Manifest

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
File:                     45FAD4649403F24502E9C3FA40103955BC3B5924.mft (raw, json)
Hash identifier:          oI9ewtC7RJQEhihIGa/ZBtMnMHcQPghDEJNWDedERWA=
Subject key identifier:   98:C1:C1:5A:10:13:72:A9:19:FE:38:C2:E8:EE:E6:26:E3:37:82:D0
Authority key identifier: 45:FA:D4:64:94:03:F2:45:02:E9:C3:FA:40:10:39:55:BC:3B:59:24
Certificate issuer:       /CN=45fad4649403f24502e9c3fa40103955bc3b5924
Certificate serial:       445A8AFACD2274E922C5AC1E8AE209AE5D2C3515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
Manifest number:          02B1
Signing time:             Fri 06 Jun 2025 21:42:45 +0000
Manifest this update:     Fri 06 Jun 2025 21:37:45 +0000
Manifest next update:     Sun 08 Jun 2025 01:19:45 +0000
Files and hashes:         1: AS205848.asa (hash: TRz6mjviBqglaM8k/qDHGaoQOFKfr/k5v0FpZ6o4z28=)
                          2: 45FAD4649403F24502E9C3FA40103955BC3B5924.crl (hash: 4sFkX49HIbWa3FwAPeIfxt0ow11RwWt+Ilu3N77bTiE=)
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5a:8a:fa:cd:22:74:e9:22:c5:ac:1e:8a:e2:09:ae:5d:2c:35:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fad4649403f24502e9c3fa40103955bc3b5924
        Validity
            Not Before: Jun  6 21:37:45 2025 GMT
            Not After : Jun  8 01:19:45 2025 GMT
        Subject: CN=98C1C15A101372A919FE38C2E8EEE626E33782D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:69:7e:4d:c8:51:3f:20:80:d1:ef:51:2d:
                    49:a5:d7:aa:b9:8d:d6:93:7d:ba:d2:f9:f9:62:98:
                    41:a3:26:9b:aa:9a:82:c1:c1:48:db:e2:c0:70:8a:
                    ea:98:d6:5b:12:ee:0a:99:6b:af:e2:b1:bf:3e:b6:
                    58:03:93:c5:ea:ca:3d:55:73:63:9d:e3:a1:fa:f5:
                    12:c5:a5:64:d9:91:df:ea:75:f1:e7:a3:1b:1a:59:
                    db:b3:85:24:fa:c5:7e:79:f5:7f:c0:78:5a:e2:01:
                    7b:2d:eb:e4:3b:b0:bc:12:2c:7a:bc:f9:c1:d3:a5:
                    c0:83:85:46:07:78:b9:6a:e1:bc:b5:a6:f1:e3:33:
                    48:43:e6:57:0e:a2:53:de:38:49:09:51:9f:11:a6:
                    96:1b:b7:f9:80:3a:ec:b1:79:d7:09:82:bc:26:65:
                    a1:f7:98:d2:38:f8:d0:7a:ca:58:a2:dc:db:07:39:
                    db:8e:04:47:2c:4b:06:c9:65:2f:32:59:9e:70:f4:
                    d5:d1:e6:8f:f0:01:2b:d3:84:a1:b2:ab:db:28:94:
                    fe:c0:31:da:ee:b4:75:4a:07:ef:67:e7:bb:66:d6:
                    53:8f:5d:22:f0:6d:cb:20:b0:64:fe:00:51:43:e0:
                    82:d2:43:37:47:7c:29:c3:6c:6f:de:a2:bf:60:61:
                    1e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C1:C1:5A:10:13:72:A9:19:FE:38:C2:E8:EE:E6:26:E3:37:82:D0
            X509v3 Authority Key Identifier:
                keyid:45:FA:D4:64:94:03:F2:45:02:E9:C3:FA:40:10:39:55:BC:3B:59:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c6:31:5c:8e:87:a9:60:26:1b:f1:5b:36:7b:44:ff:52:32:
         6d:b0:e9:16:60:a7:25:0c:d3:9e:7a:4f:15:74:94:f1:0f:99:
         92:f0:74:fd:eb:e7:f5:82:33:6c:a0:d2:2f:80:63:3e:b7:3d:
         af:51:cf:80:c2:30:67:00:85:11:f3:28:c7:ff:d6:e0:60:5b:
         53:d0:18:d1:dd:ac:d2:62:7d:08:30:79:be:74:cc:c4:44:c1:
         14:64:d3:b5:7b:73:a1:f7:27:42:2d:91:50:f8:ce:73:ec:67:
         b1:c8:65:db:1a:45:db:48:fb:cf:06:32:cd:e0:8a:cf:12:9d:
         71:f6:6d:9c:e6:e9:78:d6:ab:ea:6b:f7:52:34:83:c5:72:1f:
         da:18:dc:e8:07:3e:d6:23:d2:5d:32:bd:b6:ad:34:5a:35:6e:
         4f:b3:e5:a9:b8:c7:de:50:15:95:ab:52:3f:11:22:3e:dd:ed:
         c4:db:7c:12:bb:48:03:4d:29:8b:32:49:c0:4b:96:b9:69:b6:
         35:68:09:dc:5a:74:07:80:85:51:7d:10:90:36:88:f6:5a:08:
         68:7f:7b:cb:cd:2c:f8:f2:69:6d:85:07:c2:e2:86:bc:b2:a9:
         a9:9d:ed:4f:ef:85:8b:87:7b:ed:14:fb:24:99:d0:48:1d:e2:
         19:13:75:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:15 2025 by rpki-client