Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
File:                     VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json)
Hash identifier:          Uk3GUMRjafmaAtU6dW9gJwy7n4gWGJTusXOrETeD9LI=
Subject key identifier:   81:36:9D:5D:7E:4D:45:E3:40:9E:17:E2:B1:9F:FC:71:F8:81:E9:AC
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Certificate issuer:       /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial:       019656EED571B50DFA79DFFF9B228942F013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
Manifest number:          09F5
Signing time:             Mon 21 Apr 2025 06:00:14 +0000
Manifest this update:     Mon 21 Apr 2025 06:00:14 +0000
Manifest next update:     Tue 22 Apr 2025 06:00:14 +0000
Files and hashes:         1: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: 2Mn07898Y+8x+tY7jtxC8rd/WEPoHcPmaMusnBIOhDA=)
                          2: t3EOhCqhRV2WckdeZdMmZde2sco.roa (hash: 9YigDUievW+JnsoS3fARTo39jCVhAjMEThq2WY+OCkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:ee:d5:71:b5:0d:fa:79:df:ff:9b:22:89:42:f0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
        Validity
            Not Before: Apr 21 06:00:14 2025 GMT
            Not After : Apr 22 06:00:14 2025 GMT
        Subject: CN=81369d5d7e4d45e3409e17e2b19ffc71f881e9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:f1:bb:32:76:bb:cd:82:88:57:e3:d0:33:
                    d9:df:31:6f:85:2d:12:07:6a:ab:07:5b:b1:bb:4b:
                    2b:78:cb:dd:4c:8f:08:e7:9d:29:01:84:3b:93:68:
                    f6:3d:e8:25:57:47:67:ba:a3:3b:24:ff:86:62:74:
                    f8:ce:b4:06:3e:6a:b6:b5:45:66:13:53:4c:26:ed:
                    0b:5c:58:ac:69:42:d4:8c:2d:6a:ce:40:40:9d:af:
                    c3:08:16:d8:ea:c2:22:41:38:cf:f9:ba:28:15:a1:
                    a3:85:64:aa:bc:db:0d:4d:c2:28:b4:59:fb:70:0b:
                    87:94:4a:e7:fa:a9:76:59:59:2f:0b:d2:8a:60:b9:
                    09:16:63:69:00:d4:94:07:dc:c7:5e:ed:df:99:fa:
                    71:56:9e:ed:ba:0f:08:88:d5:8c:50:cc:c9:c4:a6:
                    ec:77:b0:7e:81:39:f9:f2:2e:84:2f:c8:27:83:a1:
                    d0:85:39:5c:65:56:b3:71:c6:d3:fc:db:6d:83:da:
                    6f:1e:19:d8:05:ea:36:40:30:c4:a4:c8:9e:30:42:
                    dd:b7:48:e4:32:b3:39:dd:d7:82:5e:09:e6:26:0d:
                    be:4c:14:ed:8b:ca:2f:37:06:3e:d9:b3:19:fb:9f:
                    4e:ec:5f:0c:64:b3:73:04:1f:ee:3b:e2:c2:98:68:
                    8a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:36:9D:5D:7E:4D:45:E3:40:9E:17:E2:B1:9F:FC:71:F8:81:E9:AC
            X509v3 Authority Key Identifier:
                keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:57:56:66:14:ae:d7:c9:4c:3d:3d:24:bd:c2:0b:9b:d2:39:
         f1:9d:b6:c9:da:ce:22:24:3c:03:40:17:bf:50:be:ae:ea:bc:
         32:e4:f0:03:b3:7b:06:14:19:9b:1d:6d:5e:90:0c:69:52:71:
         bb:36:54:76:ca:fd:d3:65:e1:51:ec:f8:f3:63:52:f6:bd:4a:
         c5:4a:a9:bd:7c:5b:1d:a5:35:fc:a7:59:cd:38:3e:b6:08:9f:
         30:4c:4a:bc:97:3a:63:30:f9:ae:80:ec:48:bd:de:c9:07:b7:
         cd:3c:09:5a:08:4a:df:bd:82:e8:b4:4d:53:c5:3b:30:da:82:
         b2:67:90:1c:b7:1d:fa:c2:0f:42:fb:a8:f2:51:13:3d:4c:75:
         10:2a:d5:16:a4:9c:c3:cd:01:83:22:4f:70:8e:99:8b:49:6d:
         f3:65:21:bd:5c:a0:50:51:28:92:af:34:ba:72:a1:fa:5d:f8:
         eb:89:75:ac:8c:61:fe:75:a8:27:27:b4:12:7d:6d:38:be:18:
         ff:b1:7c:e7:04:35:55:91:29:16:e4:51:3c:c3:2d:fe:f6:5d:
         fd:f3:74:a5:5a:db:26:bf:83:2a:1d:e1:80:10:4e:b9:e1:7b:
         cc:56:7c:14:65:e1:0c:02:f9:12:c4:d4:4e:e7:f4:a4:e4:b7:
         32:54:67:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:56 2025 by rpki-client