Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
File:                     C0877CC9EB843E8740AA80328E653F865C246295.mft (raw, json)
Hash identifier:          YCfKYUBaYUYeyJYNdtqfsCy8Eq5r5vxEA9FCmVZ6s+Y=
Subject key identifier:   36:51:34:10:A6:98:11:A4:FD:E0:EE:DA:7A:B8:F5:CB:77:FF:F9:0A
Authority key identifier: C0:87:7C:C9:EB:84:3E:87:40:AA:80:32:8E:65:3F:86:5C:24:62:95
Certificate issuer:       /CN=c0877cc9eb843e8740aa80328e653f865c246295
Certificate serial:       761659FF1E5933DE21782D4A5C1896E534499ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
Manifest number:          01A2
Signing time:             Fri 16 May 2025 10:19:41 +0000
Manifest this update:     Fri 16 May 2025 10:14:38 +0000
Manifest next update:     Sat 17 May 2025 10:58:38 +0000
Files and hashes:         1: C0877CC9EB843E8740AA80328E653F865C246295.crl (hash: KoT8dv8ppf8Z3quQJt34oc8Q7pm42F1DJWDTUcBb9OY=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 10:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:16:59:ff:1e:59:33:de:21:78:2d:4a:5c:18:96:e5:34:49:9a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0877cc9eb843e8740aa80328e653f865c246295
        Validity
            Not Before: May 16 10:14:38 2025 GMT
            Not After : May 17 10:58:38 2025 GMT
        Subject: CN=36513410A69811A4FDE0EEDA7AB8F5CB77FFF90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:b7:99:52:9a:08:df:4f:4f:cd:d9:1e:6d:
                    06:f4:bc:12:f6:22:b0:2d:fa:21:7d:d4:0c:75:a3:
                    2c:02:09:e7:42:6c:f7:53:49:59:6c:3d:31:5d:cc:
                    0d:ee:3a:9a:98:fb:55:ec:f8:0b:d7:72:45:b3:4b:
                    a1:40:3c:64:c8:72:fe:4d:83:e7:4b:f9:7d:f8:58:
                    99:9d:75:9a:98:2f:ac:14:dd:00:94:2a:0f:f4:8d:
                    37:44:45:99:9a:ba:20:23:92:49:cf:48:e3:5f:0c:
                    8e:35:6c:a8:ab:59:3e:61:bd:89:ed:2c:19:18:04:
                    c5:e5:d1:c5:ae:ef:f4:fc:57:7f:c4:75:d8:fd:c5:
                    bd:51:53:8c:e7:4f:64:3e:72:ec:b9:77:2a:be:b5:
                    8f:b2:e6:23:99:99:6a:4c:db:db:39:1b:7c:88:97:
                    6e:7c:d7:51:13:77:11:ec:c8:c3:87:86:bc:50:31:
                    7a:c4:f6:24:95:5f:e4:30:ab:27:21:64:ab:29:a7:
                    38:ca:43:f6:07:ea:ca:9b:dc:c4:bf:01:6d:51:bd:
                    8e:35:f5:46:ea:27:9d:aa:7a:a0:9a:b7:2d:5c:fe:
                    20:26:30:af:c5:cd:13:91:2c:23:ce:38:8f:14:19:
                    6b:be:47:6b:11:ea:c6:e6:3e:a0:34:5e:f6:96:0d:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:51:34:10:A6:98:11:A4:FD:E0:EE:DA:7A:B8:F5:CB:77:FF:F9:0A
            X509v3 Authority Key Identifier:
                keyid:C0:87:7C:C9:EB:84:3E:87:40:AA:80:32:8E:65:3F:86:5C:24:62:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f9:75:88:ab:2c:9f:18:64:0b:43:88:df:2e:6f:65:94:db:
         cd:ad:ea:9b:6a:a4:d5:d9:62:16:2b:3d:59:29:05:7d:cf:f9:
         f1:ba:ae:9d:c8:62:97:3b:df:63:66:b9:6d:cb:5b:ee:17:63:
         50:c0:0d:bf:7e:30:82:12:00:27:99:48:27:33:27:14:5b:bb:
         d5:37:02:42:65:90:b7:29:7d:23:5c:f6:96:4f:70:6c:d7:3b:
         af:45:90:b2:8b:57:ac:ce:93:18:37:1a:50:94:c9:a1:a8:b0:
         ae:d5:9c:f4:12:a2:e6:58:63:9b:3e:b8:f1:b1:9c:2e:ae:9c:
         89:c8:80:36:62:6e:76:d3:df:07:e9:8d:f1:84:ad:c8:49:1d:
         29:d9:a2:b7:b6:4d:c8:30:c2:c4:24:04:ec:ab:18:09:59:73:
         65:b9:85:f0:2d:04:a9:93:c9:85:51:72:e8:bf:eb:1e:d8:4e:
         5a:b1:26:6f:b9:71:34:5f:3e:6c:b5:40:a3:f5:4d:0d:df:69:
         52:58:6f:24:8b:3f:b1:f4:6d:de:4e:0e:47:bb:3f:1a:88:54:
         34:58:4e:48:e0:6f:31:a8:02:3d:19:03:be:19:80:71:96:59:
         a8:08:ce:ed:10:4f:84:0f:f1:61:08:3c:42:09:56:05:11:99:
         73:28:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:18:05 2025 by rpki-client