Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
File:                     AZrRgkvlRhY7SB_ElkegUIsia_Q.mft (raw, json)
Hash identifier:          uMDO9AXdJ086D17dpLqgTknPn1e2tBi/r/n076i2QJg=
Subject key identifier:   AC:52:5C:82:B7:96:ED:18:0F:77:E2:18:54:40:69:6D:48:F0:51:5B
Authority key identifier: 01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4
Certificate issuer:       /CN=019ad1824be546163b481fc49647a0508b226bf4
Certificate serial:       0196515BAEBCE2012D87E27F38737F13475F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
Manifest number:          14FF
Signing time:             Sun 20 Apr 2025 04:01:24 +0000
Manifest this update:     Sun 20 Apr 2025 04:01:24 +0000
Manifest next update:     Mon 21 Apr 2025 04:01:24 +0000
Files and hashes:         1: 6G5UyWYOcJqaZDYadc20nbrYpA0.roa (hash: ETSg3Pbyr8/XAZHCtLRsDnOzU/+wNzLPF1Cam9hc2kY=)
                          2: AZrRgkvlRhY7SB_ElkegUIsia_Q.crl (hash: BYgs/OuewEQYLU5WFpvhjQxchsAdMWYIPy98+CpsBj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:5b:ae:bc:e2:01:2d:87:e2:7f:38:73:7f:13:47:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019ad1824be546163b481fc49647a0508b226bf4
        Validity
            Not Before: Apr 20 04:01:24 2025 GMT
            Not After : Apr 21 04:01:24 2025 GMT
        Subject: CN=ac525c82b796ed180f77e2185440696d48f0515b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:5c:98:cc:1f:9a:a0:fe:88:c5:85:44:d1:
                    ef:25:db:b1:77:ae:88:7b:03:1b:b6:61:c2:75:a3:
                    04:0d:bb:b0:c7:61:56:38:5a:30:10:34:7e:56:35:
                    79:76:e1:14:af:cd:ca:af:b6:a3:54:29:e8:cb:9f:
                    72:8f:32:1b:06:06:8d:78:db:4f:b6:b2:31:0e:50:
                    3b:36:a6:79:c1:b3:0d:31:8c:49:89:8c:c4:30:35:
                    d3:16:34:2e:23:8b:21:68:48:f8:5e:1b:52:ea:03:
                    84:63:7d:9f:58:0a:c2:fb:dd:f3:1b:09:fe:ed:96:
                    0d:a9:e3:6d:56:6b:d7:ee:58:48:48:7e:31:eb:28:
                    17:a7:06:cd:5d:77:28:dd:89:7c:bb:ca:5c:66:a9:
                    63:df:46:64:4b:dc:1c:53:ef:aa:52:61:b0:d5:38:
                    c9:e1:01:30:e3:95:e6:34:d7:fe:d2:57:f8:01:3d:
                    3e:7d:31:5c:1c:bb:a2:0b:5c:01:3b:b3:64:13:25:
                    a2:2e:33:28:e6:9c:c9:0f:c2:12:2a:bf:7f:4b:85:
                    45:f2:09:51:98:48:65:41:ed:d1:ab:03:5a:34:f4:
                    93:39:46:d3:6b:98:55:e8:c2:19:d3:e4:16:61:e8:
                    8b:e9:9f:8b:cb:bf:39:06:f2:99:ec:f2:81:89:e4:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:52:5C:82:B7:96:ED:18:0F:77:E2:18:54:40:69:6D:48:F0:51:5B
            X509v3 Authority Key Identifier:
                keyid:01:9A:D1:82:4B:E5:46:16:3B:48:1F:C4:96:47:A0:50:8B:22:6B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZrRgkvlRhY7SB_ElkegUIsia_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6248ec-204f-459b-904c-e8e13bb0e084/1/AZrRgkvlRhY7SB_ElkegUIsia_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ed:74:23:f1:40:4e:bb:f5:f7:23:2e:e3:a0:b2:50:5f:93:
         41:24:c4:70:7b:2d:e7:ab:c4:5d:42:bc:90:a3:25:50:7b:bf:
         23:19:f3:eb:a5:7e:55:ad:7a:70:79:60:6f:90:0f:32:45:97:
         c2:72:20:49:9f:64:92:90:4b:d4:60:53:c9:2e:1b:f7:16:0e:
         63:f9:25:08:7c:20:2c:f3:9a:0f:85:4f:da:e7:93:ff:3e:dc:
         b7:09:13:8e:c7:ce:ec:6a:a8:42:78:67:b9:23:6e:a1:f9:71:
         ed:2a:b0:9d:87:65:16:a3:86:8a:57:e4:bb:cd:36:88:f9:ec:
         81:1c:eb:59:03:e9:9b:5d:83:36:1e:72:79:a6:ab:74:f2:f5:
         4b:fb:c5:9b:88:03:14:c8:ba:27:6f:af:1d:3e:6f:e4:c0:8e:
         d4:74:e0:52:2d:b7:e1:41:19:6a:c9:47:15:da:f0:ef:c0:cc:
         88:7e:e5:0d:2a:d8:e1:cd:42:80:3d:93:c6:10:a6:a9:d8:bb:
         f8:89:8a:d6:de:11:92:90:5c:6a:c0:5d:1e:81:f1:19:4d:bf:
         af:be:49:ec:f3:bd:8d:67:61:3f:b4:f0:90:96:93:a0:da:df:
         cd:9c:23:bc:44:89:17:0c:fa:ca:96:c7:2b:a8:9d:a3:de:23:
         37:18:3e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:20:01 2025 by rpki-client