Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
File:                     MduEfR2x4LLCwlUCIQ_1pxmWehk.mft (raw, json)
Hash identifier:          3lZ6rKjK4Fms4fv0gYqXXhaXG5xzSOpZPBDldQhurWI=
Subject key identifier:   2D:90:C4:B5:C5:FC:96:22:5C:97:4B:14:AE:12:8E:E9:F2:9B:D5:FC
Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19
Certificate issuer:       /CN=31db847d1db1e0b2c2c25502210ff5a719967a19
Certificate serial:       01960B30C380C00ADBC3813B5563EA8EBBB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
Manifest number:          0D5F
Signing time:             Sun 06 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 06 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 07 Apr 2025 13:01:07 +0000
Files and hashes:         1: 0IHmyTelW8zpO-_QdR9UfSEkXAI.roa (hash: UlYSOxczUbkdfKJ9miYaE+QEa9fb9mQhLOlffEgcsoY=)
                          2: MduEfR2x4LLCwlUCIQ_1pxmWehk.crl (hash: McM3PvGOCFGtXdWlrKqRHHZTjEM8c+t7SL1spnFNb4U=)
                          3: PQvHlqxPOZ5EcVf6KsUmqrHycoQ.roa (hash: 3ksFdFv/Fa3gpXmdL0Lg1ZLkcfv0kVJRQQQ2mO5ywLk=)
                          4: ahJNP8kQoasOGfOn59FuyopzzTg.roa (hash: 6vRaJqB5sPcJZ3/fvcKuSD1RiGeRJgHPqC0FIBy6qGg=)
                          5: al6s6WgAHfcCaxm7dnRoKhGccgc.roa (hash: dELh70vEBgRpyjJwV+u67ZFF6OWlxJRy1hJNSwq3TqA=)
                          6: cz_i6inXtcUIjcIN9oJWb2HinvM.roa (hash: PQ0BLB4sI2B91vehL/dzDGr3GUpFGQqMElA5h/dx7n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 10:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0b:30:c3:80:c0:0a:db:c3:81:3b:55:63:ea:8e:bb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19
        Validity
            Not Before: Apr  6 13:01:07 2025 GMT
            Not After : Apr  7 13:01:07 2025 GMT
        Subject: CN=2d90c4b5c5fc96225c974b14ae128ee9f29bd5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:0e:50:87:bc:a8:e1:a7:13:d1:52:f7:82:
                    68:75:77:23:01:a7:2c:13:da:aa:7b:fb:28:37:3d:
                    73:72:cf:b4:fe:a7:83:6a:36:90:2a:61:df:a6:e0:
                    2c:00:2d:8a:35:70:f4:8f:5d:47:fb:10:95:4d:d8:
                    ab:2b:50:24:5f:77:75:37:e4:17:e8:9d:4b:b2:f9:
                    5a:88:7a:8a:90:ad:3d:22:2e:fd:ec:2a:9d:9a:ee:
                    f7:f4:26:e2:1f:9f:87:c0:f5:06:d5:76:e5:fa:fa:
                    9b:42:44:c0:4b:05:be:a1:29:78:e1:10:4c:0e:09:
                    13:0c:c3:b1:10:13:c6:57:3d:64:34:d9:65:3b:de:
                    2b:a3:b7:99:c2:62:24:ad:25:fe:94:d7:94:8e:2e:
                    36:6b:a5:09:63:c6:14:12:0d:eb:b0:ff:2a:a2:0f:
                    c4:ab:52:08:b9:3c:8f:a8:56:74:58:67:c4:f0:ab:
                    9f:86:47:6b:46:0c:5c:dd:5d:9a:ef:60:c4:5f:b5:
                    64:ee:69:76:fa:1a:f3:2f:e8:a2:4f:22:fd:5a:66:
                    32:d7:8b:9c:0d:be:b3:49:24:65:da:11:cd:f5:9d:
                    9e:59:12:ac:7a:b2:82:5d:73:03:72:c2:44:95:00:
                    82:46:42:df:97:da:24:e8:73:eb:24:54:56:02:d8:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:90:C4:B5:C5:FC:96:22:5C:97:4B:14:AE:12:8E:E9:F2:9B:D5:FC
            X509v3 Authority Key Identifier:
                keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c1:8b:94:67:34:c9:4d:a8:54:27:63:85:f0:f2:02:6e:b1:
         a5:8f:59:c1:56:4c:a8:da:aa:4a:db:f7:7b:2a:c6:f9:3a:98:
         92:a2:a0:20:d5:dc:8a:1e:8e:b6:3c:a9:4e:b9:ce:da:34:8e:
         b3:bb:03:86:af:c1:4e:93:1e:cb:4e:48:45:f9:c7:c5:66:04:
         32:cc:b5:d0:48:9d:01:e2:6a:99:c4:e3:08:8a:b1:3a:14:f5:
         8d:be:bc:73:9e:d1:9d:b0:88:e5:f4:2a:35:98:82:8c:07:00:
         eb:02:a2:36:8c:5a:29:c1:0f:03:e2:14:ba:6d:f6:5d:5c:f3:
         83:51:45:3b:ee:3c:83:b0:a4:4f:18:0e:97:c6:4e:91:61:0e:
         b4:c1:dd:dd:5d:dc:03:47:4b:bd:4d:60:40:c4:db:76:fd:eb:
         bc:ff:30:9a:f8:9c:fe:db:04:39:92:46:ef:50:80:27:13:2e:
         3f:c2:bb:26:e9:c6:ef:3f:0b:39:1b:e6:e8:25:86:7a:e2:5c:
         e2:2e:50:ef:94:84:25:20:44:75:5d:a2:b3:fd:59:df:4a:d8:
         3a:b9:32:ff:74:15:05:3e:2b:0a:a0:4e:38:44:00:c7:46:d7:
         50:00:6a:02:cf:04:3b:84:19:3b:b4:d0:c8:eb:b0:08:3a:c0:
         40:01:6a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:19:50 2025 by rpki-client