Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File:                     1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier:          4Mvl1ffPGwLihwghRTsl8H+US2io6OmdY4T8IiSwMu4=
Subject key identifier:   D7:DB:90:D0:01:A5:C0:A9:B7:B6:34:D7:4F:09:98:8E:8C:A6:A8:BD
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer:       /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial:       01965492B839239D08F677CEAA6951FD475F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number:          0602
Signing time:             Sun 20 Apr 2025 19:00:23 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:23 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:23 +0000
Files and hashes:         1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: oQg9Ky9CIIEV1Rx70QHdAN33x8tvFplFebH2JB3BrcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 19:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:92:b8:39:23:9d:08:f6:77:ce:aa:69:51:fd:47:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
        Validity
            Not Before: Apr 20 19:00:23 2025 GMT
            Not After : Apr 21 19:00:23 2025 GMT
        Subject: CN=d7db90d001a5c0a9b7b634d74f09988e8ca6a8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7f:eb:67:cf:dd:5a:55:5d:79:b8:ec:95:82:
                    ee:f5:33:35:30:81:27:fa:f8:a4:4e:8a:cb:7e:a5:
                    a7:94:9c:99:e7:bd:1c:64:bb:dd:9f:54:9a:f3:a0:
                    03:00:38:6a:3e:22:11:e0:d3:b5:e3:91:67:fb:06:
                    af:02:00:5d:1e:63:2b:80:8f:b4:f2:03:6d:61:35:
                    ae:27:8a:c7:b7:07:45:13:c4:4d:65:e0:72:b8:9f:
                    3f:c6:8a:f4:99:89:09:69:6f:bb:cb:16:c8:e1:f8:
                    95:fd:a8:b9:4b:98:3a:35:ab:e8:b6:68:c5:06:58:
                    84:81:eb:6b:d1:fc:55:89:ed:9e:5a:0c:04:f0:c4:
                    46:8b:34:b0:4b:ec:d0:69:27:e1:cf:98:0b:42:97:
                    d6:70:f4:4d:3b:43:97:4a:3a:1e:2c:84:93:67:c2:
                    65:da:b0:8d:4e:be:c1:1f:45:c8:bf:2a:5b:ef:a3:
                    d3:b6:a6:6e:26:6d:2d:62:6e:f1:b8:c6:d2:a8:de:
                    76:f8:07:dd:bb:e0:34:ae:4b:d4:23:7d:ee:cb:20:
                    92:f3:f5:18:28:03:7f:9f:b9:56:9b:8c:20:e1:a8:
                    f9:71:f4:d3:4d:7f:b6:5f:ce:ef:ce:42:e1:de:3a:
                    76:e4:ad:92:e8:56:1b:f8:36:12:95:3c:f8:f2:f5:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DB:90:D0:01:A5:C0:A9:B7:B6:34:D7:4F:09:98:8E:8C:A6:A8:BD
            X509v3 Authority Key Identifier:
                keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e3:5d:14:7a:dd:cf:67:0b:8a:de:94:d4:88:68:f5:11:80:
         a8:1f:6a:b5:0d:01:08:5d:59:6a:79:7c:fc:aa:4f:51:fb:c4:
         25:9b:7e:80:df:28:28:b2:5b:65:fd:c7:b2:c2:a3:46:22:b3:
         d6:da:ea:b5:44:74:97:6f:9d:45:04:34:dc:39:d6:b6:ad:81:
         bf:55:31:53:d5:f5:ae:d0:1d:8b:a2:4a:e8:04:33:d9:2e:65:
         ac:83:82:3e:70:2b:49:13:fd:ea:13:7d:b7:41:4e:ed:a4:0c:
         44:f5:35:c9:ac:4c:e3:1a:e3:e5:85:48:d3:86:71:b9:96:60:
         56:a0:3a:fa:6f:ed:cf:bb:d8:6f:e4:8a:12:8e:7b:98:c9:82:
         1d:20:24:0a:0b:a4:ec:27:9b:24:08:0e:71:ac:9b:35:88:98:
         27:c9:0d:bb:eb:8f:c9:93:03:4e:c1:81:74:07:40:cb:ac:bd:
         89:df:b3:2e:eb:97:20:cd:24:cf:6d:c3:80:8e:5b:93:df:a1:
         2f:30:53:06:8b:21:50:fd:03:46:a4:3f:d1:30:59:b5:25:db:
         57:ad:32:65:86:09:8e:41:0e:28:34:9b:c4:3d:4e:c7:f8:38:
         61:2e:46:95:7e:53:07:c2:11:d4:20:54:13:d1:b6:a3:fe:bd:
         12:c2:7d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:46 2025 by rpki-client