Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File:                     xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier:          pQtsIaFq2rqF6ZRK15r3XOm92qKVjpc/V2ztqCQPMDM=
Subject key identifier:   07:05:56:4C:B3:82:E2:08:24:7F:6C:F2:DB:CB:FB:4E:FE:2D:BC:21
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer:       /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial:       0196545C455DBB6678266191816CAC7BF2B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number:          1349
Signing time:             Sun 20 Apr 2025 18:00:55 +0000
Manifest this update:     Sun 20 Apr 2025 18:00:55 +0000
Manifest next update:     Mon 21 Apr 2025 18:00:55 +0000
Files and hashes:         1: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: sNJ1h4zw61gLAqP4Wkks78lBY4crb/K4Ji5YW2J6sgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5c:45:5d:bb:66:78:26:61:91:81:6c:ac:7b:f2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
        Validity
            Not Before: Apr 20 18:00:55 2025 GMT
            Not After : Apr 21 18:00:55 2025 GMT
        Subject: CN=0705564cb382e208247f6cf2dbcbfb4efe2dbc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:5b:6c:c2:f0:8b:d4:2b:b1:7d:3a:11:9c:
                    c0:95:88:f7:39:03:a0:17:4f:41:b4:44:31:0c:82:
                    14:7a:2a:37:9e:af:19:5d:c2:48:43:6f:76:43:5f:
                    24:27:43:29:a5:d7:6d:20:25:7f:41:b6:89:c0:99:
                    ad:a7:6c:de:a8:f6:3d:df:a5:8a:14:44:72:a8:cb:
                    c9:1d:7d:d8:e0:79:5d:73:b4:4d:cc:6f:2f:de:e3:
                    1a:62:27:78:2a:5d:f6:18:26:c3:28:6f:14:fc:10:
                    2e:46:91:ea:c3:ca:7c:a9:b5:3a:a5:d8:b9:33:3c:
                    37:4e:18:e3:cf:12:a1:b6:89:ce:7d:be:ae:df:6a:
                    19:66:49:46:5d:43:08:11:75:0a:eb:25:3c:b2:b6:
                    fc:81:6c:93:5b:c6:ae:2a:4e:12:46:41:52:d2:5e:
                    f9:08:50:cf:9b:60:3b:29:d8:1d:49:14:9a:f5:d3:
                    c2:c4:e9:78:b1:70:0e:1c:08:1b:87:ad:78:57:1b:
                    91:4c:62:06:7c:b9:79:3b:61:b6:cb:18:59:14:0b:
                    ff:0a:d9:54:ca:3e:7c:95:d8:a2:54:4b:71:15:ea:
                    a3:c4:12:74:58:00:93:3a:2c:ee:f2:1a:2c:f9:fc:
                    0a:9d:99:c5:f4:3c:3f:60:66:50:61:6d:63:70:60:
                    be:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:05:56:4C:B3:82:E2:08:24:7F:6C:F2:DB:CB:FB:4E:FE:2D:BC:21
            X509v3 Authority Key Identifier:
                keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:7f:b1:05:48:0a:22:f4:24:0e:af:42:82:fe:08:e1:59:19:
         cf:e7:52:57:40:0e:df:de:6c:23:a7:bf:d5:b2:0c:d3:35:15:
         49:1c:dd:cc:97:ab:ee:d2:d5:cc:02:18:13:5a:e7:75:db:14:
         7f:77:e3:67:9d:a2:ef:35:42:ad:1a:3a:81:69:bf:74:ce:33:
         bd:29:87:3a:8c:f2:e2:a4:4a:50:c0:d0:2d:e6:b8:33:9e:88:
         4d:10:a6:a4:59:3d:ce:11:11:6c:a0:64:8c:b3:3c:a1:3b:8b:
         56:ec:5d:65:fc:3b:2f:0e:c8:3b:7b:75:95:2d:88:c7:43:8b:
         14:9a:c8:7e:5d:b9:61:ff:6a:e7:20:05:54:e1:9b:ff:f8:dd:
         29:ed:12:f1:36:28:61:98:27:46:3a:11:e3:20:53:c2:a3:94:
         69:12:fa:1b:4c:7a:8c:fc:23:26:85:08:09:5f:2f:fe:7e:06:
         59:16:95:89:b0:f0:f0:25:fe:bb:e7:e1:6f:d5:5e:54:0f:e1:
         32:dc:80:69:c8:77:0b:07:88:bf:97:54:7a:d1:78:81:3a:31:
         60:15:ca:39:47:1a:1c:e2:7f:77:2e:1e:43:56:f2:50:da:b6:
         46:45:f5:bf:d7:7d:4f:26:d2:23:1d:2e:e3:9a:9e:53:35:ab:
         f0:fc:ff:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:04 2025 by rpki-client