Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
File:                     Fi14JJtyG00s6M9t_PvEQiITrJ0.mft (raw, json)
Hash identifier:          2+Td0Mud2WZuE8wVmSZB8VSc3XtZMv3PaZ7Xjulm8Ec=
Subject key identifier:   03:BA:BB:AC:35:6B:1C:35:81:95:73:DA:3B:B5:8E:E0:55:CC:BA:22
Authority key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Certificate issuer:       /CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Certificate serial:       019658DD6EE8B6ED7487CD428E41710CB366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
Manifest number:          14FE
Signing time:             Mon 21 Apr 2025 15:00:28 +0000
Manifest this update:     Mon 21 Apr 2025 15:00:28 +0000
Manifest next update:     Tue 22 Apr 2025 15:00:28 +0000
Files and hashes:         1: 1-OxGWMnguhulz6f31kCb1mmRHrM.roa (hash: SvBOg3Xrt3LXP7jg7xDbyxKXVwwahdO0dORGRkeHvnw=)
                          2: Fi14JJtyG00s6M9t_PvEQiITrJ0.crl (hash: UD8whI9iBivII+tbaaYZgjBd+BnSFjG2kAM8EpdYq4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:58:dd:6e:e8:b6:ed:74:87:cd:42:8e:41:71:0c:b3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
        Validity
            Not Before: Apr 21 15:00:28 2025 GMT
            Not After : Apr 22 15:00:28 2025 GMT
        Subject: CN=03babbac356b1c35819573da3bb58ee055ccba22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:42:e0:c0:e2:a5:e0:bf:6e:a2:74:24:77:
                    05:a4:9a:08:52:47:bf:59:90:7b:15:ea:bd:db:73:
                    0f:b3:a4:1a:56:50:78:9e:26:a4:6c:60:e6:ac:f7:
                    52:e9:47:b3:4e:5e:49:5d:5f:6b:04:18:39:5d:6d:
                    a8:13:aa:c8:2e:1b:a1:93:a4:10:b0:42:37:f1:95:
                    e8:9a:2b:a3:e3:1c:3b:f4:68:44:de:8e:1e:35:b8:
                    61:8f:99:4f:07:f7:78:1c:fb:ca:78:d7:91:12:5d:
                    03:1f:4b:67:17:af:eb:74:19:e7:7b:54:a8:32:e2:
                    b8:dd:9b:44:39:cb:aa:c6:08:ef:a6:28:14:4a:93:
                    7f:ec:c3:03:12:7a:f5:1d:08:ef:3e:3c:78:a2:3b:
                    c1:3a:11:0f:dd:a2:3a:12:3a:d5:cb:e5:85:16:5d:
                    fc:29:13:04:c7:90:30:79:ce:33:56:4f:64:6a:34:
                    5c:0a:8d:3c:e6:f4:e7:13:40:0b:52:53:e1:69:ec:
                    ce:f2:0a:6c:95:54:ab:a9:a9:10:41:d0:ed:a0:61:
                    d2:aa:32:b8:4b:65:aa:a1:ee:71:f8:8e:00:dd:fd:
                    00:ff:87:8f:73:62:62:86:20:6b:45:b2:91:2c:dd:
                    18:50:ef:2e:de:8f:2f:23:bc:b4:28:4c:c0:09:6e:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BA:BB:AC:35:6B:1C:35:81:95:73:DA:3B:B5:8E:E0:55:CC:BA:22
            X509v3 Authority Key Identifier:
                keyid:16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:2c:69:da:56:b5:c9:b8:1a:a7:c9:4c:bd:77:38:0a:07:
         64:f3:5b:79:78:9c:5a:d4:da:59:8d:97:06:b1:42:54:52:f9:
         bf:8c:35:7c:ab:15:58:64:4f:ab:84:07:98:ab:02:18:8e:92:
         67:de:33:20:15:03:da:da:ff:16:d3:8b:05:42:02:49:d9:e7:
         af:0d:54:a5:2d:2e:c4:d4:66:52:90:14:82:9d:43:8c:7e:ba:
         fc:f4:43:71:20:dc:ec:db:3d:de:fc:ee:ac:dd:28:29:b9:8c:
         f5:99:48:5d:75:5a:d9:a4:71:8e:95:5f:e3:47:b1:89:40:85:
         39:bf:78:32:5c:eb:a4:52:7a:f5:63:e0:6a:79:41:7e:5c:b9:
         89:c9:44:a1:b8:48:91:25:b8:c6:be:6b:a2:d0:b1:1c:b0:08:
         a0:1c:dd:b7:96:6f:1e:ec:8f:e6:cc:e9:82:86:33:bc:5c:6b:
         a0:7c:a8:40:26:1b:d0:fb:f9:6d:4c:bf:7e:d4:34:ca:20:f5:
         47:bd:12:38:0f:4a:b8:bc:eb:c0:bf:8b:1e:11:13:06:c8:4e:
         5f:2e:90:d4:66:4f:73:fa:9d:86:20:4d:0d:57:fe:87:3e:b0:
         06:8a:d3:e2:f8:93:33:87:67:b9:0f:aa:68:e7:1b:71:0d:7e:
         6b:df:b6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:20:59 2025 by rpki-client