Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
File:                     6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft (raw, json)
Hash identifier:          AbJikigqvBoosM9kFru4Gl+lhmGh7cDtk3b4eZNL0gE=
Subject key identifier:   2C:7E:C4:BA:01:A8:C9:C4:FC:4A:AC:29:58:0D:8B:D9:EF:2E:2E:14
Authority key identifier: E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4
Certificate issuer:       /CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
Certificate serial:       019655383C67AB2AF1FFD99665CF34342252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
Manifest number:          0BE3
Signing time:             Sun 20 Apr 2025 22:01:10 +0000
Manifest this update:     Sun 20 Apr 2025 22:01:10 +0000
Manifest next update:     Mon 21 Apr 2025 22:01:10 +0000
Files and hashes:         1: 6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl (hash: da6zr74w8VsNzuGUF/lU92FiCs5n6ph5rDs1O/PawHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:38:3c:67:ab:2a:f1:ff:d9:96:65:cf:34:34:22:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8258e150e922fca5cb85b6fe1c68b805c9b6ef4
        Validity
            Not Before: Apr 20 22:01:10 2025 GMT
            Not After : Apr 21 22:01:10 2025 GMT
        Subject: CN=2c7ec4ba01a8c9c4fc4aac29580d8bd9ef2e2e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:81:ab:63:9a:21:5e:35:dd:08:57:f4:3a:
                    8b:f3:64:e2:e9:c9:2e:b5:17:23:91:dc:5b:2c:5c:
                    bc:0d:3d:78:5f:e6:07:13:06:3d:b2:5d:11:16:12:
                    b0:93:58:1f:1f:c2:27:63:a8:cc:3e:47:58:0b:4b:
                    6a:d2:be:dd:87:36:c8:15:02:fd:11:8d:51:42:1d:
                    4e:8e:db:99:42:21:06:80:27:0c:cd:54:cf:9b:1d:
                    45:c4:d5:a0:ab:54:68:2c:2b:4f:f7:83:fb:07:25:
                    69:d7:d8:b3:46:64:e8:f9:ff:68:dc:f4:ff:86:7e:
                    6f:6f:cc:12:25:52:d1:0f:34:a1:0e:78:65:3e:35:
                    84:11:2b:f8:2a:d1:c6:38:cb:f7:bb:41:7a:c2:65:
                    bc:1a:2f:20:a6:fb:76:a3:66:82:db:57:4a:d0:ad:
                    6f:22:94:c8:59:26:8e:69:18:01:9c:06:fd:61:67:
                    33:af:52:a0:c6:66:0e:cf:49:05:eb:f1:11:16:d3:
                    a8:a5:3f:e4:5d:0c:9b:28:58:da:0a:9e:87:7d:c7:
                    41:e1:3c:5a:3c:8d:f8:e1:49:f5:c4:b1:f5:ea:a6:
                    36:28:41:ae:f6:40:09:3b:cc:86:2a:d4:37:fe:65:
                    22:b3:36:ea:af:2f:88:ae:0c:e1:58:89:55:42:10:
                    f3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7E:C4:BA:01:A8:C9:C4:FC:4A:AC:29:58:0D:8B:D9:EF:2E:2E:14
            X509v3 Authority Key Identifier:
                keyid:E8:25:8E:15:0E:92:2F:CA:5C:B8:5B:6F:E1:C6:8B:80:5C:9B:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CWOFQ6SL8pcuFtv4caLgFybbvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/90dcb7-b91e-49a8-97d9-43f6e81f1ae8/1/6CWOFQ6SL8pcuFtv4caLgFybbvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:23:af:09:bc:9e:54:0a:e6:a5:5c:6c:de:42:76:9a:43:32:
         b9:cd:c3:68:70:13:70:77:15:7a:52:64:e0:bc:80:71:db:18:
         40:fb:12:39:c4:a3:e4:16:22:fd:91:c7:20:2b:a6:ae:d0:89:
         9b:82:0e:8a:87:24:89:39:b6:43:79:28:ff:06:14:ae:de:54:
         ab:04:04:1a:2e:5f:c4:5c:b8:26:df:cf:83:8e:49:3d:93:96:
         55:9b:3a:57:8b:54:08:1c:85:b8:73:fb:92:bb:18:97:af:12:
         ba:56:18:9b:ab:22:d7:83:87:cf:4c:2f:f7:40:f3:eb:7a:5a:
         ad:df:c8:11:e3:4c:14:02:45:fb:fa:24:04:5a:2f:98:8f:57:
         af:72:cd:66:2f:a2:25:f2:b6:4c:54:fa:4e:91:90:93:f9:e9:
         77:40:c4:df:61:17:a2:5d:ed:fd:07:af:72:aa:35:9e:95:bd:
         38:9b:66:ec:49:ff:7f:c2:81:39:9f:76:3a:0b:ab:a1:3f:37:
         12:63:9f:eb:5d:4c:b5:83:34:32:8d:bb:6f:f1:54:12:83:24:
         a7:d1:77:81:fa:70:0c:74:e9:54:90:f8:0d:0b:9a:45:a7:b8:
         f6:05:35:8a:51:ef:76:84:96:4d:8d:26:46:63:d4:c2:1d:8c:
         37:f2:34:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:54:23 2025 by rpki-client