Manifest

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft
File:                     0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft (raw, json)
Hash identifier:          ajlV4fSQ4Rn42/XfxqfGTqz/LsyNXZfmLL4fVEsYTCk=
Subject key identifier:   3F:20:4F:40:C4:3F:D9:25:C7:42:19:8B:57:E0:3A:8A:6C:7B:85:D3
Authority key identifier: 0D:3C:DF:45:C9:A0:76:D4:C7:A4:46:02:50:B0:D0:A1:67:F3:00:A2
Certificate issuer:       /CN=0d3cdf45c9a076d4c7a4460250b0d0a167f300a2
Certificate serial:       3898E6FC2748A3E6DC1FC2A439A8F14B4A5550A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTzfRcmgdtTHpEYCULDQoWfzAKI.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft
Manifest number:          03F9
Signing time:             Tue 22 Oct 2024 20:43:20 +0000
Manifest this update:     Tue 22 Oct 2024 20:38:20 +0000
Manifest next update:     Wed 23 Oct 2024 23:04:20 +0000
Files and hashes:         1: 0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.crl (hash: 5fB0w3hMeZ3gGHxLezE9a8tbLF2Ix1nZplAgBocsM6k=)
                          2: AS50224.asa (hash: PW3SFES8yYA1BY5GqaOOdOBt8uNtFzG/EyrbxJsYEK8=)

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.crl
                          rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DTzfRcmgdtTHpEYCULDQoWfzAKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 14:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:98:e6:fc:27:48:a3:e6:dc:1f:c2:a4:39:a8:f1:4b:4a:55:50:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3cdf45c9a076d4c7a4460250b0d0a167f300a2
        Validity
            Not Before: Oct 22 20:38:20 2024 GMT
            Not After : Oct 23 23:04:20 2024 GMT
        Subject: CN=3F204F40C43FD925C742198B57E03A8A6C7B85D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f3:40:6f:d1:06:d0:b6:57:b6:69:88:55:0a:
                    2e:c7:f3:67:eb:d6:b2:d7:f7:65:d8:e2:3e:e7:44:
                    50:ae:9f:ed:4e:6e:c0:fc:c1:0e:28:5c:86:10:95:
                    3e:fe:9e:3c:f9:84:cb:56:ba:06:9f:44:5e:ef:58:
                    c5:16:ca:cb:2d:1f:3d:84:bc:38:5b:6a:cc:6f:5f:
                    8e:50:79:ab:95:6f:31:64:d1:f8:56:f9:0b:4f:8b:
                    97:6b:cf:81:72:5c:fe:94:93:ff:8f:b0:2e:3c:ba:
                    e5:fe:2c:21:f4:cc:49:54:42:3e:aa:7a:b1:f2:46:
                    dd:80:62:38:73:35:89:f5:30:9e:7f:45:22:f8:98:
                    fc:1a:f4:1d:bb:4a:1c:8a:f9:fd:ce:a7:55:44:4b:
                    41:14:af:c4:c2:70:8a:e1:33:24:f9:41:7d:13:38:
                    5d:97:a0:25:cc:db:b0:68:d3:de:43:c4:52:55:96:
                    2d:63:5f:70:55:e9:cf:d6:5f:12:12:b1:71:c7:bf:
                    89:ac:23:fe:e4:0b:10:04:16:09:2f:a5:cc:a7:2a:
                    7c:97:5b:ee:a4:cb:b0:73:42:6b:61:f8:1e:10:bb:
                    6c:bc:50:a3:b7:52:96:7b:35:b5:9f:79:ad:3a:ed:
                    35:01:42:50:94:37:d7:3a:2f:f9:66:b5:11:9a:34:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:20:4F:40:C4:3F:D9:25:C7:42:19:8B:57:E0:3A:8A:6C:7B:85:D3
            X509v3 Authority Key Identifier:
                keyid:0D:3C:DF:45:C9:A0:76:D4:C7:A4:46:02:50:B0:D0:A1:67:F3:00:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTzfRcmgdtTHpEYCULDQoWfzAKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/4/0D3CDF45C9A076D4C7A4460250B0D0A167F300A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0a:a5:9d:8b:0e:1c:f9:13:3c:a0:7e:81:e0:2e:6a:9d:df:
         11:2f:81:f8:a3:76:07:d9:d7:de:a6:75:62:20:48:b6:36:7d:
         3c:97:77:2f:d7:08:d7:32:18:b9:33:0d:89:45:a2:59:1f:8f:
         53:e1:2f:91:68:09:f8:81:b7:17:09:13:47:20:9e:09:d4:0d:
         7d:20:32:1b:4d:c1:f4:9e:ac:d6:d1:39:9d:4a:97:68:a6:87:
         d3:fc:52:53:85:65:ff:fb:94:ee:29:e1:a2:82:38:ef:72:d0:
         de:ae:da:f2:eb:f9:61:a0:e0:4d:fa:ed:bd:e0:5c:4d:60:5c:
         08:84:cb:67:a4:59:b2:a3:b0:fe:ad:34:93:10:df:95:b4:75:
         92:e5:ac:32:bc:44:74:8a:f3:d3:30:95:2f:47:1c:ec:83:a4:
         4f:7d:3e:17:c8:4e:f5:14:fc:3c:af:a7:b5:57:4a:ab:e1:ec:
         96:81:74:ee:92:d1:d9:6f:67:20:e2:58:56:6e:2b:77:dc:91:
         d4:71:9b:a6:23:a2:71:6f:a9:98:08:bb:79:19:cc:51:e3:e7:
         c3:02:48:de:63:ee:2e:dd:20:86:1b:c4:82:02:7d:01:d2:92:
         5b:c0:56:99:c2:37:f4:a8:20:7a:75:c0:aa:fa:ad:1a:ea:88:
         94:3c:68:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:27:59 2024 by rpki-client on console-fra.rpki-client.org