Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File:                     6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier:          eyF6nxbpZFYfyVwNzjIzr7DVmlRWmkXNcvnRot966Cc=
Subject key identifier:   30:1B:BC:69:E5:81:55:44:5F:55:1D:CC:69:5C:91:BE:82:0F:5D:BC
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer:       /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial:       01965D280C6D711EE92ACA2E0A9BE1324810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number:          0CFF
Signing time:             Tue 22 Apr 2025 11:00:27 +0000
Manifest this update:     Tue 22 Apr 2025 11:00:27 +0000
Manifest next update:     Wed 23 Apr 2025 11:00:27 +0000
Files and hashes:         1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: oG4Z5qvFZ84dchqsEuzbjzurNacIm7OCFG3Cz+EZs8E=)
                          2: ProilHJF12XNjqluZhoel5qmzGE.roa (hash: vqODFTpOMw/oRhmj5asnKLbaDrVfLd9DrvwDm7QE1Gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5d:28:0c:6d:71:1e:e9:2a:ca:2e:0a:9b:e1:32:48:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
        Validity
            Not Before: Apr 22 11:00:27 2025 GMT
            Not After : Apr 23 11:00:27 2025 GMT
        Subject: CN=301bbc69e58155445f551dcc695c91be820f5dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:07:d7:4e:86:ca:9a:c1:27:35:1f:be:59:
                    68:30:41:5f:b4:eb:a4:86:8b:da:87:43:2a:a0:50:
                    72:59:1e:3a:8b:d2:96:f4:6c:be:b7:be:e6:cb:2b:
                    bd:4b:57:d2:1e:92:fc:6e:62:3a:67:11:f0:62:88:
                    d8:e3:51:57:d5:21:b8:b3:5a:e2:63:6e:7c:54:15:
                    bf:93:a0:f7:3c:fd:9a:e2:d3:fd:71:ba:73:53:9f:
                    6f:d0:0f:db:05:0b:0b:06:ea:a7:91:1b:69:02:6a:
                    aa:7e:6d:50:25:2d:53:e9:53:c1:55:3f:25:fc:c3:
                    1a:62:27:e4:52:a7:9c:9d:5b:b3:b1:3a:5d:b9:34:
                    ba:f0:d7:07:0d:2b:fb:55:80:64:c1:fe:0d:48:49:
                    80:3b:26:ff:08:df:17:d3:89:39:37:c4:a8:8c:33:
                    96:26:0f:98:28:41:87:ba:a0:d8:24:6a:57:fb:3f:
                    c3:16:49:87:7f:ab:c2:c0:40:64:5e:76:1a:ac:b2:
                    b2:bd:d2:b9:87:42:0e:c7:10:39:5a:56:55:b9:58:
                    b3:97:4e:b8:39:5d:1f:b1:34:59:30:9c:f8:26:4f:
                    bd:ef:9f:46:7c:99:f3:54:3b:b1:78:5a:c8:b0:48:
                    71:4b:50:39:2e:6f:6e:e5:d1:de:cd:49:f5:37:b7:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1B:BC:69:E5:81:55:44:5F:55:1D:CC:69:5C:91:BE:82:0F:5D:BC
            X509v3 Authority Key Identifier:
                keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e0:27:ea:c0:5f:85:9e:7a:b2:eb:3f:dd:6c:7d:86:b6:a5:
         38:ba:95:a9:8c:a6:0d:56:a5:d9:aa:2f:7b:12:96:93:10:aa:
         3c:00:b6:0b:5b:c3:60:88:74:be:21:f1:ab:1e:44:b0:49:e7:
         e2:c6:53:73:b2:14:15:c8:b9:9e:d6:6f:e4:e4:b1:f9:82:45:
         50:ad:02:b1:18:ad:6b:e5:b8:16:ca:12:49:68:94:37:15:d4:
         20:51:3f:dc:7a:65:d1:90:0e:11:19:f5:3c:c4:3b:50:52:a7:
         c9:ea:84:1f:9b:ad:4a:dc:da:00:48:8d:d5:77:c3:71:0a:10:
         37:5a:32:72:14:18:18:2b:b6:92:e6:b5:34:bc:19:8f:ef:51:
         c0:3b:9a:4a:a4:19:57:61:84:e8:59:40:bf:f7:8c:da:c7:09:
         f4:f6:c0:5b:3e:cc:3e:00:65:68:4b:2c:38:cb:0c:f0:b7:05:
         8d:87:cb:bf:69:81:78:12:9f:d2:4e:39:8f:5d:83:8e:af:7c:
         de:6b:60:78:13:10:5f:26:96:67:0b:05:59:56:57:b0:90:ab:
         da:c9:c0:98:04:b0:16:b7:d8:db:98:6b:ce:5e:67:31:7d:02:
         a7:79:fa:ff:c6:0b:8e:a4:9d:7d:ad:94:73:1f:14:a9:dc:34:
         85:d8:06:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:01:15 2025 by rpki-client