Manifest

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
File:                     20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json)
Hash identifier:          KVicg2tyzp7UzLiDDwM05r5IHd4JbyW2C+yvI9uvfN0=
Subject key identifier:   91:B1:1A:70:FB:BF:3F:D6:9B:83:EB:AA:13:AA:5C:F0:4B:F1:2B:A3
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Certificate issuer:       /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial:       5B2B3600D23D5325CAA895C65697DD85857271F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
Manifest number:          A9
Signing time:             Thu 01 May 2025 12:09:48 +0000
Manifest this update:     Thu 01 May 2025 12:04:48 +0000
Manifest next update:     Fri 02 May 2025 12:57:48 +0000
Files and hashes:         1: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: r+7wcQmOVTyctVOoT+neGih9SwYwxoelNtUNlUrK5Sg=)
                          2: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: LJae5qX98q1IoVhcF3MovFKodtof25tEPl+Vd+qKFHU=)
                          3: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: sX4clBllsnOe26N+axHOkcAsIye3vArF/kg1Z4Off60=)
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
                          rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 12:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2b:36:00:d2:3d:53:25:ca:a8:95:c6:56:97:dd:85:85:72:71:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
        Validity
            Not Before: May  1 12:04:48 2025 GMT
            Not After : May  2 12:57:48 2025 GMT
        Subject: CN=91B11A70FBBF3FD69B83EBAA13AA5CF04BF12BA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:5e:46:0b:04:8e:48:2a:24:3d:92:cb:5b:49:
                    d2:43:b2:e9:d4:89:d7:ce:c3:98:f7:a0:e6:fa:56:
                    87:e3:e6:c0:34:23:5a:75:da:51:e6:f5:26:87:9e:
                    e0:24:57:77:5b:b9:97:9e:55:49:e3:b2:e7:4c:20:
                    20:3a:36:5a:4e:26:6b:99:49:91:57:a0:a9:10:b5:
                    ca:b7:e1:e2:e5:ad:23:fb:ed:da:89:86:6f:ad:0e:
                    87:e4:a9:3e:7a:21:52:ee:04:c4:4a:c1:93:81:40:
                    af:9e:7e:47:6a:84:ac:9c:41:60:63:ef:89:ad:17:
                    5f:6f:7b:9d:00:f1:26:5e:cd:3f:e7:37:14:98:04:
                    d4:9e:7d:e6:e6:07:9e:c3:d8:8d:09:9e:6a:66:b4:
                    1e:6e:59:6e:5c:de:41:e7:7d:04:ba:9f:e1:d5:1d:
                    a8:15:2a:28:02:21:c7:18:90:5d:6c:a0:a8:3d:d8:
                    30:f3:c4:bf:54:64:8a:f3:f2:8d:c3:3f:39:fb:7b:
                    47:29:3f:6e:98:2f:ef:ff:e8:64:39:8f:cc:09:89:
                    70:4a:62:21:51:d9:f8:b0:b0:f8:78:7f:d4:c5:2b:
                    6f:60:5b:5d:c7:10:a2:10:e4:92:eb:cd:b5:e7:5b:
                    bc:89:4e:32:56:bc:c6:0d:99:97:2a:da:81:6b:90:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B1:1A:70:FB:BF:3F:D6:9B:83:EB:AA:13:AA:5C:F0:4B:F1:2B:A3
            X509v3 Authority Key Identifier:
                keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:78:90:0e:8a:ba:d2:c6:8e:e6:2c:80:59:e3:9c:77:91:bf:
         4d:1e:07:8e:8c:0c:28:01:19:88:c9:d0:d4:41:bc:c0:91:ee:
         3b:b5:f9:54:b0:12:72:75:a8:15:8d:61:16:c9:3f:4b:16:ea:
         07:c5:fc:26:87:f7:dc:0f:49:33:c8:e6:c3:47:da:e8:8d:fe:
         ac:18:31:67:76:37:70:a0:27:73:f1:60:8d:e1:52:61:8b:9b:
         5c:41:ec:92:52:63:b9:02:23:55:5e:5a:5d:83:c8:9e:be:0f:
         98:6d:c3:57:e2:63:24:35:21:35:c9:83:cd:d4:36:6d:b2:7f:
         48:41:9a:58:17:8d:bf:70:61:1b:c6:bd:4e:87:71:2a:dc:88:
         9f:4f:ae:fc:47:8c:ee:bd:36:13:5a:6e:91:c8:38:73:f0:7e:
         ac:7f:69:23:ad:72:ef:d8:66:e8:df:1e:84:d6:be:61:54:c8:
         19:7d:32:ed:f7:fe:b6:aa:c3:7b:48:bb:df:a9:17:c6:9e:55:
         c4:6f:36:41:31:2a:02:e3:a2:da:94:01:3e:2d:98:bd:1b:70:
         49:53:3b:79:2b:98:53:5a:1a:bf:4f:23:e4:39:bf:a9:0f:7d:
         59:35:b9:f4:1d:57:a7:ec:2e:cd:f7:b2:60:8e:92:57:0f:e9:
         19:4a:19:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:57:19 2025 by rpki-client