Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File:                     CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier:          l0qEIUyMEXaoV/v5PjkiEDlphxMn29ZvSIw4DTKh4EY=
Subject key identifier:   C6:F2:BF:97:AD:DE:FF:15:0F:32:4C:FE:61:A5:90:6B:21:DF:38:DE
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer:       /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial:       01964DB4C2820581029DAA61D6DC1304DED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number:          0A29
Signing time:             Sat 19 Apr 2025 11:00:13 +0000
Manifest this update:     Sat 19 Apr 2025 11:00:13 +0000
Manifest next update:     Sun 20 Apr 2025 11:00:13 +0000
Files and hashes:         1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: u/IVMqt9JX391PrtCy/whko8u8vpWv8e+rGWv++iqUc=)
                          2: rKgQI-w1UXNWfaL5RhIkWUF_FgI.roa (hash: hcJ9d+FGrXGqRkOgDTqfnuX4GbB1zYDVH1Gwhkt3mDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:b4:c2:82:05:81:02:9d:aa:61:d6:dc:13:04:de:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
        Validity
            Not Before: Apr 19 11:00:13 2025 GMT
            Not After : Apr 20 11:00:13 2025 GMT
        Subject: CN=c6f2bf97addeff150f324cfe61a5906b21df38de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a8:ce:7c:e3:12:55:10:26:29:d7:26:16:14:
                    72:3a:a2:4f:95:7c:94:1d:c5:51:fc:5f:c2:81:a8:
                    0b:35:c1:c8:56:a7:f9:39:a6:c5:39:f1:99:90:e1:
                    04:de:3d:5c:90:cf:3d:44:c3:ca:f7:0e:10:53:53:
                    f3:e2:d8:28:9b:06:c2:bb:fa:30:44:84:c4:11:14:
                    a8:97:f7:6c:cf:fe:a2:28:f6:88:78:b1:ad:ed:79:
                    f2:a7:75:04:28:f0:e0:f9:c9:8d:ce:17:b0:44:e3:
                    f3:f8:08:b9:5c:6c:60:b1:95:a2:a5:81:bf:72:c8:
                    ad:4e:cf:7d:87:7c:de:39:d3:b7:7c:b2:d8:10:ff:
                    bf:44:02:33:61:4c:1c:e9:79:ce:d4:15:10:8f:47:
                    48:68:8d:e4:f3:e7:8b:9a:d1:72:66:ea:36:7d:0e:
                    9c:fa:e2:ff:b6:65:f0:ec:60:ac:01:a7:50:49:6f:
                    9f:f5:8d:c0:ba:ff:4b:66:82:c4:42:b1:76:0e:c9:
                    29:d5:65:17:18:9d:ff:87:2f:ea:c1:3a:e4:32:71:
                    0f:18:4b:bd:a3:64:a5:d1:57:8d:6d:c1:e9:07:ce:
                    fd:b6:bb:a6:a6:9b:b4:15:05:90:ea:4f:04:90:dd:
                    12:65:01:e4:d1:99:28:2e:e5:5d:30:82:60:8b:39:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F2:BF:97:AD:DE:FF:15:0F:32:4C:FE:61:A5:90:6B:21:DF:38:DE
            X509v3 Authority Key Identifier:
                keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:25:58:1d:77:f0:d3:57:b5:09:23:e7:58:71:98:69:d1:0f:
         3a:ef:f3:2a:b5:79:bb:f0:7f:51:a1:37:2c:13:4f:58:b0:69:
         2c:cb:bb:6b:d6:16:b5:e6:bf:b5:2d:77:a9:43:ad:e6:19:59:
         0a:e7:11:17:3b:db:bc:40:14:b4:4a:23:70:20:c2:5c:f2:f3:
         cd:ce:4d:65:c1:71:e4:6f:fa:81:33:e1:7b:72:a8:88:c5:7f:
         3c:36:c9:ba:a9:1c:63:f3:47:0c:fe:de:94:d7:84:43:6b:3f:
         37:82:70:0a:6a:9c:42:31:78:83:e7:3b:7f:a5:b4:b3:6c:48:
         40:0b:b2:f2:1f:bb:dc:c6:b2:ed:52:8b:ce:29:dc:62:12:2a:
         fe:e2:58:dc:d5:23:96:96:a6:b8:09:59:43:1b:9b:62:86:ea:
         47:bc:4d:7d:aa:10:ce:ee:c7:6d:f8:30:f4:8a:eb:d1:c2:5d:
         ec:a0:75:c5:cf:8c:99:2e:41:42:a2:41:9d:f2:57:fd:f6:13:
         fd:8d:14:f8:4e:09:f4:89:c1:eb:98:ab:eb:63:ba:40:50:28:
         53:0b:46:d0:93:6c:c1:07:3a:98:88:fc:a6:cd:cf:7b:b7:1e:
         67:e2:77:c0:be:f3:85:e0:72:a1:e9:bd:fd:b1:29:02:bf:a6:
         c9:0a:a3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:24:51 2025 by rpki-client