Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
File:                     941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft (raw, json)
Hash identifier:          Ju0RM3V7XQOYebCPHS+rOc28U1vrJw07gkYiUw9TOtY=
Subject key identifier:   72:42:53:C1:57:F8:92:4F:C2:67:25:BF:C9:81:AD:F3:EB:E7:75:CF
Authority key identifier: 94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8
Certificate issuer:       /CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
Certificate serial:       55FDFA9D1F6192F041E558480F8198307A98C478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
Manifest number:          017A
Signing time:             Thu 17 Apr 2025 08:40:28 +0000
Manifest this update:     Thu 17 Apr 2025 08:35:26 +0000
Manifest next update:     Fri 18 Apr 2025 10:44:26 +0000
Files and hashes:         1: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl (hash: IPzHTcbKYtVS2UKdFDtbTPGwKO8q8chp8hMseW+YTtA=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 10:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fd:fa:9d:1f:61:92:f0:41:e5:58:48:0f:81:98:30:7a:98:c4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941604040038cdc77f90a40fe277c4a0eb9e8df8
        Validity
            Not Before: Apr 17 08:35:26 2025 GMT
            Not After : Apr 18 10:44:26 2025 GMT
        Subject: CN=724253C157F8924FC26725BFC981ADF3EBE775CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:5f:21:b6:d8:0b:63:40:92:73:8b:7b:1c:
                    bb:a1:44:56:6a:d5:09:cd:09:fd:7a:af:c0:ba:12:
                    72:3c:53:f4:c1:9c:a2:52:b5:5f:f7:a6:0b:b8:43:
                    a1:dd:f0:b6:6b:48:5a:bb:ee:15:12:36:7d:eb:22:
                    e2:e6:ea:ad:8e:33:44:0e:0c:c9:2b:d6:26:96:d5:
                    73:3b:09:20:49:e6:0e:a1:e0:be:4a:09:14:ec:c7:
                    cb:61:06:ad:17:82:b6:c5:a7:10:bd:81:62:bb:b8:
                    d4:7d:20:f7:e6:6b:6f:83:82:a9:15:e0:42:6a:1b:
                    27:94:12:c4:c5:d4:d1:9f:55:05:df:49:61:d6:40:
                    a9:b3:0c:08:d2:b6:b7:3d:68:43:15:74:94:7b:2c:
                    4e:93:ad:3a:10:89:51:0a:2c:47:36:2d:c7:ab:82:
                    dc:b4:17:17:d3:54:e4:52:ca:92:bd:b9:41:df:d8:
                    e5:c3:c5:41:6e:71:43:48:d9:36:ec:fd:3b:94:15:
                    1b:9d:41:63:2b:5d:59:26:07:75:48:2a:8e:b9:a8:
                    97:ac:f6:63:6c:99:d1:e6:08:22:7c:55:43:1f:8d:
                    6f:17:ba:f7:b3:a2:87:ba:0e:43:47:52:5e:cd:86:
                    65:58:dd:f1:f2:10:31:f0:94:30:e3:0d:24:f0:8a:
                    cd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:42:53:C1:57:F8:92:4F:C2:67:25:BF:C9:81:AD:F3:EB:E7:75:CF
            X509v3 Authority Key Identifier:
