Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
File:                     6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft (raw, json)
Hash identifier:          znO23YmpqA2YjEq7gvHtJPwozuUAbHIMTSdlDZHl4U8=
Subject key identifier:   AD:46:C9:6C:77:A9:98:44:B8:04:AD:94:27:90:2A:66:42:D4:E9:92
Authority key identifier: 6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09
Certificate issuer:       /CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
Certificate serial:       202830B91B228E21847EE50E33433CCF0CB69EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
Manifest number:          0197
Signing time:             Fri 09 May 2025 12:50:03 +0000
Manifest this update:     Fri 09 May 2025 12:45:00 +0000
Manifest next update:     Sat 10 May 2025 14:50:00 +0000
Files and hashes:         1: 6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl (hash: vwJcfVBErW8MIZvA3g6rbYBBvKshT8q7Ana32zGCPRk=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 14:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:28:30:b9:1b:22:8e:21:84:7e:e5:0e:33:43:3c:cf:0c:b6:9e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd023fb3f94c8c2fa23cab8019466fa1a7f5109
        Validity
            Not Before: May  9 12:45:00 2025 GMT
            Not After : May 10 14:50:00 2025 GMT
        Subject: CN=AD46C96C77A99844B804AD9427902A6642D4E992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2a:dc:39:82:5d:2a:e3:a3:9e:63:ee:2f:e2:
                    dc:68:3a:ca:65:5f:2a:37:69:c4:d0:4a:34:88:ea:
                    54:ba:6d:93:d3:bc:d2:68:7e:57:35:e2:c2:fe:e1:
                    40:84:fd:fd:a7:f3:22:bb:0d:fb:9d:8b:eb:7d:aa:
                    b1:a4:9c:49:c6:0a:15:67:99:0a:bd:6b:64:4d:22:
                    aa:43:7e:82:be:b4:4e:51:18:c7:ae:33:d4:c2:77:
                    f9:dc:c8:d6:ca:54:53:f3:81:08:ba:88:ff:61:66:
                    e7:db:de:1d:d3:f2:a2:d7:44:3b:53:f7:30:27:86:
                    dd:5a:58:a2:6e:61:cb:27:82:22:2c:db:54:7c:7b:
                    b8:81:39:ab:8c:a0:d5:fb:94:93:6e:be:9b:57:90:
                    d8:48:94:77:22:bc:61:c6:2d:5d:f3:64:97:ba:95:
                    6e:67:23:a5:17:dc:9f:5a:e0:13:27:db:4c:8c:0f:
                    21:90:a6:4c:54:03:56:a1:14:0c:a6:21:42:80:0f:
                    ec:fd:a3:19:53:cb:3b:8e:57:e2:d2:32:63:b6:91:
                    82:14:eb:ad:3e:b0:ad:b6:f4:0e:8a:e7:4a:72:d7:
                    e7:9c:11:dc:ad:a5:3a:18:05:d6:c2:bb:38:cc:ec:
                    b8:fc:5d:6b:ee:02:b6:c1:a3:d8:a9:0a:8b:c2:38:
                    c9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:46:C9:6C:77:A9:98:44:B8:04:AD:94:27:90:2A:66:42:D4:E9:92
            X509v3 Authority Key Identifier:
                keyid:6D:D0:23:FB:3F:94:C8:C2:FA:23:CA:B8:01:94:66:FA:1A:7F:51:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdAj-z-UyML6I8q4AZRm-hp_UQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/1/6DD023FB3F94C8C2FA23CAB8019466FA1A7F5109.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:02:1d:57:49:e5:26:56:57:31:c3:80:e0:5b:2d:99:18:7a:
         f8:27:de:51:f1:a8:f0:37:6b:b5:65:2a:31:02:9f:88:00:e1:
         b2:54:4e:9e:ae:bc:ec:81:31:82:0f:bf:6e:24:74:44:48:d9:
         03:b1:73:6a:2e:3a:1c:8f:4e:43:a6:7d:e3:31:97:ad:1a:fc:
         8b:02:19:df:d1:5e:9d:10:06:e9:83:b3:2d:b6:0e:00:77:62:
         1b:36:e8:64:e4:9d:d0:86:8e:d5:1e:b1:6a:ab:45:30:96:8f:
         d6:cc:91:5f:72:49:ba:a3:d9:f8:70:03:98:f0:43:df:cb:08:
         b3:8e:ee:5d:95:c6:36:fd:21:35:d1:61:06:35:7f:c7:ba:73:
         44:fe:f9:98:c8:f1:c0:c7:37:9b:d8:eb:70:94:04:9f:b9:70:
         f9:89:6c:d2:59:a6:eb:b9:f7:56:45:d2:aa:a0:03:da:c0:8f:
         ae:0f:ce:c0:a5:f2:41:87:74:6e:55:1e:1f:8f:5e:c7:5d:2d:
         01:e5:ff:c6:79:0c:c3:a0:4c:b0:01:0e:92:35:8a:95:46:e7:
         72:41:25:d9:92:17:fb:7e:a1:b5:93:a6:8d:91:df:00:98:06:
         e7:f5:34:d7:64:0d:dd:37:78:78:ec:02:01:1c:b2:43:3d:7b:
         12:b5:9e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:05:16 2025 by rpki-client