Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File:                     4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier:          B0/0iJ7ranNt+wY6kwmeYkZwgBHcKq0Tx1bIgsoWa30=
Subject key identifier:   02:27:CE:B7:E4:74:D4:B8:03:24:45:40:D3:D4:E0:E0:2D:EA:3C:83
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer:       /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial:       01965B71041AB150360406773489BA099FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number:          05C7
Signing time:             Tue 22 Apr 2025 03:00:55 +0000
Manifest this update:     Tue 22 Apr 2025 03:00:55 +0000
Manifest next update:     Wed 23 Apr 2025 03:00:55 +0000
Files and hashes:         1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: CRvU9K1GU8+mrRRg/+IEMLM+0zpSSufOj0Z3MFJCa3Q=)
                          2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 03:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5b:71:04:1a:b1:50:36:04:06:77:34:89:ba:09:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
        Validity
            Not Before: Apr 22 03:00:55 2025 GMT
            Not After : Apr 23 03:00:55 2025 GMT
        Subject: CN=0227ceb7e474d4b803244540d3d4e0e02dea3c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:d9:6f:6b:7d:15:38:7d:86:85:41:4b:64:
                    92:88:30:72:e4:81:25:0f:e3:1f:0f:5e:4a:42:3d:
                    68:40:e5:27:62:81:9a:a7:09:79:3d:a5:9f:c1:51:
                    65:10:b2:b8:7d:69:cc:33:b8:94:53:ec:35:da:59:
                    a8:7c:9e:81:01:46:ee:47:f1:10:f2:8d:32:87:d5:
                    e6:06:21:79:74:e8:05:8e:9d:db:61:87:16:7f:01:
                    ab:5c:24:5b:d7:5c:ec:80:73:8f:eb:79:ca:8f:5f:
                    31:36:3d:f1:34:cb:74:9b:e8:d4:d8:26:7a:48:e5:
                    d2:3f:ba:33:17:cc:f3:20:0c:91:7c:fe:74:56:7e:
                    90:d0:25:7d:86:35:5a:1f:b2:9b:8e:75:8c:41:23:
                    ed:24:c3:09:7d:b0:22:d2:68:72:ba:e7:20:be:18:
                    8a:f5:7a:6d:ac:67:ec:fa:9b:c9:f2:bd:b4:30:51:
                    6d:a7:86:0f:19:6b:69:94:c8:fc:ab:65:77:42:5a:
                    be:23:a9:2a:51:9f:11:33:8e:d7:6f:38:e2:ce:c7:
                    9a:88:47:a9:84:87:71:2f:ab:a3:f1:a4:3c:7b:cf:
                    53:79:41:36:a4:b8:62:6a:67:f7:7d:5c:85:bd:ad:
                    4a:57:c1:ca:aa:ec:2b:d1:4c:cd:a6:65:10:7e:2e:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:27:CE:B7:E4:74:D4:B8:03:24:45:40:D3:D4:E0:E0:2D:EA:3C:83
            X509v3 Authority Key Identifier:
                keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ed:b2:87:21:e1:23:f3:39:f6:b8:a6:f7:e0:c4:08:8f:89:
         6b:b2:89:61:e8:3f:2e:4e:0b:4f:1f:21:a8:87:4d:2c:1a:8f:
         49:81:2a:c3:8f:21:74:b4:a3:92:81:9b:c7:ce:f9:1e:38:38:
         06:51:a3:e2:99:c4:59:34:f7:55:7c:4d:53:a3:63:90:48:d0:
         d4:dd:73:d6:0b:ea:73:50:8e:ab:6f:7e:25:69:0b:b5:32:b3:
         cd:b6:5f:c7:30:e2:a1:20:98:7f:25:f5:78:da:fe:c3:1f:70:
         44:5f:53:da:60:13:9b:0e:94:10:ff:8a:7b:9f:cd:ef:98:23:
         a0:cf:c4:a4:53:df:91:2d:bd:ac:92:3a:06:3a:81:5e:a1:da:
         ba:1c:46:45:6e:e8:52:d0:a6:8b:26:e8:0a:4a:96:de:f4:1d:
         f6:f2:cb:dc:b0:1d:d9:41:02:05:d5:fa:f9:16:0a:ae:57:3d:
         ea:42:64:97:89:fe:64:bf:64:05:c2:16:d9:9b:b0:23:ee:06:
         b1:4c:97:4a:1c:34:28:28:bb:27:38:1f:52:ba:16:ad:45:a9:
         87:06:f2:29:cf:e7:9b:3d:47:48:03:45:41:38:8b:ab:e3:2f:
         bc:3c:d4:97:03:49:dc:80:07:7b:ef:c4:14:e4:07:82:8a:96:
         72:fb:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:50:18 2025 by rpki-client