Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
File:                     B70DB680698C8AC70A7CB7CA607541E554249317.mft (raw, json)
Hash identifier:          EZpJzLRX17Cb62vN8B8En/WrL0Liy7m9HXVfBIcF8iM=
Subject key identifier:   43:B2:CB:76:29:00:DB:CC:A5:22:0A:A0:35:B3:56:C0:F0:7A:17:4E
Authority key identifier: B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
Certificate issuer:       /CN=b70db680698c8ac70a7cb7ca607541e554249317
Certificate serial:       6EAC6A617002E2B69959480E0C48CF2661D16611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
Manifest number:          0198
Signing time:             Sat 10 May 2025 21:02:02 +0000
Manifest this update:     Sat 10 May 2025 20:57:00 +0000
Manifest next update:     Sun 11 May 2025 21:36:00 +0000
Files and hashes:         1: B70DB680698C8AC70A7CB7CA607541E554249317.crl (hash: aVCwxnO153rTiCngl3kANMzXxu0x1jQTLy6bZPQSdm8=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ac:6a:61:70:02:e2:b6:99:59:48:0e:0c:48:cf:26:61:d1:66:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70db680698c8ac70a7cb7ca607541e554249317
        Validity
            Not Before: May 10 20:57:00 2025 GMT
            Not After : May 11 21:36:00 2025 GMT
        Subject: CN=43B2CB762900DBCCA5220AA035B356C0F07A174E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e0:53:6c:41:56:4f:72:9a:e5:91:3f:9d:73:
                    2f:e4:1d:46:68:8a:71:85:09:c9:54:04:97:26:34:
                    76:73:ea:38:18:1b:43:17:f1:9e:41:19:fc:e4:81:
                    c5:51:19:23:ba:01:ba:0a:28:1c:37:6f:79:3a:92:
                    be:29:f3:25:7c:72:31:48:8b:c5:8e:1f:f3:9b:d8:
                    ab:0d:bf:01:9f:83:d1:a4:4c:e2:86:f1:54:f9:f0:
                    37:98:83:a6:0f:5f:28:ee:e9:29:44:a5:30:8c:b6:
                    a2:c2:09:ce:1e:40:75:2b:0c:35:85:8a:88:4b:50:
                    5b:15:07:6d:8f:1b:7c:73:c3:11:67:40:c2:a8:00:
                    6f:2b:53:01:31:56:b6:8e:72:d5:e1:96:6f:08:09:
                    6e:46:f2:8d:48:3e:11:59:2b:c1:0e:99:7b:c0:c1:
                    25:23:6d:32:c1:17:bd:c3:7e:8e:a2:cc:0d:2d:43:
                    34:d5:40:65:88:88:ba:52:49:49:af:db:74:b3:2d:
                    93:47:fd:46:4a:22:bd:f8:cb:01:63:02:cb:03:6d:
                    32:4e:a1:65:23:b7:8b:20:85:58:66:4e:35:eb:a6:
                    30:1e:44:07:53:49:6e:38:7b:dc:60:a4:ee:26:3a:
                    c8:8a:21:b7:58:3c:b5:16:3b:73:eb:df:48:29:34:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B2:CB:76:29:00:DB:CC:A5:22:0A:A0:35:B3:56:C0:F0:7A:17:4E
            X509v3 Authority Key Identifier:
                keyid:B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:8e:25:4a:48:2d:18:7e:b6:6c:73:6e:6f:19:16:3a:49:b4:
         8b:9b:25:2e:32:cc:87:ea:bf:cd:de:b0:03:fc:1a:27:46:79:
         c5:85:20:42:6f:8e:0e:9c:0d:aa:04:6d:9a:47:7e:3f:0f:d5:
         d9:78:98:a2:a7:87:40:7e:c5:35:5b:3d:af:62:e9:e7:e0:76:
         e6:40:56:da:65:83:8f:c9:38:2b:ad:1b:fd:03:a9:c0:c4:fc:
         c7:b6:31:3b:96:54:21:10:f2:a4:80:3c:1b:1f:40:fa:1c:1e:
         86:f1:2a:43:8e:ab:28:e9:b9:f0:83:83:dc:72:b7:f4:23:2e:
         4b:ca:1c:12:e6:ea:b8:65:07:33:78:39:29:e2:42:db:8d:4c:
         46:cb:f1:08:d2:35:79:22:84:b2:21:64:4b:b1:22:87:4c:d9:
         97:12:39:d2:5d:ee:0d:8c:b8:96:aa:cb:26:af:15:2d:e8:f2:
         eb:b3:62:c1:c1:64:ff:75:9f:d8:47:0e:77:23:52:b5:9d:dd:
         18:c6:44:9e:e5:cb:e9:f5:ce:61:6f:e0:34:13:e5:95:7f:6a:
         e0:eb:e1:3f:53:67:cd:6b:18:3e:89:30:96:f1:d3:32:6b:b8:
         25:10:39:9f:ab:d3:04:01:b8:88:5c:81:1e:a1:ac:ff:b6:4c:
         54:fd:b7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:33:56 2025 by rpki-client