Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
File:                     O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft (raw, json)
Hash identifier:          oAUl8T78WM1HUZnw8XM0pCjLDNhmc159SDfF7GVbdw0=
Subject key identifier:   ED:48:2C:62:87:8F:35:1D:A6:CD:D8:09:C5:BC:FB:F7:78:66:CB:9E
Authority key identifier: 3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
Certificate issuer:       /CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Certificate serial:       01964D7EE298F1A9F610A580F754CE6B0083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
Manifest number:          0D62
Signing time:             Sat 19 Apr 2025 10:01:23 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:23 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:23 +0000
Files and hashes:         1: O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl (hash: nYC2n30kRQLqb0OJBpzFcGWAA+OJaVM0K/LjsFeTqwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:e2:98:f1:a9:f6:10:a5:80:f7:54:ce:6b:00:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
        Validity
            Not Before: Apr 19 10:01:23 2025 GMT
            Not After : Apr 20 10:01:23 2025 GMT
        Subject: CN=ed482c62878f351da6cdd809c5bcfbf77866cb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:23:a2:fd:73:0b:38:80:c6:0e:51:b8:ed:
                    77:3e:70:92:e8:79:f4:84:3c:27:ee:39:6a:40:c0:
                    ad:7c:5d:03:8e:50:37:1e:1b:74:e7:ec:b9:ab:73:
                    59:d0:1d:d5:9f:0d:e4:73:36:67:6d:d8:c9:5e:65:
                    b4:28:43:a7:15:3b:86:a8:73:78:a7:bd:68:32:18:
                    be:4e:4c:1e:2c:82:75:9d:f3:ae:fd:38:84:20:1e:
                    db:90:16:65:6a:1d:6b:cc:c3:cb:fc:50:56:94:db:
                    e8:fb:26:57:b0:aa:26:3a:99:59:5f:75:7b:b8:a1:
                    e4:a4:1b:a2:70:3a:bd:37:50:37:00:c3:1f:1a:e2:
                    a7:06:6d:6d:a5:ce:bc:a3:d1:fa:7d:76:61:4c:69:
                    82:77:4b:cb:03:92:65:1f:4a:3b:ae:c9:98:71:77:
                    4e:de:5e:2e:6a:59:5c:3b:c6:a6:e7:2e:3e:4f:2c:
                    bf:59:0d:ef:7c:55:5b:11:03:e4:9c:8d:e0:32:fb:
                    ac:54:f2:44:ac:1d:c9:27:be:9f:8a:53:17:48:a8:
                    ef:2e:99:af:8a:4e:6e:c6:d4:0e:5f:51:d9:d1:56:
                    0b:20:fa:80:96:ae:ec:6d:4e:2b:8a:08:7b:b4:27:
                    c8:ec:7f:f2:97:25:ca:63:dd:e4:2d:22:87:29:a9:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:48:2C:62:87:8F:35:1D:A6:CD:D8:09:C5:BC:FB:F7:78:66:CB:9E
            X509v3 Authority Key Identifier:
                keyid:3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:8d:d9:e7:22:2c:35:6e:e5:77:bc:2c:73:59:73:ca:e1:1e:
         44:11:32:17:fc:6d:3a:a2:7c:72:58:0b:16:96:53:9c:36:ce:
         a7:cf:74:48:39:9d:37:17:da:7c:7e:90:f4:4d:c7:69:8c:81:
         6a:b7:1f:6b:75:82:57:21:cc:71:03:57:bb:fe:9c:11:1f:02:
         66:fb:13:f6:ca:60:dd:97:b0:02:c5:c3:ce:75:2b:fe:e1:89:
         08:f8:37:59:d8:6d:cd:a3:87:22:dc:aa:d5:de:fd:9f:67:ab:
         d2:36:68:5d:5a:ff:da:e2:68:26:90:4c:08:67:35:90:74:de:
         dc:ba:41:8e:e2:31:90:d1:e2:d6:fb:cd:bf:0c:31:2a:bb:b8:
         ab:42:af:61:5d:29:0e:bc:c1:75:40:ac:d6:d2:64:46:a5:87:
         9b:90:6d:d2:b6:19:4b:36:11:69:2a:12:3c:9f:32:8e:1b:bc:
         c9:a2:44:91:ba:2f:bf:76:1b:7f:b8:b9:24:99:48:fc:e5:1e:
         e0:2a:f4:b3:26:69:dd:cd:17:95:b6:28:25:c6:7c:02:3d:b3:
         d7:19:b9:d4:e2:3f:63:30:58:16:f9:5e:a8:74:33:4b:ed:c1:
         57:f9:ce:95:fc:fd:3f:5f:fb:6b:20:f3:0f:17:7a:e0:a9:31:
         b5:b5:63:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:59:04 2025 by rpki-client