Manifest

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/6/2C5F5811563FF21CB8DDCAE1D9846AFCA8BCC65D.mft
File:                     2C5F5811563FF21CB8DDCAE1D9846AFCA8BCC65D.mft (raw, json)
Hash identifier:          sTcDi87ysp6SDw3uAg1VEuuLzGJUX+KWbHHPk3FggVU=
Subject key identifier:   CA:44:7C:65:FB:5B:E6:9B:FB:18:AB:D8:F4:69:DA:FE:B1:56:0F:71
Authority key identifier: 2C:5F:58:11:56:3F:F2:1C:B8:DD:CA:E1:D9:84:6A:FC:A8:BC:C6:5D
Certificate issuer:       /CN=2c5f5811563ff21cb8ddcae1d9846afca8bcc65d
Certificate serial:       06CD5BE9ECCF7760960D312726FD5E6B4CA4D349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LF9YEVY_8hy43crh2YRq_Ki8xl0.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/6/2C5F5811563FF21CB8DDCAE1D9846AFCA8BCC65D.mft
Manifest number:          02A1
Signing time:             Fri 19 Apr 2024 08:41:29 +0000
Manifest this update:     Fri 19 Apr 2024 08:36:29 +0000
Manifest next update:     Sat 20 Apr 2024 12:30:29 +0000
Files and hashes:         1: 2C5F5811563FF21CB8DDCAE1D9846AFCA8BCC65D.crl (hash: eJYlOEjrv/j5KmP/KVzEEPPDR7OZIJB9uNL67Ytz750=)
                          2: AS48581.asa (hash: CY7N8vy8F6Mv1ltD4XzEhcQVGxFppgB1bZjnfANfxoA=)

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/6/2C5F5811563FF21CB8DDCAE1D9846AFCA8BCC65D.crl
                          rsync://rpki.cc/repo/MythicalKitten/6/2C5F5811563FF21CB8DDCAE1D9846AFCA8BCC65D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LF9YEVY_8hy43crh2YRq_Ki8xl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cd:5b:e9:ec:cf:77:60:96:0d:31:27:26:fd:5e:6b:4c:a4:d3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c5f5811563ff21cb8ddcae1d9846afca8bcc65d
        Validity
            Not Before: Apr 19 08:36:29 2024 GMT
            Not After : Apr 20 12:30:29 2024 GMT
        Subject: CN=CA447C65FB5BE69BFB18ABD8F469DAFEB1560F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:50:96:21:fc:19:cf:2f:c5:37:6c:96:8c:
                    48:b7:f2:c6:e0:89:fd:81:b6:9c:3f:02:27:8b:2d:
                    a2:1d:9e:ab:85:b0:3a:2c:92:8c:66:81:c7:60:b0:
                    b7:21:0d:33:38:7d:50:ce:c9:e7:19:b9:de:c6:31:
                    b6:21:d9:28:ed:27:3e:05:76:f3:8d:db:53:c8:f9:
                    2e:cf:b7:ba:97:e0:6f:d1:65:c7:14:cf:4e:90:9d:
                    41:8d:b1:00:b0:9b:72:a7:27:66:84:3b:d4:0f:1c:
                    6e:32:f2:6b:94:64:c5:a5:27:f2:cf:b5:e5:67:0b:
                    71:9d:b7:ca:8d:72:60:7f:bf:3e:40:d0:2c:1d:f6:
                    a1:74:da:d2:41:76:3e:d4:a0:b8:44:1f:3b:64:7c:
                    62:bd:04:33:7d:7d:7e:41:9f:9c:cf:30:0d:2f:5c:
                    94:52:dd:ed:5f:f3:74:28:86:9b:f5:df:98:a8:ef:
                    fa:92:02:c3:94:e2:b8:9d:8a:b1:0b:8f:55:b2:c5:
                    86:56:84:36:ba:4b:00:b7:fc:32:62:6a:5a:73:b3:
                    0d:2d:57:3c:70:c3:54:3f:a6:55:ae:62:bb:83:6f:
                    c3:11:96:62:18:d7:1d:c2:3f:32:d1:93:f5:76:be:
                    77:33:9b:1e:76:97:3e:a8:0f:4d:69:04:69:0c:80:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:44:7C:65:FB:5B:E6:9B:FB:18:AB:D8:F4:69:DA:FE:B1:56:0F:71
            X509v3 Authority Key Identifier:
                keyid:2C:5F:58:11:56:3F:F2:1C:B8:DD:CA:E1:D9:84:6A:FC:A8:BC:C6:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/6/2C5F5811563FF21CB8DDCAE1D9846AFCA8BCC65D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LF9YEVY_8hy43crh2YRq_Ki8xl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/6/2C5F5811563FF21CB8DDCAE1D9846AFCA8BCC65D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:20:f2:db:94:49:14:0a:96:50:1d:03:0a:5d:b7:14:92:49:
         da:f6:a3:1e:45:6f:f5:4d:bb:39:ed:42:0a:9e:ee:77:16:69:
         4a:ca:8d:4f:9d:4b:dc:88:87:50:a3:77:46:6a:a3:24:59:d9:
         92:91:ca:02:b5:fb:b6:a6:71:d9:5a:99:a0:93:49:06:fc:8e:
         2a:72:0f:70:4a:6f:c7:57:0f:07:09:16:a6:1d:ca:5f:40:1c:
         f8:4b:9f:ae:cd:50:05:b6:9b:21:53:87:f1:12:ee:96:85:dc:
         c4:13:09:68:f7:a4:5c:c8:b1:31:a1:d9:95:6e:f7:cf:eb:0f:
         04:85:12:07:65:62:18:f2:a2:e0:28:39:dd:9a:93:ce:b2:fd:
         c7:ae:a6:ef:da:ed:a9:14:0c:30:00:7f:b5:95:23:e2:59:8b:
         0a:9d:9a:79:2d:23:3b:b3:be:34:b2:a6:a6:3b:af:f6:71:f9:
         55:5b:ae:90:7d:0f:3e:eb:7f:cd:ae:42:a7:28:3d:83:12:eb:
         70:36:ff:a2:6a:36:aa:50:6b:92:95:01:b0:d6:57:5a:90:45:
         67:9a:2e:70:2f:0a:e3:c2:73:85:6a:0b:73:7e:a2:10:9c:ee:
         d5:05:c4:58:a0:06:47:92:7c:b3:2e:fa:0c:4c:ff:04:dc:2d:
         d7:c2:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 09:36:29 2024 by rpki-client on console-fra.rpki-client.org