Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
File:                     P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft (raw, json)
Hash identifier:          s84rJfw7Rsuxz+spyf+35ibANzEWeaDiOFvD3yY5x2E=
Subject key identifier:   05:5C:3D:66:8D:C1:52:1B:FC:07:A3:03:DC:19:64:1E:91:34:7B:11
Authority key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
Certificate issuer:       /CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Certificate serial:       01965BDEC7F82D755777B0DA092B2FF85FFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
Manifest number:          37
Signing time:             Tue 22 Apr 2025 05:00:48 +0000
Manifest this update:     Tue 22 Apr 2025 05:00:48 +0000
Manifest next update:     Wed 23 Apr 2025 05:00:48 +0000
Files and hashes:         1: P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl (hash: jKbGvhPN3V1zcs4oAHb3eRBm8UkermIYTpXn6rRbC5Q=)
                          2: tO945n8IOH4m4HY-IByza0kUANU.roa (hash: 1Y70k1PM1fySvFZtbmtzuB2FgWQvwNTM4axab3kjR2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:de:c7:f8:2d:75:57:77:b0:da:09:2b:2f:f8:5f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
        Validity
            Not Before: Apr 22 05:00:48 2025 GMT
            Not After : Apr 23 05:00:48 2025 GMT
        Subject: CN=055c3d668dc1521bfc07a303dc19641e91347b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c1:b0:cd:ae:ac:8f:98:7b:33:37:79:61:ef:
                    e7:59:fe:f5:b4:e3:16:77:bb:e1:fa:98:a8:d5:be:
                    a4:dd:18:19:72:c4:c9:f8:35:38:01:ab:9b:2e:e1:
                    ce:1c:c6:0d:09:5c:f9:e2:da:24:b9:05:20:d2:7c:
                    94:29:db:7c:7a:02:21:f4:b0:a9:b9:9f:85:18:c8:
                    c2:02:98:79:e6:b1:d0:97:e4:b8:78:5d:1c:43:2c:
                    df:95:64:ed:a0:dc:db:f5:d0:51:e2:af:b9:58:a8:
                    10:a0:d2:8c:27:bf:a4:a9:89:70:62:2b:3e:2b:1e:
                    9b:12:0c:73:d8:7e:eb:0d:c1:4f:f9:e6:78:4e:2d:
                    42:c1:26:d1:1f:60:c0:40:4f:99:14:c7:c4:ae:e8:
                    7e:1a:06:d8:bc:13:6d:2d:38:e1:45:e6:62:83:3d:
                    d0:4f:93:58:91:82:9f:79:8f:3a:13:a0:d0:79:50:
                    64:0e:15:11:b0:70:8d:a5:bb:b3:04:b9:8e:fa:6b:
                    a6:ff:97:33:2c:3f:45:4a:76:ae:5a:c7:b0:31:16:
                    56:97:0a:10:3e:7e:88:19:5e:b8:a8:23:5d:34:5b:
                    ac:ca:65:29:fe:14:18:9a:ab:20:f0:89:b5:ed:02:
                    2b:ad:1f:64:89:46:66:e9:f3:69:f0:6a:fb:21:d8:
                    b8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5C:3D:66:8D:C1:52:1B:FC:07:A3:03:DC:19:64:1E:91:34:7B:11
            X509v3 Authority Key Identifier:
                keyid:3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d2:87:41:21:2d:a4:65:de:f5:a9:42:16:c7:5c:fc:35:32:
         31:b3:66:3e:54:d6:00:89:45:f8:6d:e0:29:4b:90:c3:a8:b3:
         cb:b9:16:e3:6f:9c:3b:0f:3c:09:39:b1:69:af:b4:ea:6d:38:
         be:89:2e:20:3b:82:70:f1:45:77:63:92:ed:fe:dc:3c:b7:94:
         85:99:03:a3:f3:7c:e6:d6:ed:f8:00:83:04:d2:ab:62:59:af:
         21:21:67:8b:4d:a8:6e:4a:c9:1d:c6:a4:d6:fd:da:90:c0:93:
         9e:a1:04:d6:58:4a:f9:ac:fb:8b:94:34:c8:7e:8b:8f:54:fe:
         f5:1f:05:75:0b:87:77:19:60:37:0a:c5:6d:0d:97:1e:4e:d3:
         20:fb:2a:78:b8:cd:d2:19:96:0c:68:a1:e1:8f:0c:5d:b3:3d:
         98:e1:e6:57:5b:35:e9:37:0a:94:7f:af:84:71:b8:6a:8e:9a:
         ab:f8:45:e4:1e:e2:76:97:59:8a:ae:3c:1d:17:e5:90:22:90:
         23:d4:ac:a5:5e:53:fa:23:ff:c8:42:65:f1:37:55:7e:ff:00:
         9c:64:83:d2:c0:f0:be:f6:f1:5b:6b:93:b3:41:c0:08:be:d8:
         4a:f7:d9:9f:48:8d:2f:2c:4e:73:4a:18:be:c0:cd:52:c1:a4:
         bb:e7:eb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:46 2025 by rpki-client