Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
File:                     B692ED2FEFFD044C6DD7F20D70952648400A7744.mft (raw, json)
Hash identifier:          RKj/9ZKRCTvJ2sV9ayFAz03ccvdbATkx6c/ZpRQFBI0=
Subject key identifier:   A1:B4:9A:F3:DF:86:EC:62:20:A2:9B:12:E1:99:5A:4F:EF:42:E1:DD
Authority key identifier: B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44
Certificate issuer:       /CN=b692ed2feffd044c6dd7f20d70952648400a7744
Certificate serial:       064373F16CBEAAE613DBC04CB80F7C99C14C7B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
Manifest number:          0172
Signing time:             Tue 08 Apr 2025 22:49:49 +0000
Manifest this update:     Tue 08 Apr 2025 22:44:47 +0000
Manifest next update:     Thu 10 Apr 2025 02:37:47 +0000
Files and hashes:         1: 323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa (hash: UscZqBeVa62wChbGnDHRsAbV/SU7srPAd1Cujllujfo=)
                          2: B692ED2FEFFD044C6DD7F20D70952648400A7744.crl (hash: ZgTPDlFKkqxzDHR5sQclQWGZ2pd2QxJBlwPkqtoVPgA=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Apr 2025 02:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:43:73:f1:6c:be:aa:e6:13:db:c0:4c:b8:0f:7c:99:c1:4c:7b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b692ed2feffd044c6dd7f20d70952648400a7744
        Validity
            Not Before: Apr  8 22:44:47 2025 GMT
            Not After : Apr 10 02:37:47 2025 GMT
        Subject: CN=A1B49AF3DF86EC6220A29B12E1995A4FEF42E1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:6a:a8:86:cb:47:34:cf:a7:99:76:c6:40:
                    6b:9d:2b:8e:46:6b:4c:a2:93:f6:58:b2:02:2e:81:
                    1e:d4:2a:44:8c:50:86:4d:88:ff:8d:27:5b:83:11:
                    df:eb:c1:98:da:8e:ba:f6:17:f0:aa:0a:eb:26:47:
                    88:34:9e:a0:af:bb:78:cb:92:08:b3:2c:42:81:70:
                    9f:aa:b5:12:b7:1a:c6:9e:fa:e3:bb:1c:2c:c0:b1:
                    9c:97:f0:48:8c:81:04:f9:5e:6f:c1:e3:ee:6a:06:
                    0d:95:31:6d:a1:8c:52:f8:03:b6:91:23:b3:d8:21:
                    1e:af:dd:47:b1:93:a3:bc:32:1a:7f:89:63:62:50:
                    35:dd:4a:48:81:40:5c:bc:7b:31:77:24:96:32:f2:
                    bd:97:f4:c1:0f:b7:9a:c4:c3:8c:89:f1:88:11:8b:
                    ca:3f:1a:3b:ad:54:f2:6e:49:fe:61:e4:a6:51:b9:
                    58:fa:92:21:16:26:27:52:24:9b:21:e9:95:fc:c2:
                    b4:3a:df:d5:3f:db:88:1c:7e:d9:ea:50:ba:5b:9d:
                    a8:71:8e:42:da:30:36:c9:6d:16:6c:8e:ae:a8:ec:
                    ce:2d:14:25:4a:e2:21:9c:3a:af:24:64:61:2c:ea:
                    33:06:2d:70:10:e0:ae:04:62:da:0a:b2:cf:0c:ba:
                    1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B4:9A:F3:DF:86:EC:62:20:A2:9B:12:E1:99:5A:4F:EF:42:E1:DD
            X509v3 Authority Key Identifier:
                keyid:B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:4b:92:cf:22:b2:bc:e5:77:66:8b:5d:b4:9e:6d:a7:19:31:
         13:a7:c5:7b:07:c5:a1:bf:9d:2b:33:23:9c:dc:11:09:f2:1f:
         c5:ff:0e:d5:fd:99:a9:ed:dc:97:c5:9b:66:3e:e5:10:9f:dc:
         a5:c7:11:14:d2:8c:96:07:ee:31:54:c0:e4:8a:64:24:cb:e8:
         67:6b:67:1f:d1:64:7d:ee:b1:fd:b1:fe:87:b5:47:65:0e:5b:
         b2:aa:d0:6d:a1:63:78:e5:be:67:71:04:29:f8:14:7c:99:28:
         e7:ab:eb:bb:60:be:b7:33:7c:8e:74:ed:cd:cf:5e:47:11:99:
         85:e9:a0:dc:1e:e8:ea:0f:24:fd:48:51:ff:c2:da:30:00:a9:
         8c:74:ad:d3:b7:ff:2b:53:f5:f7:07:d0:a8:71:13:40:7f:47:
         f3:46:db:e6:67:a5:c3:9b:96:cd:80:12:4b:dc:ed:b8:64:7c:
         2e:70:b0:76:89:59:0b:ad:f9:b3:29:24:33:9f:a6:1c:26:08:
         31:c0:b0:61:ce:97:22:b9:20:ab:59:3b:77:55:3a:91:fc:20:
         89:23:cc:36:ea:c1:3a:9c:b9:c6:7b:8d:b8:4d:18:c9:1d:ed:
         fa:2a:ab:ac:34:9a:bf:0b:4f:8b:05:a9:e3:3f:f9:67:52:eb:
         85:e4:1f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:48:16 2025 by rpki-client