0D390BBAB76A0F701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1b:a9:4b:57:8e:20:b4:d0:07:bb:40:24:29:
                    a9:26:dc:6c:1d:4f:24:35:d6:9c:70:79:46:b5:85:
                    81:90:91:0a:f1:ed:f8:45:8d:0e:82:d7:8f:a4:7d:
                    d5:94:e6:d6:8a:f1:17:96:39:17:47:4e:f0:19:e1:
                    c2:0f:06:89:5a:41:0c:c4:25:c8:90:2c:ae:b2:58:
                    3a:df:e7:19:20:f5:ad:9d:f9:2c:89:46:b9:e6:5b:
                    9d:de:2b:42:81:49:c4:7e:42:e5:17:e7:1a:af:54:
                    ae:d9:11:2a:9b:15:ba:3b:a4:e3:fb:15:bd:ae:a4:
                    cc:4a:f1:e4:d8:64:c6:42:9f:5e:fd:f8:5e:6c:af:
                    60:6d:5e:14:27:10:ae:06:a2:d8:1e:db:7b:24:b6:
                    35:96:ed:9c:da:24:c4:d4:eb:70:b6:6f:c2:a4:87:
                    82:89:2e:46:ff:2d:90:d4:05:fe:a5:01:d4:70:47:
                    d3:c4:c4:ee:08:7b:9c:43:25:dc:e1:33:2c:1d:3b:
                    32:a8:70:bb:05:d0:e8:90:d4:1c:e6:89:4f:5c:4d:
                    c4:98:cc:cb:2b:b8:b9:ae:7a:8e:3f:53:8c:d3:af:
                    22:24:28:2f:7a:68:43:d4:76:9f:02:b0:97:7c:0c:
                    ca:09:d0:24:b7:62:cb:54:d9:bb:84:94:ae:17:1f:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:58:59:EB:94:D3:3B:A4:1B:0F:68:B0:D3:90:BB:AB:76:A0:F7:01
            X509v3 Authority Key Identifier:
                keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:59:3e:ec:c6:eb:43:f6:7f:30:f7:5c:c6:f4:b4:b1:5d:55:
         f0:0f:9c:d4:a7:51:40:35:66:44:89:95:52:69:aa:2e:22:35:
         4e:62:3a:1c:8a:8f:c2:0a:f8:8c:6c:a0:af:35:ef:6b:dc:e1:
         86:e5:10:66:9e:64:dc:ea:4c:8f:07:c7:63:a3:29:8e:04:da:
         a6:a6:18:8c:df:ef:c7:1f:d3:fe:28:70:7a:d9:cd:7b:5a:8b:
         9b:ab:8b:1f:2a:06:f4:58:08:05:fd:4a:41:36:2b:cf:74:d9:
         04:e1:b0:68:2b:3a:a9:7e:5f:5b:ff:eb:74:54:e9:dd:fc:8e:
         d2:50:7d:d4:ee:aa:5e:12:e4:40:34:04:25:85:1a:0c:0c:37:
         f4:d3:07:3a:3c:dc:4a:c1:8c:ab:50:1c:5d:2c:93:a1:d2:46:
         d3:a1:d9:be:ce:e0:d1:31:c2:5f:7f:5d:97:82:0f:c7:0f:fc:
         df:92:06:3b:a9:4d:e8:38:d3:2d:8e:c5:db:72:93:8a:b6:1c:
         64:15:a6:dc:2d:55:a2:72:af:c5:79:ae:80:fc:40:89:75:2f:
         be:9e:72:80:43:b1:8f:10:ea:99:f1:aa:8e:a3:84:95:06:6d:
         4d:46:8a:0b:51:ca:8a:9c:fb:75:09:4e:ef:03:5c:ad:63:39:
         0f:53:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:38:49 2025 by rpki-client