Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
File:                     6482EA67DB858D1440DD67B955223E4341BA4E97.mft (raw, json)
Hash identifier:          fRlGGoeTopIgWrWxFH6fGzmibOY2kXqiMVF53rRcAWE=
Subject key identifier:   31:06:7B:7E:A5:45:EF:24:08:0C:28:38:F9:FE:BF:8E:38:FE:7A:04
Authority key identifier: 64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
Certificate issuer:       /CN=6482EA67DB858D1440DD67B955223E4341BA4E97
Certificate serial:       4CA1E4596189F21E5B805FBAC1B5DD494DA64486
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
Manifest number:          016C
Signing time:             Fri 04 Apr 2025 14:12:10 +0000
Manifest this update:     Fri 04 Apr 2025 14:07:08 +0000
Manifest next update:     Sat 05 Apr 2025 16:57:08 +0000
Files and hashes:         1: 326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa (hash: 6LW9GY7ytZRKBljhKsr5USrIitQbRAKHkl3957Ar/Zo=)
                          2: 6482EA67DB858D1440DD67B955223E4341BA4E97.crl (hash: +Vt8oPYfX1UdEcMrA5+OVaKcecYI5DESwMeqofWnPCo=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a1:e4:59:61:89:f2:1e:5b:80:5f:ba:c1:b5:dd:49:4d:a6:44:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6482EA67DB858D1440DD67B955223E4341BA4E97
        Validity
            Not Before: Apr  4 14:07:08 2025 GMT
            Not After : Apr  5 16:57:08 2025 GMT
        Subject: CN=31067B7EA545EF24080C2838F9FEBF8E38FE7A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:17:88:41:12:19:f3:b2:ec:79:3b:98:b8:
                    22:a3:74:57:55:a4:97:da:8e:25:f6:26:94:ac:f3:
                    7b:a3:13:48:4b:80:76:59:23:78:75:e5:b2:4c:05:
                    bc:14:6f:d9:e8:53:a2:af:fb:25:f7:a9:14:6a:3d:
                    0d:34:48:ce:f3:02:45:f8:6e:db:87:12:f3:9b:1c:
                    ac:4e:1a:84:63:e3:5b:15:73:4c:98:61:18:d3:57:
                    15:b0:b7:e6:57:e9:a9:7d:77:3f:a6:e5:e8:59:66:
                    47:d2:d2:9e:d8:d9:29:d8:fc:d7:a4:7c:20:e7:06:
                    a8:d3:66:97:2a:db:80:19:09:28:92:66:05:bb:7c:
                    65:8c:78:c6:c9:f0:f9:8c:fd:3b:07:a8:7f:ed:78:
                    11:6d:d4:c8:6d:a0:86:4e:d8:1c:60:74:25:3f:22:
                    7c:b9:2b:24:fb:f9:45:47:e9:f8:dc:7e:c0:56:88:
                    63:5f:ca:b1:c6:c5:d4:1b:f7:50:8b:57:6f:aa:97:
                    da:47:4b:bf:87:72:fc:08:4e:70:ac:34:8c:9c:aa:
                    b6:fe:49:0e:d4:59:39:15:33:72:41:7c:7a:14:a3:
                    c3:23:c5:9e:9a:5a:01:54:fb:3f:97:42:df:a1:02:
                    e9:0b:0e:44:6e:7d:68:55:31:06:19:36:db:b4:81:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:06:7B:7E:A5:45:EF:24:08:0C:28:38:F9:FE:BF:8E:38:FE:7A:04
            X509v3 Authority Key Identifier:
                keyid:64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:58:14:16:73:3c:f1:e8:cf:e5:3f:fa:16:d7:86:e3:db:dd:
         c0:d0:c3:98:e4:c6:7b:16:05:67:03:7f:e7:ee:ca:84:d5:35:
         ef:96:d1:eb:57:c5:c0:83:ff:19:97:c8:7b:00:31:bb:b7:04:
         64:0d:32:e4:19:28:14:85:70:03:58:59:c9:46:78:ed:15:83:
         44:b2:85:6a:87:85:38:a0:cf:03:35:b9:f0:05:90:31:8a:b8:
         cd:e4:db:e6:f1:21:f3:8a:d5:48:7a:76:3e:1e:ae:03:f3:1c:
         01:c1:d3:ed:25:e0:a4:b9:56:f1:f4:cc:81:59:8c:0a:68:a1:
         28:31:4c:48:43:19:a5:1d:dc:50:b2:19:94:7e:88:0b:9d:90:
         d0:9f:f5:57:b2:16:92:c0:8a:0b:8a:f9:d8:72:ed:55:3f:2d:
         51:11:29:43:62:44:22:b8:dd:5f:48:11:16:b1:b8:37:02:3a:
         0c:fe:d1:44:37:b7:62:f8:3d:50:2c:07:c4:e6:e9:00:be:0b:
         69:25:6a:7e:a2:66:2a:70:5d:a8:0e:78:0f:14:59:c8:1d:cc:
         25:48:82:09:40:5e:2b:d7:66:f8:ad:d8:be:84:a7:89:b3:1a:
         33:1d:92:e8:f4:e3:15:48:89:a3:08:0e:80:d7:c4:e6:5c:7b:
         4b:e8:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:29:20 2025 by rpki-client