Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
File:                     20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json)
Hash identifier:          30YJvtccSPMmu4ZneUtaMUtqI6C79I60xnYlJrkD2WA=
Subject key identifier:   9F:13:41:72:60:49:51:98:66:65:CA:C6:60:E1:35:09:57:7C:11:8C
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Certificate issuer:       /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial:       49E0C68D5FC56D0214D8BF7091ECBA4E972178B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
Manifest number:          DC
Signing time:             Sun 08 Jun 2025 14:14:38 +0000
Manifest this update:     Sun 08 Jun 2025 14:09:38 +0000
Manifest next update:     Mon 09 Jun 2025 15:38:38 +0000
Files and hashes:         1: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: LJae5qX98q1IoVhcF3MovFKodtof25tEPl+Vd+qKFHU=)
                          2: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: MSVJZNnc1G2s6Chv7foy7rRbx0yjeeAKsBqP1rGteaA=)
                          3: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: sX4clBllsnOe26N+axHOkcAsIye3vArF/kg1Z4Off60=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
                          rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 15:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e0:c6:8d:5f:c5:6d:02:14:d8:bf:70:91:ec:ba:4e:97:21:78:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
        Validity
            Not Before: Jun  8 14:09:38 2025 GMT
            Not After : Jun  9 15:38:38 2025 GMT
        Subject: CN=9F134172604951986665CAC660E13509577C118C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:86:9d:ae:ad:13:72:48:9e:3a:c9:31:6c:
                    d3:2f:fa:ac:4f:81:9e:2a:9e:41:d6:33:99:3a:80:
                    2f:ba:b2:03:62:e7:d9:a5:a1:8f:2d:68:e7:00:f7:
                    c6:db:42:1f:3a:70:2c:9b:a6:ce:a5:f2:40:b1:38:
                    f9:9b:9d:74:28:cb:5d:9b:a7:25:7a:b9:2c:a3:b0:
                    a3:5c:ea:81:b9:5b:f5:a9:5d:b1:a5:a4:4f:1c:26:
                    e0:96:6f:ff:a9:d2:13:80:8b:27:fc:67:49:6e:49:
                    d2:26:68:64:e3:67:55:cb:ed:f0:d6:a4:f1:31:a6:
                    75:6f:30:1f:e0:c3:ce:d3:1f:4a:b3:4c:58:05:88:
                    67:6f:90:ea:05:72:7f:27:95:f4:1f:f7:57:01:ea:
                    04:56:ab:cb:2d:cc:be:72:cf:d4:c2:e8:27:ee:46:
                    35:17:ad:f7:be:c1:2f:98:3d:e0:40:4c:08:2f:cf:
                    dd:2d:3f:62:4c:bf:cc:0a:3a:9f:d3:75:cc:39:ea:
                    d9:6f:ce:b7:9c:73:98:bf:2c:18:de:c4:03:c1:a3:
                    eb:67:45:f0:7b:78:15:a7:a3:f3:8f:c8:43:7b:23:
                    d7:5d:0e:7d:b5:b2:82:60:b2:24:3e:ff:ff:a9:b9:
                    9d:2c:4c:cf:1b:a1:63:23:47:71:9f:e2:eb:6b:80:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:13:41:72:60:49:51:98:66:65:CA:C6:60:E1:35:09:57:7C:11:8C
            X509v3 Authority Key Identifier:
                keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:21:f3:3c:e8:1d:bd:fd:bf:65:15:ae:fe:cd:e1:54:2d:a0:
         b0:9a:ce:46:02:80:8c:c5:ea:3b:72:f6:86:fb:69:8e:c6:2a:
         e0:3d:35:4b:bf:b9:d6:21:be:05:66:7c:33:6c:b4:dc:ad:0b:
         43:e4:d3:c8:1b:25:42:cd:71:ec:42:b7:c4:9d:0b:dc:28:fe:
         f3:f6:62:16:a1:d3:d9:28:78:4f:3f:0c:92:6f:a4:1a:48:6e:
         72:f3:b9:83:84:9f:74:a5:8a:72:8d:8d:a4:8a:a6:7c:0a:15:
         60:3c:2b:d0:3d:7f:e9:1c:45:5a:70:0c:01:b8:b1:bb:83:15:
         77:71:41:bf:ed:b9:81:dd:58:ed:98:ac:1a:3e:67:87:6a:0f:
         3c:a7:85:35:e9:4c:3a:87:b2:da:e4:92:1c:76:04:93:51:71:
         7b:57:21:f5:64:74:5f:65:43:1e:21:b8:15:5f:8e:53:4f:b0:
         68:e4:64:d7:51:cb:8c:74:2a:0d:6c:d2:ee:a4:f2:70:41:7b:
         c1:5c:b5:07:aa:0b:23:02:9d:70:8e:b8:73:ff:f3:6b:e3:b9:
         ff:19:b4:ae:77:5a:02:fb:ef:65:ef:ea:ae:72:59:77:45:ac:
         cb:2c:d7:38:d2:7d:39:48:3d:b8:09:27:94:b8:3f:91:a2:74:
         4a:cd:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:39:31 2025 by rpki-client