Manifest

$ rpki-client -vvf repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.mft
File:                     2DC6464BC863F4B338647A68C390021651EE36B3.mft (raw, json)
Hash identifier:          607z6E/7bUkUyrIvcNjdM+6NUPH0aVtFgdr54DUkDwk=
Subject key identifier:   30:AE:56:71:B7:08:72:23:E6:C6:CF:76:B4:BB:90:CE:02:CD:11:E8
Authority key identifier: 2D:C6:46:4B:C8:63:F4:B3:38:64:7A:68:C3:90:02:16:51:EE:36:B3
Certificate issuer:       /CN=2DC6464BC863F4B338647A68C390021651EE36B3
Certificate serial:       5146A76502831C9552E09F6FC604BBC8DBDD880B
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/2DC6464BC863F4B338647A68C390021651EE36B3.cer
Subject info access:      rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.mft
Manifest number:          01EB
Signing time:             Mon 02 Jun 2025 07:54:59 +0000
Manifest this update:     Mon 02 Jun 2025 07:49:59 +0000
Manifest next update:     Tue 03 Jun 2025 08:36:59 +0000
Files and hashes:         1: 326131343a3763343a3a2f33322d3332203d3e2030.roa (hash: 7V1iZMl8i13k71FkID4gNa1ghH6jP6jRi2nTUfvgIEY=)
                          2: 2DC6464BC863F4B338647A68C390021651EE36B3.crl (hash: VijfEcQlW1R3a+oWf1l7NtDn3ymEU4g7inJ0nkJ3szY=)
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.crl
                          rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/2DC6464BC863F4B338647A68C390021651EE36B3.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Jun 2025 05:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:46:a7:65:02:83:1c:95:52:e0:9f:6f:c6:04:bb:c8:db:dd:88:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DC6464BC863F4B338647A68C390021651EE36B3
        Validity
            Not Before: Jun  2 07:49:59 2025 GMT
            Not After : Jun  3 08:36:59 2025 GMT
        Subject: CN=30AE5671B7087223E6C6CF76B4BB90CE02CD11E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:b1:32:b0:95:bf:7f:83:46:d7:68:a3:fa:
                    1e:ca:f3:b9:e6:c8:7e:e4:10:fb:e2:e9:a0:ae:c5:
                    d0:84:a4:a9:55:85:64:1b:dc:6e:2d:2b:2c:65:7a:
                    80:bf:4a:6b:ff:5c:99:ac:a6:3b:c7:47:85:70:7b:
                    a7:d2:cc:99:ea:7f:c6:d6:91:d2:ca:1c:77:a3:c3:
                    63:6c:e2:31:b1:c0:24:24:65:02:db:79:c6:4c:66:
                    4a:f8:a8:26:a1:1c:81:4f:75:e5:79:70:b4:5b:0d:
                    94:4b:bd:3f:b4:0c:93:7d:30:fa:34:94:c0:3d:cd:
                    1b:39:13:cc:c8:db:33:f4:11:b5:24:af:c4:cc:a9:
                    eb:e8:ae:0b:94:b0:b3:6b:e2:bc:9a:e3:e2:ee:a4:
                    fa:aa:48:af:03:55:52:d9:d7:c6:9f:df:99:54:66:
                    35:a2:d1:82:ad:61:4c:cc:50:4d:f0:90:f6:f2:45:
                    61:9a:c1:48:78:5d:a6:9e:90:86:75:e2:b1:2c:bc:
                    2a:20:b7:31:2a:57:9d:9e:5b:51:89:9a:60:90:34:
                    ca:98:ac:93:ab:81:2a:d5:ae:6b:0e:19:ac:40:ca:
                    c7:e9:f7:51:56:92:72:56:7a:cb:11:2a:da:a9:32:
                    f7:3c:8c:00:07:ae:8a:2a:bf:20:6f:0d:87:ef:92:
                    4a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AE:56:71:B7:08:72:23:E6:C6:CF:76:B4:BB:90:CE:02:CD:11:E8
