Manifest

$ rpki-client -vvf rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
File:                     C8623AA6C30FA8E058243708F5672D7960E52389.mft (raw, json)
Hash identifier:          ZQ+jnDJziD2+8mHr+fq8SG1D0e2N5ZC1ABNS1oTiXP0=
Subject key identifier:   DB:BF:B9:6E:8C:A9:81:F6:94:B1:3B:52:C3:E5:37:2B:EF:23:60:F7
Authority key identifier: C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89
Certificate issuer:       /CN=C8623AA6C30FA8E058243708F5672D7960E52389
Certificate serial:       65BB2CB191574EAEF49DA0E6435D0FAA68328992
Authority info access:    rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
Subject info access:      rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
Manifest number:          01DC
Signing time:             Fri 06 Jun 2025 22:47:24 +0000
Manifest this update:     Fri 06 Jun 2025 22:42:24 +0000
Manifest next update:     Sat 07 Jun 2025 23:57:24 +0000
Files and hashes:         1: C8623AA6C30FA8E058243708F5672D7960E52389.crl (hash: RdqL/vbrl9D129uhZ28V278oG77vcvQgEkWlWOkp3fo=)
Validation:               OK
Signature path:           rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl
                          rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.crl
                          rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/7ACA2B768DEF8BB9544468ED5F726256C364336E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/esordo3vi7lURGjtX3JiVsNkM24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:bb:2c:b1:91:57:4e:ae:f4:9d:a0:e6:43:5d:0f:aa:68:32:89:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8623AA6C30FA8E058243708F5672D7960E52389
        Validity
            Not Before: Jun  6 22:42:24 2025 GMT
            Not After : Jun  7 23:57:24 2025 GMT
        Subject: CN=DBBFB96E8CA981F694B13B52C3E5372BEF2360F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:49:a0:fd:5c:3f:a3:b6:a7:43:84:27:e0:
                    bb:91:b2:96:04:6b:f1:ff:3b:05:12:09:f7:2c:f6:
                    51:1d:1b:03:13:ed:8a:15:1b:77:84:b0:ee:a7:5e:
                    34:28:4c:5c:5e:9e:c7:31:f7:72:f4:17:aa:04:10:
                    c8:5a:a6:ab:f8:b4:48:1c:ef:50:0b:b6:6d:35:e7:
                    de:72:81:ed:17:e7:bd:cb:de:50:e6:d5:db:11:ef:
                    6e:9b:21:b4:95:3c:d1:a0:f4:1a:04:3d:f2:2b:d6:
                    2f:bb:4c:ae:4e:ed:08:08:91:29:ee:e7:03:5a:b2:
                    23:8e:2f:90:86:2d:42:cd:bc:2b:a0:e9:aa:66:da:
                    fd:45:99:8d:e7:94:9d:7d:e3:51:b2:6c:8f:c1:d8:
                    4b:d5:de:ec:9c:08:be:f5:2b:10:45:70:82:61:55:
                    65:af:78:db:5e:b8:47:e7:c4:80:f5:15:24:59:01:
                    07:17:94:af:1f:a9:75:2d:44:17:da:d0:6b:d7:1b:
                    93:dd:97:97:1d:13:51:71:81:ac:04:ec:a5:88:a7:
                    67:7e:ea:b6:c3:17:16:10:70:fc:dd:c0:bd:44:ba:
                    6c:20:cd:36:ff:05:14:4f:ef:70:69:13:84:52:4c:
                    49:71:4b:50:b9:ec:23:21:be:1f:be:8f:70:e5:76:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BF:B9:6E:8C:A9:81:F6:94:B1:3B:52:C3:E5:37:2B:EF:23:60:F7
            X509v3 Authority Key Identifier:
                keyid:C8:62:3A:A6:C3:0F:A8:E0:58:24:37:08:F5:67:2D:79:60:E5:23:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/C8623AA6C30FA8E058243708F5672D7960E52389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rov-measurements.nlnetlabs.net/repo/rov-measurements/3/C8623AA6C30FA8E058243708F5672D7960E52389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:37:a6:0d:5f:94:98:fa:86:76:ba:70:ab:ee:9c:00:34:67:
         cf:2e:fc:19:6b:83:bf:a3:41:a8:ed:60:bf:4e:09:62:8f:16:
         31:54:64:2c:d1:44:e5:9e:2f:5e:a9:b3:b4:de:b8:28:59:f8:
         d5:41:52:b4:78:6f:d2:fc:86:cf:86:4a:32:c0:54:c9:8f:de:
         db:e1:be:5f:e4:4c:43:78:2c:82:ff:cb:d2:52:bd:bd:1d:80:
         3b:a3:0c:75:a4:b9:62:95:f2:32:2a:9f:81:5f:46:92:fa:20:
         b9:8b:24:1f:f6:1f:64:4b:2b:2e:82:de:a9:ba:49:45:40:fa:
         cb:17:f7:33:d3:f8:5c:4f:57:b6:31:38:6d:db:9a:87:1e:8c:
         8d:5b:93:e7:6f:23:d7:0b:85:69:ed:e7:07:e3:39:47:09:fc:
         aa:70:ba:c4:bc:2f:27:a3:7e:5c:8c:f2:0d:06:56:f9:6f:17:
         a3:51:fb:17:bc:51:96:8e:cd:27:de:cb:40:fd:67:b5:07:8f:
         c7:91:1a:ff:fd:1d:27:a7:f5:7e:73:56:38:61:69:e9:72:a2:
         ff:be:12:41:19:f6:f6:1f:07:d1:04:7c:2e:1d:64:8f:15:cb:
         f3:35:67:4e:81:4a:63:78:1c:5b:9c:fa:24:91:67:94:f2:7b:
         2b:27:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:10:57 2025 by rpki-client