Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
File:                     B70DB680698C8AC70A7CB7CA607541E554249317.mft (raw, json)
Hash identifier:          fF6rVddSsvlfFplkVegQ679N8YFPgx1ANvIOd/vjA00=
Subject key identifier:   9A:0D:DF:43:5A:28:17:3E:F6:98:4D:C5:2C:16:88:B1:78:DA:37:55
Authority key identifier: B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17
Certificate issuer:       /CN=b70db680698c8ac70a7cb7ca607541e554249317
Certificate serial:       246A914140EBB651648485355DFCE159C4EA673B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
Manifest number:          0186
Signing time:             Sun 27 Apr 2025 08:41:17 +0000
Manifest this update:     Sun 27 Apr 2025 08:36:15 +0000
Manifest next update:     Mon 28 Apr 2025 11:36:15 +0000
Files and hashes:         1: B70DB680698C8AC70A7CB7CA607541E554249317.crl (hash: J+Q2r5Jwtyfl2byYAu8wIhz3l84DapbDJQ+JogJ1ag8=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6a:91:41:40:eb:b6:51:64:84:85:35:5d:fc:e1:59:c4:ea:67:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70db680698c8ac70a7cb7ca607541e554249317
        Validity
            Not Before: Apr 27 08:36:15 2025 GMT
            Not After : Apr 28 11:36:15 2025 GMT
        Subject: CN=9A0DDF435A28173EF6984DC52C1688B178DA3755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:3d:73:81:37:e6:64:cd:ce:3b:3c:a1:53:
                    7c:0c:ea:24:6f:45:31:80:c8:34:fe:90:fb:69:95:
                    8b:61:26:a9:14:14:20:01:3e:e6:e5:ac:35:4c:15:
                    b5:86:b6:9a:29:b4:9f:e0:6e:07:af:fd:06:86:dd:
                    33:a2:24:be:0d:bf:ba:9f:ee:58:5a:95:3e:b4:5a:
                    ed:8e:1e:b0:73:6e:18:6d:b6:d3:0e:37:84:de:74:
                    f7:f5:d0:19:84:3f:4a:06:56:e3:c7:5d:6a:bc:84:
                    3a:b8:85:25:57:67:c8:9d:75:85:e2:51:2e:f3:a0:
                    d2:da:07:36:c9:75:53:aa:ea:b5:a3:28:dd:a4:91:
                    03:cc:dd:a1:d3:89:54:f5:65:76:84:af:4f:9d:3f:
                    cc:3b:1b:1e:54:7e:6d:ff:88:0f:82:09:5d:83:b2:
                    4f:6f:db:e7:fc:4d:68:cd:ad:a9:e5:b0:06:73:96:
                    bb:29:aa:17:f0:81:93:26:60:20:46:e5:ab:5a:87:
                    fb:5d:13:d3:d3:74:b8:f6:07:93:62:33:2f:7e:47:
                    77:ef:11:19:34:9e:0d:b4:d7:f1:e8:82:bc:5a:27:
                    e9:3a:34:24:22:39:08:10:81:37:f8:75:ac:80:44:
                    a7:1a:b3:e8:1e:d3:3f:c4:f1:f9:6f:f7:a4:8e:5f:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0D:DF:43:5A:28:17:3E:F6:98:4D:C5:2C:16:88:B1:78:DA:37:55
            X509v3 Authority Key Identifier:
                keyid:B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:30:f4:02:90:2b:ef:05:9d:15:5b:a0:a2:9b:9a:e9:62:3d:
         32:65:bb:87:0d:16:b5:82:95:f7:d7:e9:68:84:cf:76:94:ad:
         00:5c:ef:ab:64:46:ce:7f:25:37:de:57:46:bf:99:2b:0a:a3:
         e5:70:bc:c2:76:b7:35:44:bf:08:a8:cb:9b:98:30:14:0f:ec:
         a0:65:d3:2e:13:96:22:9f:ba:72:5b:78:ba:16:bf:88:19:57:
         86:78:f5:93:b0:f2:0e:3f:2c:c1:24:5c:0b:cc:84:d8:07:5a:
         ff:bc:78:5e:6f:04:b7:35:1b:65:d1:6e:6f:12:a4:11:d4:70:
         82:17:2d:45:50:63:94:8a:11:ca:10:1c:89:2d:0a:20:8e:8f:
         71:69:5a:c9:13:f6:33:7b:72:16:ca:08:f2:f4:3f:e7:d7:06:
         0b:2b:15:42:f2:31:a5:66:f6:0c:05:c1:d6:ec:59:01:d0:23:
         51:3a:cb:bc:ea:c9:16:90:6c:5b:1d:46:3d:05:4f:d6:b5:6b:
         a4:05:84:c3:1b:54:32:9e:bc:6c:3a:b6:a6:c4:cf:6a:12:fd:
         16:b3:f0:33:40:71:22:e1:70:0e:c2:4c:d6:14:cf:83:40:4c:
         dd:7f:94:a8:df:04:d7:0b:b4:14:98:ff:c6:6a:9b:69:b9:0a:
         d4:f8:96:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:47:22 2025 by rpki-client