Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
File:                     B692ED2FEFFD044C6DD7F20D70952648400A7744.mft (raw, json)
Hash identifier:          ITgRBiGlL8j58+jGGtslOsnncwAKDpIb82EaUMimPes=
Subject key identifier:   5E:AA:04:69:04:6A:90:7D:FD:F0:E0:47:75:AE:C2:6B:D4:63:03:EF
Authority key identifier: B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44
Certificate issuer:       /CN=b692ed2feffd044c6dd7f20d70952648400a7744
Certificate serial:       58A2759F61804D23A73ED32D108E20C2F18F6FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
Manifest number:          0195
Signing time:             Mon 05 May 2025 23:46:03 +0000
Manifest this update:     Mon 05 May 2025 23:41:01 +0000
Manifest next update:     Wed 07 May 2025 01:56:01 +0000
Files and hashes:         1: 323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa (hash: UscZqBeVa62wChbGnDHRsAbV/SU7srPAd1Cujllujfo=)
                          2: B692ED2FEFFD044C6DD7F20D70952648400A7744.crl (hash: yhlzZC/wUQIkHscjeNtY0DZA1n3XCrY/EjtJifFhYgc=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 01:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a2:75:9f:61:80:4d:23:a7:3e:d3:2d:10:8e:20:c2:f1:8f:6f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b692ed2feffd044c6dd7f20d70952648400a7744
        Validity
            Not Before: May  5 23:41:01 2025 GMT
            Not After : May  7 01:56:01 2025 GMT
        Subject: CN=5EAA0469046A907DFDF0E04775AEC26BD46303EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:fc:80:5b:31:83:5c:a8:55:5e:67:78:38:
                    78:3d:81:c8:5c:a7:f3:51:ae:74:b1:70:46:7c:a9:
                    29:f9:f2:1b:9b:86:c9:8f:24:c0:9f:7d:9e:88:20:
                    18:7a:7c:cd:36:1a:7a:dd:74:0b:38:d1:b3:cb:92:
                    8c:e1:a4:e6:07:9e:29:ef:0e:eb:5a:49:2b:4d:b6:
                    4b:f6:9b:6e:c8:97:cb:69:a9:0a:bc:b4:69:7a:77:
                    28:fe:7c:f4:d0:84:f4:2a:30:3a:c9:31:f1:56:bd:
                    08:d9:b5:80:0e:3d:2e:a6:4d:c8:71:32:91:18:17:
                    38:72:0f:9d:e3:25:08:da:e6:6b:f2:99:a1:c6:01:
                    71:25:1f:64:e6:a9:d6:1b:43:1d:ca:4e:40:ed:d4:
                    21:6e:1b:3c:b2:27:0c:26:cf:a3:ee:4a:d6:58:65:
                    0a:87:59:99:1a:a1:7f:cb:3e:82:3d:e1:cb:97:cc:
                    34:c4:17:28:8a:31:87:c3:5c:73:eb:2c:8e:72:5a:
                    a3:31:09:4c:29:30:a6:8b:95:98:01:f5:00:dc:46:
                    ca:cb:df:38:f4:58:3a:07:ea:18:42:db:2c:2d:ff:
                    65:21:35:5a:01:de:77:11:92:ab:17:e4:b7:90:36:
                    b5:c7:47:78:34:f2:a5:80:57:8d:52:69:76:55:41:
                    ce:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AA:04:69:04:6A:90:7D:FD:F0:E0:47:75:AE:C2:6B:D4:63:03:EF
            X509v3 Authority Key Identifier:
                keyid:B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:18:a4:05:8e:da:25:d1:af:9c:0c:70:1d:65:f2:3c:35:cc:
         fd:61:23:f8:98:4b:49:e4:41:62:3a:4b:12:53:cb:bf:e7:a7:
         ef:41:16:88:a0:eb:ad:97:37:7a:8a:38:75:55:d4:8c:68:83:
         62:92:d2:16:81:89:ef:ce:2b:85:8c:81:e8:59:28:ec:96:ff:
         0a:44:0c:fa:52:68:63:99:1b:ba:2f:7c:4e:27:a2:7f:51:0d:
         5f:53:e6:6f:a2:a6:09:af:7d:0b:f6:19:eb:71:08:c0:7e:04:
         89:62:d3:06:ff:1d:1e:0a:7d:25:a2:93:2a:31:10:28:44:53:
         00:92:42:95:25:70:28:60:48:e4:e8:f6:81:e3:a0:40:fa:d1:
         6b:3b:aa:dd:fb:3c:38:22:3f:2f:c9:7b:b7:d5:a0:8e:d7:a3:
         b6:34:6a:d0:8f:7b:da:3f:d3:5f:a9:fe:6a:4e:00:c4:cc:e9:
         d5:9b:aa:71:56:3a:4b:52:14:1f:8b:a8:1f:55:86:29:79:2c:
         06:20:f2:89:a5:6d:87:3d:43:f9:88:27:33:5d:fb:e0:18:01:
         58:bb:23:7a:92:b5:e9:3b:43:40:e8:c7:79:f1:56:13:1c:fe:
         f8:3e:09:b1:b7:14:8e:fa:fa:73:c3:e9:2f:65:8e:c3:bf:58:
         ab:64:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:47:08 2025 by rpki-client