Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File:                     0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier:          qGlu62TlXLqGuPb++s2xb3ugLzC6fLgTXYgFrffplG0=
Subject key identifier:   D2:7B:84:3C:F4:1A:85:C2:58:38:FF:C9:19:51:88:10:6B:E8:11:83
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer:       /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial:       3F2D53C108047C74A39CECBE7E9A64774BE80F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number:          01BD
Signing time:             Sat 07 Jun 2025 08:46:42 +0000
Manifest this update:     Sat 07 Jun 2025 08:41:40 +0000
Manifest next update:     Sun 08 Jun 2025 09:03:40 +0000
Files and hashes:         1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: wU0fYX+BJ6TZRWx8E6igk6PLvo0c2JjaVJXUs0Firtc=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2d:53:c1:08:04:7c:74:a3:9c:ec:be:7e:9a:64:77:4b:e8:0f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
        Validity
            Not Before: Jun  7 08:41:40 2025 GMT
            Not After : Jun  8 09:03:40 2025 GMT
        Subject: CN=D27B843CF41A85C25838FFC9195188106BE81183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:03:83:43:16:0b:2a:ca:5c:db:6d:01:cb:fd:
                    2e:0b:cb:81:7e:58:b8:d8:e3:ca:2e:1a:98:29:87:
                    b7:0f:0a:0f:38:9c:3a:16:c8:1d:7f:84:85:44:4e:
                    0c:12:ea:8c:b0:b3:6c:42:46:a0:09:05:5c:5f:d3:
                    4e:fc:e3:47:bb:31:c3:d3:74:05:6d:6b:ba:54:e3:
                    ad:6b:35:78:12:f6:14:40:3c:10:56:8a:cb:30:90:
                    be:97:c7:91:64:d8:47:a1:35:f4:56:6e:33:77:53:
                    ce:f9:6c:05:71:92:22:f8:b1:27:fa:81:6a:68:54:
                    46:c2:28:c9:42:4c:96:77:53:29:9e:18:c9:ec:d4:
                    52:12:85:ac:be:94:b7:00:69:48:dd:a0:1f:c4:af:
                    e1:51:ef:42:cc:5f:ac:d5:46:43:fd:86:d3:49:29:
                    d9:5b:27:85:73:61:af:ab:f5:38:7a:92:c2:95:c0:
                    62:08:19:f8:b2:f9:6d:6a:b7:68:0b:6b:96:78:5d:
                    15:05:f5:b6:c9:02:20:23:71:a3:4f:66:be:c0:18:
                    1d:59:69:90:a2:d8:d4:c3:b6:81:fc:04:f6:1d:89:
                    c4:9e:30:1d:b2:53:7f:6d:96:ce:d2:a6:ec:22:e2:
                    ea:2b:30:64:8b:f7:2d:ae:60:d7:cd:6e:81:b2:c6:
                    7c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7B:84:3C:F4:1A:85:C2:58:38:FF:C9:19:51:88:10:6B:E8:11:83
            X509v3 Authority Key Identifier:
                keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:92:3c:70:4b:1f:16:5b:7c:33:6e:7f:7c:ed:aa:49:48:aa:
         4f:94:65:a0:8a:a5:83:17:c3:1e:45:49:1c:99:71:b8:c8:5c:
         22:72:58:aa:fc:19:de:b7:b0:2d:46:d7:da:cc:3f:22:28:ad:
         b0:d7:10:bb:88:dc:28:ee:07:01:a2:a0:b3:cf:f8:92:39:b8:
         84:b2:ea:67:d6:5b:db:f5:75:b0:4c:2a:2e:69:14:ec:5b:e6:
         7f:38:14:c6:f2:ca:66:31:80:e7:56:f2:e9:d7:fe:39:46:96:
         14:4a:9f:1f:66:13:c1:d3:e2:98:67:fd:d3:9e:5c:a9:3a:2d:
         c8:b2:14:d3:51:20:a3:e2:f2:d9:fa:a6:b4:98:3c:cf:68:a3:
         90:0d:28:2c:0b:29:98:e9:72:c6:09:14:13:ae:dc:82:67:c3:
         8d:d9:80:d4:57:c9:67:c2:43:f1:7f:8d:bd:e2:a1:3e:41:dc:
         77:db:e9:1e:c0:85:ee:c6:9a:01:47:f0:91:af:aa:ee:ea:7b:
         18:0c:a3:29:d7:c4:eb:45:42:61:c8:af:fb:a1:81:73:57:44:
         ad:bb:56:9f:3f:e3:74:a0:4c:67:d5:2a:34:c0:e7:d0:e5:20:
         54:a3:43:39:c7:85:1e:74:17:9f:91:69:96:44:a1:f8:ea:29:
         c0:18:56:74
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUPy1TwQgEfHSjnOy+fppkd0voD0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYyM2JiODc0MzExNmQ4NmIxM2I5YmQ5ZTUzNDAyMzk4
YjdhMWVlMDAeFw0yNTA2MDcwODQxNDBaFw0yNTA2MDgwOTAzNDBaMDMxMTAvBgNV
BAMTKEQyN0I4NDNDRjQxQTg1QzI1ODM4RkZDOTE5NTE4ODEwNkJFODExODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkA4NDFgsqylzbbQHL/S4Ly4F+
WLjY48ouGpgph7cPCg84nDoWyB1/hIVETgwS6oyws2xCRqAJBVxf007840e7McPT
dAVta7pU461rNXgS9hRAPBBWisswkL6Xx5Fk2EehNfRWbjN3U875bAVxkiL4sSf6
gWpoVEbCKMlCTJZ3UymeGMns1FIShay+lLcAaUjdoB/Er+FR70LMX6zVRkP9htNJ
KdlbJ4VzYa+r9Th6ksKVwGIIGfiy+W1qt2gLa5Z4XRUF9bbJAiAjcaNPZr7AGB1Z
aZCi2NTDtoH8BPYdicSeMB2yU39tls7Spuwi4uorMGSL9y2uYNfNboGyxnzrAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU0nuEPPQahcJYOP/JGVGIEGvoEYMwHwYDVR0j
BBgwFoAUBiO7h0MRbYaxO5vZ5TQCOYt6HuAwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzEv
MDYyM0JCODc0MzExNkQ4NkIxM0I5QkQ5RTUzNDAyMzk4QjdBMUVFMC5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0JpTzdoME1SYllheE81dlo1VFFDT1l0Nkh1QS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV80ZDVjMzA5YWUxMWE0NDll
YTg0MDdhY2UxZjc5MDFmMC8xLzA2MjNCQjg3NDMxMTZEODZCMTNCOUJEOUU1MzQw
MjM5OEI3QTFFRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYkjxwSx8WW3wzbn987apJSKpPlGWgiqWD
F8MeRUkcmXG4yFwicliq/Bnet7AtRtfazD8iKK2w1xC7iNwo7gcBoqCzz/iSObiE
supn1lvb9XWwTCouaRTsW+Z/OBTG8spmMYDnVvLp1/45RpYUSp8fZhPB0+KYZ/3T
nlypOi3IshTTUSCj4vLZ+qa0mDzPaKOQDSgsCymY6XLGCRQTrtyCZ8ON2YDUV8ln
wkPxf4294qE+Qdx32+kewIXuxpoBR/CRr6ru6nsYDKMp18TrRUJhyK/7oYFzV0St
u1afP+N0oExn1So0wOfQ5SBUo0M5x4UedBefkWmWRKH46inAGFZ0
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:01:15 2025 by rpki-client