Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
File:                     C0877CC9EB843E8740AA80328E653F865C246295.mft (raw, json)
Hash identifier:          VhWH2RKjUPB2av06WiOR5LXrR28hO26IK4YZ37YT/vQ=
Subject key identifier:   F4:8B:A4:FA:BA:34:FF:1A:02:29:32:DF:BB:D8:DF:02:54:6D:3D:5E
Authority key identifier: C0:87:7C:C9:EB:84:3E:87:40:AA:80:32:8E:65:3F:86:5C:24:62:95
Certificate issuer:       /CN=c0877cc9eb843e8740aa80328e653f865c246295
Certificate serial:       24BEA183337746A5C5228214F07780BAB3804857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
Manifest number:          017B
Signing time:             Thu 17 Apr 2025 05:12:22 +0000
Manifest this update:     Thu 17 Apr 2025 05:07:20 +0000
Manifest next update:     Fri 18 Apr 2025 06:24:20 +0000
Files and hashes:         1: C0877CC9EB843E8740AA80328E653F865C246295.crl (hash: tAz2ZBCHDaxTJeJs3GBib/iTdu2U/1XOW1ZUCvjjicU=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 06:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:be:a1:83:33:77:46:a5:c5:22:82:14:f0:77:80:ba:b3:80:48:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0877cc9eb843e8740aa80328e653f865c246295
        Validity
            Not Before: Apr 17 05:07:20 2025 GMT
            Not After : Apr 18 06:24:20 2025 GMT
        Subject: CN=F48BA4FABA34FF1A022932DFBBD8DF02546D3D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:73:f3:a9:b9:b4:c3:ee:e7:61:2a:01:40:
                    8b:e4:33:39:0f:d5:d1:1e:09:00:26:1d:7e:b2:7b:
                    5e:4b:48:a9:f0:fa:a6:b9:18:06:57:f3:ec:00:e3:
                    43:9a:ff:ff:c4:36:c7:7d:7f:cc:f7:f3:37:78:af:
                    99:d5:ba:55:b2:03:a0:f1:95:a8:bb:2f:d8:5b:84:
                    70:09:9c:6f:9d:ad:31:56:96:9e:55:f4:54:29:96:
                    28:97:39:ec:bc:ae:52:c0:ad:89:14:70:cc:45:a4:
                    ce:ac:f8:aa:36:67:b8:72:99:ab:6f:ff:ce:76:49:
                    c5:d9:61:e8:13:6e:45:8a:c4:23:07:22:b9:98:11:
                    5e:d1:9e:36:66:9e:0e:15:98:59:9e:06:9e:00:29:
                    97:a7:22:d5:d9:81:fa:74:cd:13:22:c7:e7:3d:96:
                    71:b3:a9:85:10:87:b7:d6:c9:e2:56:86:56:f6:57:
                    f0:75:72:8a:ae:96:4c:c8:66:90:86:87:3a:ac:b0:
                    d8:74:47:d4:e3:d8:84:fe:bc:44:e6:6f:72:a8:28:
                    74:bf:9f:32:e8:9d:e0:11:5b:eb:e8:f8:77:24:30:
                    1c:b3:a8:ff:80:7e:ab:33:4f:bc:52:b4:7e:fc:3d:
                    09:64:4c:f6:d6:82:10:eb:25:7a:35:d2:d9:d1:19:
                    f7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8B:A4:FA:BA:34:FF:1A:02:29:32:DF:BB:D8:DF:02:54:6D:3D:5E
            X509v3 Authority Key Identifier:
                keyid:C0:87:7C:C9:EB:84:3E:87:40:AA:80:32:8E:65:3F:86:5C:24:62:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:29:43:0e:8b:63:d4:af:b0:c2:65:78:31:35:67:8b:8a:90:
         1a:a8:25:f1:a9:20:f1:01:08:20:af:88:9e:95:06:5e:f2:74:
         f7:df:cf:90:d8:e5:e2:4a:2d:6c:60:73:a0:90:fc:91:fa:47:
         a5:84:ae:31:b9:a5:81:8c:8e:75:0e:ec:9d:e7:97:26:9a:e0:
         85:72:d4:1f:79:9e:fc:1d:80:ad:07:76:b4:7d:e5:05:bb:29:
         bf:5c:c6:da:78:a9:7e:e0:ae:f1:e9:b1:60:36:ee:e1:50:10:
         86:35:57:8f:66:49:29:5c:b4:34:50:5f:2a:de:49:1f:a1:af:
         9f:6a:41:5c:ef:7f:1f:63:35:1f:7e:65:5e:fc:53:ff:b3:bb:
         7c:c2:57:94:0a:e7:c1:7c:d7:fa:d8:9f:b0:51:b0:cb:b3:43:
         7e:49:f8:3b:b8:c4:82:ae:f8:3e:ba:d6:ab:73:b0:9f:50:7c:
         84:56:9b:df:83:17:8e:86:b5:9f:c2:ba:8e:7b:52:a4:56:d7:
         b1:26:c5:31:2a:2b:ac:7f:c8:88:7d:5c:6b:6c:84:66:b4:a0:
         bf:4d:21:31:fe:b6:49:b6:c8:f7:43:0b:6d:6a:24:73:ff:d6:
         49:44:0e:07:a6:b2:70:32:bb:15:97:ca:9a:56:16:db:b9:b6:
         24:05:36:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:32:34 2025 by rpki-client