Manifest

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft
File:                     0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft (raw, json)
Hash identifier:          gqQjpZwpyTyAiSq34rSlzBLiMDN83NRiw6vXAHmvErs=
Subject key identifier:   40:F6:F0:53:FA:C1:54:D8:D0:AD:C0:F9:B4:84:F2:64:F2:1C:00:B9
Authority key identifier: 0D:3C:DF:45:C9:A0:76:D4:C7:A4:46:02:50:B0:D0:A1:67:F3:00:A2
Certificate issuer:       /CN=0d3cdf45c9a076d4c7a4460250b0d0a167f300a2
Certificate serial:       7DBCE5BF5F30A5A22CBDAA0DBCBE1973F9AAF1B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTzfRcmgdtTHpEYCULDQoWfzAKI.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft
Manifest number:          0514
Signing time:             Mon 05 May 2025 14:34:51 +0000
Manifest this update:     Mon 05 May 2025 14:29:51 +0000
Manifest next update:     Tue 06 May 2025 17:24:51 +0000
Files and hashes:         1: AS50224.asa (hash: NMIc3WN9ABE2/WqNz1rHqiHyzkplK0mvCUD4wfMA7lI=)
                          2: 0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.crl (hash: MT2PfYPgs1NdIhqmXRQXRs839filR0XBqJKgGcdEnyE=)
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.crl
                          rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DTzfRcmgdtTHpEYCULDQoWfzAKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 17:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bc:e5:bf:5f:30:a5:a2:2c:bd:aa:0d:bc:be:19:73:f9:aa:f1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3cdf45c9a076d4c7a4460250b0d0a167f300a2
        Validity
            Not Before: May  5 14:29:51 2025 GMT
            Not After : May  6 17:24:51 2025 GMT
        Subject: CN=40F6F053FAC154D8D0ADC0F9B484F264F21C00B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:76:67:1e:c6:a0:1e:07:41:9e:5c:18:74:8b:
                    ac:30:8c:91:bb:19:14:8e:72:d4:1a:92:f1:fc:c2:
                    ff:8e:1c:d1:95:15:7f:09:b7:78:dd:c9:28:3a:6f:
                    d2:9a:21:36:42:a1:be:39:fd:51:53:d0:f9:d3:80:
                    ec:75:86:1b:5d:fc:76:e7:46:62:31:4a:73:86:41:
                    32:d2:3d:35:71:85:2e:09:0a:9f:6c:1e:d2:81:ce:
                    59:ca:f3:4f:62:49:7c:80:42:91:2e:63:f8:ce:82:
                    07:51:12:98:64:40:32:58:7b:3a:39:50:92:8d:50:
                    fa:0e:5a:91:49:09:15:65:b8:5b:0d:48:9b:f7:b2:
                    6f:b2:91:fc:7b:63:0b:99:57:64:bc:cb:d9:30:73:
                    1b:8b:e8:b3:7c:57:24:15:56:ce:0f:28:37:6c:de:
                    67:63:de:10:b0:56:01:00:e9:c4:e0:39:90:1e:9d:
                    c5:68:35:9a:ad:48:93:d1:6d:a4:20:f7:a6:5f:63:
                    74:f1:43:3f:21:49:1f:b1:87:f9:2e:50:88:ad:23:
                    61:70:68:b8:ed:84:34:a9:63:7a:24:b2:69:04:50:
                    2c:18:51:33:ae:da:38:67:73:09:c7:36:68:5e:28:
                    e0:50:bc:38:ea:27:98:1c:2c:3e:34:8b:f1:b8:a9:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F6:F0:53:FA:C1:54:D8:D0:AD:C0:F9:B4:84:F2:64:F2:1C:00:B9
            X509v3 Authority Key Identifier:
                keyid:0D:3C:DF:45:C9:A0:76:D4:C7:A4:46:02:50:B0:D0:A1:67:F3:00:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTzfRcmgdtTHpEYCULDQoWfzAKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d0:0e:0a:44:9d:84:85:cf:8a:02:f9:26:4c:fa:f6:38:c3:
         6f:da:5e:64:e5:94:b7:84:4a:af:93:91:be:25:07:d0:98:06:
         09:34:ce:92:fc:2b:b0:2f:08:ec:8c:d1:3c:ff:0c:43:b6:28:
         27:bf:93:4f:b9:78:d9:38:da:ed:92:92:a6:31:81:6c:38:82:
         39:3a:a6:71:d1:e7:0e:69:40:6f:16:e9:20:1e:eb:98:18:73:
         68:48:d8:81:cc:74:c8:4e:60:62:e4:50:32:b3:6b:d7:d1:03:
         e3:88:51:59:65:7e:a1:32:1e:2b:97:8a:ae:d6:b5:ab:2c:e0:
         24:59:da:41:05:a9:de:78:2c:aa:34:41:88:c6:9a:5a:b4:52:
         76:00:60:c5:c6:aa:54:ee:2a:60:e3:49:0d:09:51:32:be:b1:
         8a:6c:07:c0:6f:eb:1b:3b:ac:d0:f1:0f:95:d3:b5:6b:d6:e5:
         80:82:b1:1d:54:2e:cb:22:99:53:b6:23:e1:a6:0d:0b:52:c9:
         59:d4:4c:8b:83:03:c4:bd:16:8b:eb:99:8e:a2:94:4d:0e:05:
         72:53:b1:65:b9:22:a9:2a:92:c4:f7:a4:c5:e3:ff:7e:6f:e5:
         68:26:90:9e:59:e7:d4:2e:d9:50:45:b9:ef:80:19:6c:90:9a:
         a7:3d:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:56:09 2025 by rpki-client