RPKI Manifest
Location:                 nostromo.heficed.net/repo/1123671/0/4D8B2DF8825F527D08CDD6A123F1D21CAB57E45D.mft (download)

Subject key identifier:   6A:8F:64:74:60:41:4F:4F:52:1C:8C:9D:12:56:F8:AC:51:81:93:EB
Authority key identifier: 4D:8B:2D:F8:82:5F:52:7D:08:CD:D6:A1:23:F1:D2:1C:AB:57:E4:5D
Manifest Number:          0264
Files:
    1: 3138352e3137322e36372e302f32342d3234203d3e203137323136.roa
	hash MJiRl+MPaNV28d6ZnOvzCrv7uVwIfQTx+o3uCAXBIy8=
    2: 4D8B2DF8825F527D08CDD6A123F1D21CAB57E45D.crl
	hash LMgUHk6idbYtwkU20Oi55BFGi/MRroy8fLrtZDa5ZVM=
    3: 3138352e3137322e36342e302f32342d3234203d3e203430363736.roa
	hash cwoeSdTESPW8BimNrxjh4WZIVskyCjgkQ1wnKxPWO28=
    4: 3138352e3137322e36342e302f32322d3234203d3e203631333137.roa
	hash i7dMlDaANXJ5WP9ItbxyXyT8TxDsIMAz6lH8xSMdyLw=
    5: 3138352e3137322e36372e302f32342d3234203d3e20333937333733.roa
	hash ssfnSmKY0Vgb94WAHruazFspg7JDHi6Z6lOuUHoa1Ck=
    6: 3138352e3137322e36352e302f32342d3234203d3e20313938363531.roa
	hash 2JP6M90/fQGcaV6Pt7xEQi6B6ENJTPuQvXIU5e2fR0g=
    7: 326130623a3530303a3a2f32392d3438203d3e203631333137.roa
	hash LwzBxaURUEuFjUH/9CwTbeZEsfKEc7XrWEpgFEmi5ts=
    8: 3138352e3137322e36342e302f32342d3234203d3e20333937333733.roa
	hash gvhAiGOzxa9F7CoKYHkfMdEIc5308FrZnhjDR6FHp/o=

--
$ test-mft -p nostromo.heficed.net/repo/1123671/0/4D8B2DF8825F527D08CDD6A123F1D21CAB57E45D.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:08:6d:04:48:91:2d:1a:c4:04:92:e5:02:db:70:4b:8d:76:83:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8b2df8825f527d08cdd6a123f1d21cab57e45d
        Validity
            Not Before: Sep 17 12:55:00 2021 GMT
            Not After : Sep 24 13:00:00 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:17:05:53:22:cd:6f:fb:45:3e:2b:29:65:
                    cf:e7:49:27:e2:20:0f:c5:58:6c:66:c6:eb:4d:8f:
                    69:db:11:79:ef:47:33:db:c4:62:a1:68:1e:51:0d:
                    38:66:53:58:6b:50:ec:d8:84:07:d4:f7:ca:f9:91:
                    ee:af:18:46:31:7a:b7:eb:b1:b5:f1:f8:af:e1:4b:
                    cb:13:72:d4:49:85:9e:20:d0:a9:a8:f5:df:4e:1b:
                    26:23:b1:d7:c2:ff:7a:33:b9:be:02:a1:2f:8b:76:
                    91:76:15:22:03:88:38:a0:0e:c3:e5:77:ed:0a:63:
                    6d:d1:be:5d:58:a9:54:6e:04:8b:a0:df:ae:fb:3f:
                    9d:e9:31:f9:b1:d9:a5:d7:5b:62:bf:92:f4:63:94:
                    c4:1e:a9:73:b2:aa:33:33:23:25:75:87:4a:d1:af:
                    1a:27:60:c7:ff:9f:66:c1:02:e1:65:9c:34:f3:26:
                    1b:b3:f1:4f:3b:c5:b0:d9:3e:99:97:c6:b3:ff:a7:
                    b5:96:14:52:c7:15:14:3c:41:eb:e4:6e:40:88:77:
                    2d:29:68:4e:62:cd:bd:f7:c8:90:86:f6:11:89:76:
                    17:76:f7:79:45:82:a7:32:3b:9e:66:76:15:04:ea:
                    d5:c9:d0:14:79:09:c8:84:1b:15:38:bb:e0:26:7c:
                    a1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6A:8F:64:74:60:41:4F:4F:52:1C:8C:9D:12:56:F8:AC:51:81:93:EB
            X509v3 Authority Key Identifier: 
                keyid:4D:8B:2D:F8:82:5F:52:7D:08:CD:D6:A1:23:F1:D2:1C:AB:57:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123671/0/4D8B2DF8825F527D08CDD6A123F1D21CAB57E45D.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYst-IJfUn0IzdahI_HSHKtX5F0.cer

            Subject Information Access: 
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123671/0/4D8B2DF8825F527D08CDD6A123F1D21CAB57E45D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:78:73:be:6a:d1:68:61:23:6e:bd:cb:5c:f8:62:a4:e3:fd:
         54:b2:dd:fa:7b:de:b2:1c:74:75:3f:ff:34:e8:92:2b:84:36:
         78:88:74:9b:57:05:86:8d:7a:4e:9a:55:bd:28:b3:70:53:bc:
         4d:89:55:52:3e:a2:1b:f3:f2:a5:16:07:27:7f:66:c9:18:43:
         bc:2b:c6:24:0b:d8:e8:49:9e:51:31:e7:b7:aa:0b:3d:10:6e:
         b9:33:9e:2d:06:c4:1c:37:bb:58:e5:65:68:82:88:7e:4b:64:
         50:3e:19:79:a9:8a:97:8e:9a:12:ed:ff:a4:a1:a6:22:ac:c1:
         d3:12:e9:16:86:8d:8d:78:8e:9c:5a:f4:70:e8:2c:1b:31:14:
         ed:ee:4d:a4:a0:98:e6:d9:e5:0f:61:d6:d3:e6:94:95:40:90:
         0f:9d:fb:5b:c5:36:f9:35:71:4b:56:95:d3:9a:8d:40:aa:d4:
         54:52:85:d3:fa:96:01:94:b6:dc:b5:f5:07:2f:84:0e:c8:81:
         35:51:d4:cb:59:cf:52:35:31:2e:55:ed:75:d3:12:43:da:2b:
         f0:17:d9:a2:9f:c6:04:7b:1a:48:0f:0d:4e:be:01:ad:cd:c4:
         6a:5d:b1:e8:e0:eb:91:10:dd:65:3c:95:f0:a3:8a:f8:c9:be:
         22:b8:4d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Fri Sep 17 18:13:19 2021 by LibreSSL & rpki-client.