                keyid:94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:95:89:be:ec:01:c2:22:a2:76:a7:19:bc:01:08:42:33:f6:
         35:b1:91:25:7d:9a:f0:17:74:b2:ea:76:c7:cd:0b:60:cf:84:
         ce:c7:fc:5a:a6:34:b4:2d:51:9f:bf:1c:2e:5f:2b:52:ab:5d:
         51:26:58:f2:d9:04:0f:5e:53:2f:bc:e2:06:a2:22:05:b0:fe:
         c7:d5:ad:bf:1c:d4:32:69:a3:f5:38:d8:9b:f9:20:d2:96:7f:
         91:28:43:82:1e:88:16:5c:fb:07:de:0d:ce:66:9a:86:b8:33:
         69:e0:01:2a:70:5f:ed:48:b7:15:ed:12:05:43:83:14:79:3b:
         81:d7:b9:0e:ec:dd:1c:d9:75:20:67:c8:18:b0:7e:9e:b7:51:
         07:4d:f9:48:35:32:45:06:54:e1:f8:24:27:57:5f:53:d0:27:
         7d:c5:fd:21:f2:36:4e:f0:96:32:d9:15:6e:c2:22:5a:52:d9:
         fd:99:c8:93:52:94:f3:6d:40:cc:b5:8f:54:da:c5:36:bb:6f:
         f9:39:df:b7:a1:d2:d6:d6:e4:8f:8e:23:37:fc:ac:1a:47:07:
         c5:f0:ee:94:e2:72:56:3e:2d:b0:4b:15:ff:3f:37:47:fe:6b:
         b2:fa:b1:18:d2:01:07:69:b7:2a:d4:ee:f0:d9:dd:04:e7:a0:
         06:98:4d:a6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUVf36nR9hkvBB5VhID4GYMHqYxHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQxNjA0MDQwMDM4Y2RjNzdmOTBhNDBmZTI3N2M0YTBl
YjllOGRmODAeFw0yNTA0MTcwODM1MjZaFw0yNTA0MTgxMDQ0MjZaMDMxMTAvBgNV
BAMTKDcyNDI1M0MxNTdGODkyNEZDMjY3MjVCRkM5ODFBREYzRUJFNzc1Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCV8httgLY0CSc4t7HLuhRFZq
1QnNCf16r8C6EnI8U/TBnKJStV/3pgu4Q6Hd8LZrSFq77hUSNn3rIuLm6q2OM0QO
DMkr1iaW1XM7CSBJ5g6h4L5KCRTsx8thBq0XgrbFpxC9gWK7uNR9IPfma2+DgqkV
4EJqGyeUEsTF1NGfVQXfSWHWQKmzDAjStrc9aEMVdJR7LE6TrToQiVEKLEc2Lcer
gty0FxfTVORSypK9uUHf2OXDxUFucUNI2Tbs/TuUFRudQWMrXVkmB3VIKo65qJes
9mNsmdHmCCJ8VUMfjW8Xuvezooe6DkNHUl7NhmVY3fHyEDHwlDDjDSTwis1PAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUckJTwVf4kk/CZyW/yYGt8+vndc8wHwYDVR0j
BBgwFoAUlBYEBAA4zcd/kKQP4nfEoOuejfgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzEzNjA5ZWRiNjMwMzRiZTBiY2Y1MzlmMmRlZWZiZjI5LzEv
OTQxNjA0MDQwMDM4Q0RDNzdGOTBBNDBGRTI3N0M0QTBFQjlFOERGOC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL2xCWUVCQUE0emNkX2tLUVA0bmZFb091ZWpmZy5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8xMzYwOWVkYjYzMDM0YmUw
YmNmNTM5ZjJkZWVmYmYyOS8xLzk0MTYwNDA0MDAzOENEQzc3RjkwQTQwRkUyNzdD
NEEwRUI5RThERjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQlYm+7AHCIqJ2pxm8AQhCM/Y1sZElfZrw
F3Sy6nbHzQtgz4TOx/xapjS0LVGfvxwuXytSq11RJljy2QQPXlMvvOIGoiIFsP7H
1a2/HNQyaaP1ONib+SDSln+RKEOCHogWXPsH3g3OZpqGuDNp4AEqcF/tSLcV7RIF
Q4MUeTuB17kO7N0c2XUgZ8gYsH6et1EHTflINTJFBlTh+CQnV19T0Cd9xf0h8jZO
8JYy2RVuwiJaUtn9mciTUpTzbUDMtY9U2sU2u2/5Od+3odLW1uSPjiM3/KwaRwfF
8O6U4nJWPi2wSxX/PzdH/muy+rEY0gEHabcq1O7w2d0E56AGmE2m
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:26 2025 by rpki-client