Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
File:                     20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json)
Hash identifier:          xgZiYt9+NIFxPm4hacsF2TtZwgouvbXWRH/lEhlPLHg=
Subject key identifier:   02:2B:CE:19:2A:AA:70:FB:A2:61:E1:50:64:9D:C0:3F:2D:5C:8A:CD
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Certificate issuer:       /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial:       15725E52779152D399A9F7A56B1DE2646344FA3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
Manifest number:          0164
Signing time:             Wed 17 Sep 2025 20:48:15 +0000
Manifest this update:     Wed 17 Sep 2025 20:43:15 +0000
Manifest next update:     Thu 18 Sep 2025 21:40:15 +0000
Files and hashes:         1: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: sX4clBllsnOe26N+axHOkcAsIye3vArF/kg1Z4Off60=)
                          2: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: LJae5qX98q1IoVhcF3MovFKodtof25tEPl+Vd+qKFHU=)
                          3: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: UXq4heZTFaK3XJZIuquqz8FVVncfsdJM7tI8YjRsQBQ=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
                          rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:72:5e:52:77:91:52:d3:99:a9:f7:a5:6b:1d:e2:64:63:44:fa:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
        Validity
            Not Before: Sep 17 20:43:15 2025 GMT
            Not After : Sep 18 21:40:15 2025 GMT
        Subject: CN=022BCE192AAA70FBA261E150649DC03F2D5C8ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:56:4c:53:87:83:b1:6d:67:52:e2:ba:47:
                    e3:80:81:f3:70:a5:1a:5b:b6:2e:97:e7:77:4f:fc:
                    c8:35:80:c7:a8:8b:c0:a4:95:21:54:09:0e:69:23:
                    a2:5b:b6:2a:51:fb:9d:7f:49:c6:5e:82:d0:62:71:
                    35:a3:ab:96:6f:6d:c2:25:23:6a:d0:ba:cc:f9:0c:
                    01:7d:d2:7b:93:48:13:79:1a:1f:a8:85:99:cf:5f:
                    2f:d0:8f:95:4b:e5:06:7c:9b:ef:66:c9:16:6c:1b:
                    65:f3:4b:ac:61:e3:f2:fc:95:da:ad:2c:72:e6:bc:
                    5e:5b:df:85:37:a3:70:35:f2:fb:e8:20:cf:ae:b7:
                    22:9f:8d:3b:d4:de:c3:7f:11:29:8d:46:95:1e:b1:
                    74:69:5a:3b:7a:99:dd:f0:26:fd:1d:c4:aa:c1:5f:
                    d2:65:0b:3c:97:8e:57:04:e0:49:7c:b1:c3:9a:1c:
                    f5:37:9e:ff:87:3b:04:7f:c5:ec:a0:44:8e:c4:e4:
                    00:21:bf:a0:7b:b0:57:14:ab:bb:42:88:91:d4:92:
                    68:5a:21:80:70:33:cb:ac:24:4f:15:db:45:12:c8:
                    cd:f3:fd:c3:f5:b5:32:d5:4d:b7:0e:94:7e:a3:79:
                    d7:4d:55:3d:61:a6:e9:f0:d7:f1:42:25:d9:39:fb:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2B:CE:19:2A:AA:70:FB:A2:61:E1:50:64:9D:C0:3F:2D:5C:8A:CD
            X509v3 Authority Key Identifier:
                keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:45:93:e2:8d:51:1b:71:79:af:5f:c8:97:43:07:4e:fc:f8:
         46:2a:92:73:ac:4f:71:72:23:9a:56:e4:e0:db:44:f7:3c:31:
         24:cf:e0:50:76:80:ca:a4:37:d4:8d:ba:81:3e:7f:9c:10:18:
         5a:36:fe:1b:2b:95:00:3e:21:d6:b3:a2:7f:1b:35:c7:30:10:
         e4:82:c7:ab:0c:53:7b:bf:97:81:66:10:b3:c0:ad:99:1d:e0:
         a4:b2:54:78:39:9b:e2:22:e1:da:92:fc:74:38:5e:82:e7:1d:
         58:cd:6d:a4:92:bf:c2:d1:5c:63:7b:cc:ed:de:9b:aa:c6:e9:
         ce:c0:4b:00:86:31:eb:f2:a5:88:e8:c1:48:3e:b3:99:21:4f:
         da:7b:6f:38:4c:ca:93:e4:ca:a3:1e:46:14:8e:89:13:c3:9b:
         66:32:3c:18:1e:d7:2d:0c:21:7a:48:65:62:7d:dd:aa:c3:94:
         7e:d8:81:7b:16:16:1c:a2:88:17:fd:18:df:09:99:b8:2b:6f:
         6f:97:a3:95:da:e4:82:49:72:bb:43:83:50:77:8a:af:dc:55:
         e6:21:f3:47:96:63:ed:15:44:3e:12:c9:8b:dc:2b:40:32:7d:
         62:cb:04:84:c7:43:7f:84:03:e6:96:3b:9e:66:1e:9a:eb:03:
         e1:6b:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 11:40:02 2025 by rpki-client