Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File:                     ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier:          DEwJ2BtCbpcO5K0wUMKUiI0RPazCi/sdW4La6TrUEXw=
Subject key identifier:   A8:7E:B8:A3:DC:B9:41:9B:E5:90:A9:68:75:A0:F8:4B:79:40:08:5D
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer:       /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial:       01964DB52E2143209E9192739819C92FAC07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number:          14FD
Signing time:             Sat 19 Apr 2025 11:00:41 +0000
Manifest this update:     Sat 19 Apr 2025 11:00:41 +0000
Manifest next update:     Sun 20 Apr 2025 11:00:41 +0000
Files and hashes:         1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: 2P3UUKCNsLveQqeO0u5TaNtHpqprLfvwJB0SsRTLyxY=)
                          2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:b5:2e:21:43:20:9e:91:92:73:98:19:c9:2f:ac:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
        Validity
            Not Before: Apr 19 11:00:41 2025 GMT
            Not After : Apr 20 11:00:41 2025 GMT
        Subject: CN=a87eb8a3dcb9419be590a96875a0f84b7940085d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:fb:d5:f9:72:30:d9:8d:64:96:06:fe:fd:
                    35:a6:15:d6:a7:56:96:e0:bd:79:20:37:55:0a:29:
                    55:f6:e8:f1:54:59:2b:1a:3a:f7:fa:6e:d0:29:fe:
                    f5:b2:20:98:ab:58:d5:1f:62:36:c6:3f:60:d9:42:
                    95:8d:28:31:e5:74:6d:3c:46:62:0c:fc:a8:fc:1b:
                    95:84:40:ca:a5:cc:3c:6c:b6:ef:a1:7e:a4:3e:78:
                    fc:e8:70:ee:bc:48:22:e4:d5:9c:a8:b4:6f:73:a6:
                    ef:99:71:a0:0f:10:76:b9:84:58:88:9b:b9:9f:bc:
                    16:ac:b2:84:d2:08:b1:b9:ee:d9:96:d3:f0:1c:7b:
                    dd:6e:0d:01:5e:88:e9:33:ca:45:37:a1:e4:f9:7b:
                    99:33:61:b7:2a:10:35:5e:e3:d5:e4:a4:fc:3a:9e:
                    9d:a0:d1:c3:1d:c4:f9:ac:13:21:d7:82:06:f6:46:
                    b7:48:03:8a:00:78:8f:3f:74:1d:3d:77:5f:0a:4e:
                    bd:4c:82:d1:f1:ea:e4:c8:6d:88:b5:7a:6d:90:95:
                    32:9e:b4:03:32:06:9c:e3:87:84:cb:74:ca:a1:e9:
                    ba:bb:c9:84:be:bf:9d:02:cc:c1:dd:f5:ad:fe:84:
                    db:dc:26:f2:7e:9b:a3:5f:1d:89:ef:a7:45:53:b6:
                    66:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7E:B8:A3:DC:B9:41:9B:E5:90:A9:68:75:A0:F8:4B:79:40:08:5D
            X509v3 Authority Key Identifier:
                keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d2:11:c4:6c:29:b9:39:47:17:6a:c2:90:03:96:15:08:b6:
         be:af:6f:f7:b5:97:33:d2:2e:33:b5:04:fe:30:95:78:9d:cf:
         10:6c:d1:a4:07:f8:f7:bb:11:6e:c1:fa:30:1b:70:ba:18:ed:
         7d:6b:9a:59:de:31:c8:50:e4:8b:ea:f5:f0:8c:f6:4f:c1:2c:
         25:e7:74:b5:29:96:04:ce:bf:3c:f0:fa:44:35:19:f0:aa:b7:
         80:0c:43:4e:a7:10:03:3c:48:3e:92:40:81:1b:40:47:0d:d1:
         fc:02:1c:64:2a:1f:82:58:9f:af:ae:11:38:1b:4f:ff:b5:29:
         d9:2a:44:b5:87:dc:5c:bb:56:c0:77:1a:66:65:ba:c9:d2:be:
         c5:ce:a8:37:6d:cc:5d:b1:22:84:1d:68:98:53:ad:d5:4c:bb:
         0c:36:85:61:80:39:26:35:1c:35:a2:b7:5b:97:01:45:dc:12:
         1c:eb:11:97:f4:f3:94:fb:f6:51:fb:4c:2b:f0:c2:23:90:93:
         e3:ef:dd:9a:b7:0d:5a:87:ef:07:0c:fe:1e:34:59:1e:93:14:
         7a:81:cf:c0:f5:e3:02:de:8f:34:1f:da:10:a6:b3:fa:48:af:
         f9:1c:0c:c6:92:3a:f2:e2:d3:ec:68:06:d9:34:a4:4a:9e:99:
         f6:34:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:34:32 2025 by rpki-client