Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
File:                     V-L2mlyy1YBNIamwRboxSusaqh8.mft (raw, json)
Hash identifier:          1PGjX9TuTcjH9LeAMp68nZkYPm6QNGO7znXHoTwfxqk=
Subject key identifier:   53:9C:69:D6:7B:E3:B8:12:5F:27:CC:D9:C1:9C:AF:F7:7F:1A:CD:95
Authority key identifier: 57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F
Certificate issuer:       /CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f
Certificate serial:       01965D5F282AB92E7FBA230C39EC33204297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
Manifest number:          14FF
Signing time:             Tue 22 Apr 2025 12:00:39 +0000
Manifest this update:     Tue 22 Apr 2025 12:00:39 +0000
Manifest next update:     Wed 23 Apr 2025 12:00:39 +0000
Files and hashes:         1: V-L2mlyy1YBNIamwRboxSusaqh8.crl (hash: ELnp5ccg25r3w8CFeyO3Vi3dXxUxcr7gCLgCb68/WNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5d:5f:28:2a:b9:2e:7f:ba:23:0c:39:ec:33:20:42:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f
        Validity
            Not Before: Apr 22 12:00:39 2025 GMT
            Not After : Apr 23 12:00:39 2025 GMT
        Subject: CN=539c69d67be3b8125f27ccd9c19caff77f1acd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:69:28:2a:3b:a5:b7:19:c6:30:59:a4:e2:a5:
                    45:7b:38:a8:a1:b4:01:2c:69:e1:a6:2f:4f:c4:bd:
                    92:f1:c3:12:fb:4c:a6:5e:91:17:ac:ab:a7:9d:36:
                    22:b7:ad:28:a5:59:54:8f:38:0f:20:ed:ae:57:63:
                    33:e4:87:3a:ff:f1:c3:aa:a5:00:c3:a6:ec:4e:5d:
                    9b:1a:22:28:29:34:51:50:f0:86:22:c2:f0:b8:05:
                    e3:bd:17:76:47:89:bf:88:5f:30:7d:48:09:ca:2e:
                    ba:c8:62:f1:bf:5f:99:c0:3d:38:70:ee:88:a2:dd:
                    08:00:77:d3:32:13:5f:17:5d:ab:d0:34:4c:a5:8a:
                    7a:95:e1:ff:14:18:08:24:9a:0a:f8:5b:83:24:01:
                    60:c8:0a:54:da:b8:43:18:5d:39:78:4d:a9:c1:c6:
                    86:7a:aa:c9:f4:5c:1f:30:ca:5e:83:f5:82:13:6f:
                    aa:29:09:e1:82:82:0d:d4:7d:3a:cb:ad:7e:16:20:
                    f9:be:d0:f4:a1:87:cf:c5:66:90:b0:b9:cd:e9:30:
                    45:fd:60:8d:67:d3:d6:31:4f:fe:a8:06:76:a5:2d:
                    a2:7a:dd:1f:5a:41:f2:1f:1f:76:55:be:c8:09:9a:
                    18:42:ce:2c:df:47:96:47:5b:70:05:92:4d:51:e9:
                    a7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9C:69:D6:7B:E3:B8:12:5F:27:CC:D9:C1:9C:AF:F7:7F:1A:CD:95
            X509v3 Authority Key Identifier:
                keyid:57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a5:73:74:a2:24:e1:8a:1e:75:aa:23:ed:82:1e:46:21:93:
         79:02:01:c7:79:18:ff:2e:d6:85:0a:0c:1f:10:21:bb:a0:12:
         7b:59:e1:2c:67:7b:63:cb:0c:32:80:4d:ec:f3:e3:62:3b:bb:
         20:3a:35:f2:77:89:bb:12:2e:73:55:57:c0:3a:3f:8e:90:ae:
         22:8e:40:46:22:b0:3f:08:cb:c2:64:1a:47:c4:6f:68:70:2e:
         19:93:33:2a:9b:12:d8:1e:06:a8:c5:9e:1d:71:22:4a:58:58:
         6c:60:54:4f:d0:cf:41:55:a0:96:f0:35:4c:bf:5d:60:28:ac:
         89:92:78:07:83:02:7f:c0:b0:12:8b:af:dd:ea:41:7f:b7:ac:
         8e:bf:86:c3:c2:88:b9:13:bb:7f:f7:25:e4:80:f0:7d:e6:c1:
         bf:b1:f3:e0:d6:a1:ed:e3:ca:8f:02:24:a2:2d:02:ca:d7:e8:
         51:25:c9:6f:2c:17:f7:62:23:c5:55:49:db:3e:f9:62:c4:e5:
         9f:47:ce:c1:ea:44:95:45:43:00:4f:00:3d:c9:aa:c0:0b:21:
         1f:12:8e:96:91:a9:79:6e:58:ed:13:98:d0:57:e9:e4:07:2d:
         fa:24:e6:12:5e:e3:8e:79:7a:0c:c9:c6:0a:66:a4:3d:8c:0e:
         b5:a1:d5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:38:18 2025 by rpki-client