Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
File:                     4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json)
Hash identifier:          m7Shy3OCIktosowic9KPA4ZxnUjzgAsFB9xzCwuHdY4=
Subject key identifier:   2B:4E:0D:D9:2A:C5:22:CC:37:40:DC:14:A1:43:9F:2C:9D:4E:B2:AE
Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8
Certificate issuer:       /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
Certificate serial:       628239D7CF47C953BF7EDE84C58FA359FEA4B2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
Manifest number:          E8
Signing time:             Wed 18 Jun 2025 00:47:29 +0000
Manifest this update:     Wed 18 Jun 2025 00:42:29 +0000
Manifest next update:     Thu 19 Jun 2025 04:11:29 +0000
Files and hashes:         1: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=)
                          2: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: 0iU1VE4oIBeR0g+kEvaxFQYjnK8h1fW0reMHFIiSAYk=)
                          3: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=)
                          4: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: n9oD82N/Oc74KjefJWuXbdniXyTRuYdzVFV6P1uLFxM=)
                          5: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: 05KBv20ho05+9nNhARljl3KvN1w1xbUcP6YBmhidjZI=)
                          6: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: 9lXsRq2vH27QU6oONZHHcOI2KgKrR7I1qDb4jmPN0NI=)
                          7: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: 9Ihv0H4rVXFA16hCNxg+L+5sdODslvD0QfVJ8mgOi7k=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl
                          rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 04:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:82:39:d7:cf:47:c9:53:bf:7e:de:84:c5:8f:a3:59:fe:a4:b2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8
        Validity
            Not Before: Jun 18 00:42:29 2025 GMT
            Not After : Jun 19 04:11:29 2025 GMT
        Subject: CN=2B4E0DD92AC522CC3740DC14A1439F2C9D4EB2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:74:49:f0:90:05:a5:4c:21:49:86:4e:c1:78:
                    85:fe:b8:72:39:1c:d2:2f:66:fa:de:60:2c:d6:6e:
                    04:28:7f:0b:ee:3b:63:10:a3:26:20:b3:60:c1:f5:
                    d4:04:9f:f6:8e:ab:73:1b:1f:fc:1e:83:1d:43:9a:
                    9e:c1:e8:33:8d:3b:e0:19:96:6c:81:80:7d:8b:94:
                    2a:32:47:a4:27:30:d6:20:98:25:e6:e0:25:41:40:
                    8b:60:66:2a:4b:9b:89:27:ae:fa:0e:d4:9a:a5:f2:
                    1f:3f:24:ac:82:9b:4b:02:c5:bc:86:bf:9c:3f:12:
                    89:c2:32:48:d2:10:d5:3a:16:91:5e:6c:6c:c4:5e:
                    39:c0:a6:79:f7:8f:aa:95:ca:18:3e:44:f6:ea:a7:
                    95:1e:92:d4:32:ca:13:8c:8d:d2:e2:2f:33:a1:6b:
                    09:ff:e3:2e:e6:53:4f:68:76:16:be:f1:38:f0:d7:
                    37:04:04:58:14:ea:e2:c6:68:30:01:c8:1d:9e:f6:
                    9b:c5:ab:e0:9a:aa:01:2b:79:8f:dc:38:cb:f7:b5:
                    af:a2:26:52:89:4b:fb:23:cb:64:f3:15:98:f3:21:
                    c6:d6:36:fa:5e:00:97:4d:5c:c7:3e:37:5d:d2:2d:
                    ee:f8:49:96:32:3e:c5:32:4d:34:3d:f5:23:6c:7c:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4E:0D:D9:2A:C5:22:CC:37:40:DC:14:A1:43:9F:2C:9D:4E:B2:AE
            X509v3 Authority Key Identifier:
                keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1d:9c:d7:25:4c:d4:9c:e5:7b:2b:35:d4:c9:76:d5:fe:68:
         f1:bc:71:57:2c:ac:d1:96:7b:74:bd:ac:f0:5c:e7:b1:3c:68:
         45:67:37:2e:22:3d:49:c5:3f:14:d8:b1:9f:e4:87:9e:77:3b:
         f6:62:27:46:d0:3b:8d:0d:33:d2:7b:2f:11:0a:77:12:e6:84:
         31:02:bd:32:5d:31:20:ed:84:08:12:55:83:d8:31:91:c5:f1:
         32:9a:16:54:ef:64:cb:1b:4e:eb:d9:99:dd:83:c0:c7:7d:91:
         22:1b:d9:9b:59:59:34:87:f7:db:58:e8:ea:82:57:bd:a5:b0:
         ba:c0:30:f0:f9:bf:30:67:b9:7e:c8:0f:22:e8:ab:1b:e6:af:
         72:a0:ec:44:c7:65:cc:e0:09:2d:11:cf:de:4f:ab:b8:02:26:
         ca:90:c2:b3:18:89:7d:9c:83:49:be:d9:f6:1c:07:e0:de:c6:
         52:11:27:cd:a6:33:c8:c1:6b:2d:a8:dd:89:b9:28:7c:79:3f:
         7d:6d:18:c9:fa:53:94:76:f9:89:8d:29:74:d2:a4:21:a5:31:
         6d:4a:52:ae:42:7d:5b:63:08:85:2c:ff:95:38:3c:42:57:fd:
         60:81:5d:01:b3:cc:1a:65:77:8e:e5:70:47:c9:15:69:81:7c:
         1c:62:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 17:32:28 2025 by rpki-client