Manifest

$ rpki-client -vvf rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
File:                     FF0595CB477C33B6B94C7E477213C842A6067D6B.mft (raw, json)
Hash identifier:          GxV5aB+dmtuoTsurox/df5SVCEFk/0uuFM4d+LvZW1o=
Subject key identifier:   84:28:9D:15:15:ED:6D:77:CE:AE:85:3F:0F:17:90:8D:C8:2E:18:EE
Authority key identifier: FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B
Certificate issuer:       /CN=FF0595CB477C33B6B94C7E477213C842A6067D6B
Certificate serial:       17D7649C3877C7D672795A6FBB4C3025DBD4E6B0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer
Subject info access:      rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
Manifest number:          04F5
Signing time:             Sat 05 Apr 2025 21:10:27 +0000
Manifest this update:     Sat 05 Apr 2025 21:05:27 +0000
Manifest next update:     Mon 07 Apr 2025 00:30:27 +0000
Files and hashes:         1: FF0595CB477C33B6B94C7E477213C842A6067D6B.crl (hash: dM8AdG3FTDLCMHtmI50t/tU4Lzg/wnkyFm6dueJC+cs=)
Validation:               OK
Signature path:           rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.crl
                          rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 18:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d7:64:9c:38:77:c7:d6:72:79:5a:6f:bb:4c:30:25:db:d4:e6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF0595CB477C33B6B94C7E477213C842A6067D6B
        Validity
            Not Before: Apr  5 21:05:27 2025 GMT
            Not After : Apr  7 00:30:27 2025 GMT
        Subject: CN=84289D1515ED6D77CEAE853F0F17908DC82E18EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:52:19:70:6e:fe:6c:9d:16:e6:45:59:7b:63:
                    ed:83:33:a5:9b:3d:4e:21:e6:a9:e1:50:e4:97:47:
                    66:60:90:da:0e:b4:98:67:f4:f1:ed:8a:76:8f:31:
                    6c:d8:55:f5:e7:8f:cc:84:0e:d6:4e:7d:ee:b5:0b:
                    99:ab:62:8d:f1:08:35:0c:c8:c1:fc:ba:dc:a1:3b:
                    0d:c5:9f:b2:a8:28:d8:2d:77:7a:3a:98:15:84:bf:
                    d6:98:31:1c:8a:2f:25:79:8f:73:9a:6d:58:aa:cf:
                    d8:92:dd:3b:36:80:9e:78:df:46:57:e9:92:13:ae:
                    4d:60:fb:a4:f4:bb:4b:e3:bc:59:32:b1:80:c7:64:
                    e2:49:67:46:92:1e:34:89:67:f4:d2:af:e5:5c:05:
                    fd:db:56:9f:07:4b:00:3e:63:98:8f:69:a4:87:9e:
                    6c:14:e6:0f:d4:b1:1e:17:15:f5:06:b5:cd:0c:e5:
                    0c:01:b8:2d:3b:87:88:83:ac:4e:fa:bc:7b:66:fb:
                    9b:4c:4c:f6:d4:2f:55:01:1e:6d:93:20:70:9b:f1:
                    95:7b:f7:6a:e1:4d:ad:25:d1:ab:34:9c:e8:d3:c5:
                    02:7e:4a:12:e0:f5:e1:ef:fd:61:8e:5c:fb:60:36:
                    c7:02:e2:6e:6a:30:2c:b3:00:ab:24:a8:43:af:ad:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:28:9D:15:15:ED:6D:77:CE:AE:85:3F:0F:17:90:8D:C8:2E:18:EE
            X509v3 Authority Key Identifier:
                keyid:FF:05:95:CB:47:7C:33:B6:B9:4C:7E:47:72:13:C8:42:A6:06:7D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.qs.nu/repo/cyntest/2/FF0595CB477C33B6B94C7E477213C842A6067D6B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:b9:9c:2c:3c:64:45:51:76:55:a4:fa:52:d4:ff:c3:b3:d7:
         b9:77:51:a2:f4:59:b6:7a:8c:d1:92:f3:90:ba:e3:66:54:e3:
         25:9f:13:a2:f8:63:ab:01:41:1c:71:0f:83:44:2d:8d:b0:8b:
         ce:cc:38:c9:b5:37:02:4a:e9:ac:b6:3b:15:fa:5c:fb:60:be:
         17:f8:43:02:55:ce:f6:c5:ee:2a:b6:d9:b8:00:d7:51:9e:dd:
         8c:e9:1c:98:23:c4:88:df:ed:26:ff:2d:59:75:09:db:70:3a:
         62:ec:d6:cb:49:dd:d5:59:dc:70:a6:a8:47:02:5a:90:1e:46:
         27:e6:38:a6:16:b0:94:95:a0:5f:99:64:62:e0:fb:c4:b0:d4:
         76:fc:3c:f2:92:20:11:9f:f2:6e:bf:56:af:41:b8:c7:26:eb:
         e8:19:a2:c8:63:ac:97:1d:35:8e:9c:b4:7f:a6:cd:07:85:7a:
         3e:e6:d0:5a:8c:54:ea:1e:83:4c:00:35:e6:72:b7:d3:20:89:
         b5:7f:7d:3e:db:bf:29:fa:26:14:cd:42:b9:30:37:0a:f4:2e:
         f3:88:ac:9a:17:ea:48:76:74:a8:90:e2:2e:77:3a:bf:19:c1:
         4c:fe:1e:21:e9:a1:c0:8c:d6:16:87:b0:62:f5:14:e8:1a:4a:
         a2:79:e9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:55:50 2025 by rpki-client