Manifest

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft
File:                     0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft (raw, json)
Hash identifier:          gG+SROgceVgExbJaO7dXTeIeKbGvt9Jgicegh7nm+5I=
Subject key identifier:   57:F3:A6:73:89:08:D9:82:FF:CB:44:82:84:AC:EB:27:3C:03:F4:FA
Authority key identifier: 0D:3C:DF:45:C9:A0:76:D4:C7:A4:46:02:50:B0:D0:A1:67:F3:00:A2
Certificate issuer:       /CN=0d3cdf45c9a076d4c7a4460250b0d0a167f300a2
Certificate serial:       6E384FA1822117F97EC2F2F0CF836014EDA63D4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTzfRcmgdtTHpEYCULDQoWfzAKI.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft
Manifest number:          02D1
Signing time:             Wed 24 Apr 2024 13:15:51 +0000
Manifest this update:     Wed 24 Apr 2024 13:10:51 +0000
Manifest next update:     Thu 25 Apr 2024 16:27:51 +0000
Files and hashes:         1: AS50224.asa (hash: IMQxdGpe3izlUHA0VAe4gkGLj7Wt+pYGc5ZU3eBbyFw=)
                          2: 0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.crl (hash: f7BWpLl/HInS2wq+owtQlo09xha04w8NYLoslbmSQ+8=)

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.crl
                          rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DTzfRcmgdtTHpEYCULDQoWfzAKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:38:4f:a1:82:21:17:f9:7e:c2:f2:f0:cf:83:60:14:ed:a6:3d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3cdf45c9a076d4c7a4460250b0d0a167f300a2
        Validity
            Not Before: Apr 24 13:10:51 2024 GMT
            Not After : Apr 25 16:27:51 2024 GMT
        Subject: CN=57F3A6738908D982FFCB448284ACEB273C03F4FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:e8:8e:2c:33:fe:54:b6:3d:df:25:34:b7:
                    94:82:6e:48:a3:44:8f:2a:79:f7:47:81:0f:40:a0:
                    87:ca:f1:d8:15:a5:e6:34:b1:b4:10:c6:4f:de:19:
                    4d:84:92:e2:70:da:35:5a:51:ea:6b:64:76:e0:9f:
                    b3:1c:a2:44:d1:d4:aa:9c:d1:95:ce:f1:03:8d:2a:
                    20:3c:ff:bf:5a:80:de:43:92:26:64:8b:c9:eb:54:
                    66:5a:14:8d:95:e9:27:c9:92:23:d7:e6:d1:fa:9a:
                    d4:cf:77:23:05:17:0d:6d:c9:a0:49:cd:89:17:b7:
                    1a:63:6c:3f:3d:0c:15:4c:42:77:52:3d:c0:7b:13:
                    99:4d:3a:79:1e:d7:7d:e8:96:86:0f:b4:a4:1a:da:
                    fa:21:07:f6:d3:ca:51:66:df:2c:1d:86:b5:fa:06:
                    3e:99:31:af:56:b3:bc:99:0f:fe:c2:33:bf:be:3c:
                    04:86:7f:07:f1:87:c0:62:cd:c3:de:7a:92:f3:90:
                    0a:d0:74:42:86:68:52:1d:ed:0e:54:cc:65:16:47:
                    62:a2:0c:7a:a8:48:f7:2b:16:0e:7d:cd:31:12:2b:
                    6e:8e:34:2f:76:7b:25:9a:58:86:dd:ec:7b:8c:93:
                    d2:ed:ae:ab:4e:51:f8:93:e3:7d:83:b3:ea:4d:53:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F3:A6:73:89:08:D9:82:FF:CB:44:82:84:AC:EB:27:3C:03:F4:FA
            X509v3 Authority Key Identifier:
                keyid:0D:3C:DF:45:C9:A0:76:D4:C7:A4:46:02:50:B0:D0:A1:67:F3:00:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTzfRcmgdtTHpEYCULDQoWfzAKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:db:9b:be:73:c9:e0:ab:92:a0:c5:4f:65:f5:49:cf:75:bb:
         e3:8f:6e:44:52:dc:0b:33:55:c1:05:1a:ca:40:e5:ef:0d:2e:
         8c:01:e7:0e:36:9f:dd:b5:f4:60:b4:a3:48:2a:9e:1c:4b:d0:
         87:91:eb:5b:69:16:d7:39:68:88:31:11:4d:4e:4f:47:f6:5b:
         13:0a:c9:47:f8:33:b3:fa:66:7d:c1:d7:e2:b1:de:95:1e:72:
         bd:63:4b:18:8b:d9:71:e1:07:ee:dd:b5:63:a1:9d:af:33:3e:
         ca:7b:b7:8e:ce:31:90:8f:b0:52:a9:70:f8:e3:fc:25:e3:49:
         f0:2c:5b:d8:dd:0e:3b:7c:cd:23:d4:9e:1e:3c:6d:81:cb:9c:
         60:da:f7:d1:23:26:1d:4f:cd:ed:6e:67:84:fd:25:48:d5:bb:
         dd:c1:a3:c1:20:62:19:b9:a9:d1:e1:a8:05:44:ec:e3:0a:13:
         7d:50:09:1b:9b:5e:a0:4e:23:be:ad:81:98:f7:50:1e:99:90:
         f0:64:42:2b:91:27:7b:df:b7:b4:30:a7:43:1f:d4:e7:06:14:
         62:fa:64:4c:8f:94:af:41:c6:41:ba:4a:15:2b:f6:09:41:9a:
         78:51:41:bf:0c:70:1c:8e:3e:b2:5b:44:30:df:e6:1e:32:1f:
         94:71:95:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:10:36 2024 by rpki-client on console-ams.rpki-client.org