            X509v3 Authority Key Identifier:
                keyid:2D:C6:46:4B:C8:63:F4:B3:38:64:7A:68:C3:90:02:16:51:EE:36:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/2DC6464BC863F4B338647A68C390021651EE36B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-nerdscave/0/2DC6464BC863F4B338647A68C390021651EE36B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:ef:27:bd:fd:69:37:dc:95:a6:5f:e8:00:97:77:94:21:
         93:55:fc:50:ea:77:8c:5e:2f:01:5d:ce:5b:65:0c:40:df:b5:
         cb:00:91:6d:51:e9:4a:b8:2e:3b:d9:67:ed:14:26:af:01:b5:
         9d:b2:fe:66:2d:42:ef:38:c2:33:df:b8:67:80:72:54:14:71:
         65:30:24:e9:ea:f0:58:ab:1f:bf:f8:e6:70:0e:82:ed:49:00:
         4a:25:43:b5:2f:df:f7:48:e4:5a:ac:bd:d8:a4:00:18:69:20:
         60:2b:1d:41:11:3e:78:3d:2a:4b:35:2a:a1:2c:d6:e5:36:9c:
         c6:bb:59:31:5d:35:5d:aa:d2:e8:b7:b0:00:05:e3:ec:85:28:
         05:12:0b:fa:79:86:ff:bb:d9:91:e4:4a:ca:dc:0e:b7:a9:23:
         b5:83:1a:26:f5:f2:2e:8a:d7:2c:30:b7:44:b6:1a:ab:45:7b:
         82:3d:58:46:45:0b:ea:1d:47:73:9b:bf:c2:b6:63:e4:25:84:
         08:ed:a7:ca:b2:cd:ab:08:01:cb:56:48:ff:16:ae:3b:b5:64:
         95:d8:ae:ea:37:ad:33:bb:00:3f:83:b4:0b:20:f6:cb:bc:82:
         69:4e:b0:56:09:f2:42:a6:bd:5e:49:88:7a:61:ef:a6:af:a9:
         1a:c4:01:4e
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUUUanZQKDHJVS4J9vxgS7yNvdiAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRDNjQ2NEJDODYzRjRCMzM4NjQ3QTY4QzM5MDAyMTY1
MUVFMzZCMzAeFw0yNTA2MDIwNzQ5NTlaFw0yNTA2MDMwODM2NTlaMDMxMTAvBgNV
BAMTKDMwQUU1NjcxQjcwODcyMjNFNkM2Q0Y3NkI0QkI5MENFMDJDRDExRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeeLEysJW/f4NG12ij+h7K87nm
yH7kEPvi6aCuxdCEpKlVhWQb3G4tKyxleoC/Smv/XJmspjvHR4Vwe6fSzJnqf8bW
kdLKHHejw2Ns4jGxwCQkZQLbecZMZkr4qCahHIFPdeV5cLRbDZRLvT+0DJN9MPo0
lMA9zRs5E8zI2zP0EbUkr8TMqevorguUsLNr4rya4+LupPqqSK8DVVLZ18af35lU
ZjWi0YKtYUzMUE3wkPbyRWGawUh4XaaekIZ14rEsvCogtzEqV52eW1GJmmCQNMqY
rJOrgSrVrmsOGaxAysfp91FWknJWessRKtqpMvc8jAAHrooqvyBvDYfvkkqZAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUMK5WcbcIciPmxs92tLuQzgLNEegwHwYDVR0j
BBgwFoAULcZGS8hj9LM4ZHpow5ACFlHuNrMwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vaW5maW5p
cm91dGUtbmVyZHNjYXZlLzAvMkRDNjQ2NEJDODYzRjRCMzM4NjQ3QTY4QzM5MDAy
MTY1MUVFMzZCMy5jcmwwcwYIKwYBBQUHAQEEZzBlMGMGCCsGAQUFBzAChldyc3lu
YzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvMkRDNjQ2NEJD
ODYzRjRCMzM4NjQ3QTY4QzM5MDAyMTY1MUVFMzZCMy5jZXIwfQYIKwYBBQUHAQsE
cTBvMG0GCCsGAQUFBzALhmFyc3luYzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL2lu
ZmluaXJvdXRlLW5lcmRzY2F2ZS8wLzJEQzY0NjRCQzg2M0Y0QjMzODY0N0E2OEMz
OTAwMjE2NTFFRTM2QjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG
MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ0e8nvf1pN9yVpl/oAJd3lCGTVfxQ
6neMXi8BXc5bZQxA37XLAJFtUelKuC472WftFCavAbWdsv5mLULvOMIz37hngHJU
FHFlMCTp6vBYqx+/+OZwDoLtSQBKJUO1L9/3SORarL3YpAAYaSBgKx1BET54PSpL
NSqhLNblNpzGu1kxXTVdqtLot7AABePshSgFEgv6eYb/u9mR5ErK3A63qSO1gxom
9fIuitcsMLdEthqrRXuCPVhGRQvqHUdzm7/CtmPkJYQI7afKss2rCAHLVkj/Fq47
tWSV2K7qN60zuwA/g7QLIPbLvIJpTrBWCfJCpr1eSYh6Ye+mr6kaxAFO
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:27:51 2025 by rpki-client