Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File:                     Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier:          h1PfYrqCvrLYx2dTmxkV9DgE8GKlIvczk09gpK5PRGI=
Subject key identifier:   44:6F:BE:EA:C5:95:AC:8F:2C:E6:40:08:67:36:E3:A6:2F:EA:A0:0F
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer:       /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial:       01964FDB1521A250D9412646C2AAFABE8A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number:          0926
Signing time:             Sat 19 Apr 2025 21:01:19 +0000
Manifest this update:     Sat 19 Apr 2025 21:01:19 +0000
Manifest next update:     Sun 20 Apr 2025 21:01:19 +0000
Files and hashes:         1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: aQ5J1KHjm76YvyCCbHLs47hKwnn822/UnzbAHBYidYQ=)
                          2: R7UR19A8DA5u7WHUKAJI549nkdo.roa (hash: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 21:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:db:15:21:a2:50:d9:41:26:46:c2:aa:fa:be:8a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233adc97f9826262007f46286591830df58fc55e
        Validity
            Not Before: Apr 19 21:01:19 2025 GMT
            Not After : Apr 20 21:01:19 2025 GMT
        Subject: CN=446fbeeac595ac8f2ce640086736e3a62feaa00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:24:56:6a:16:7f:0f:42:49:61:e3:46:3c:86:
                    a0:dc:4d:84:e5:7f:3d:24:35:83:22:6a:e8:c3:ed:
                    86:48:8a:11:3d:d4:6f:a0:2a:99:7a:3e:1a:77:8e:
                    c0:c9:e2:df:a9:ad:3f:47:d9:31:11:8e:a4:53:a8:
                    d7:7b:4c:9a:8b:e0:e3:42:2c:bd:b1:9b:82:48:23:
                    51:d3:19:41:01:55:8d:30:47:3c:e3:a4:73:a2:9a:
                    04:5c:89:98:82:79:3a:dc:aa:4f:aa:6f:c4:40:c3:
                    a0:0f:87:87:dd:14:c9:8a:ab:6b:c3:77:e1:ea:0d:
                    a3:15:21:d6:d4:b4:7b:2f:f9:48:b4:0b:ca:95:8d:
                    4e:43:e7:df:b1:59:1f:8a:f2:5e:7f:54:bb:e3:d4:
                    95:d1:23:55:c9:b1:5b:e3:2a:56:83:41:09:a1:23:
                    e1:ee:11:e4:3e:31:e0:30:fc:6c:6a:17:ae:a4:6e:
                    60:92:ef:a7:33:d6:dd:3b:86:dc:0d:08:0a:94:d0:
                    3a:38:12:a8:6c:f7:e1:07:77:59:a2:cc:ed:38:0b:
                    79:57:75:8d:c7:a2:87:d2:5a:a7:41:6b:54:eb:be:
                    da:37:20:ff:4f:76:08:d7:2a:ee:b1:aa:18:80:b6:
                    a9:4f:05:c9:da:45:b6:7c:98:6b:56:15:6e:18:30:
                    79:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6F:BE:EA:C5:95:AC:8F:2C:E6:40:08:67:36:E3:A6:2F:EA:A0:0F
            X509v3 Authority Key Identifier:
                keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:90:ba:71:5f:59:ee:e6:59:e7:f5:1e:cc:b1:e1:0d:dd:
         ac:fb:d6:3d:01:64:2a:d1:71:29:8c:a4:73:18:20:8f:30:0b:
         0e:ce:8f:69:3c:af:6e:12:82:db:4f:74:41:4f:85:45:9a:e1:
         4a:74:b5:21:6d:4f:d7:93:86:90:d5:59:7e:37:34:70:c8:a9:
         06:cf:47:07:9f:cb:ed:9c:c0:90:ce:59:d8:4f:35:a0:64:93:
         9c:7b:1f:17:a1:3b:cb:a7:03:7b:41:ac:77:93:27:d4:ca:95:
         b4:c5:38:73:0f:2b:85:08:ab:2f:14:bd:5a:37:5c:87:6c:d7:
         df:3d:2c:9c:7b:84:29:f9:52:6c:89:8b:53:70:33:3b:3a:20:
         e1:b8:27:4b:0b:20:9d:3a:24:36:19:6d:4e:54:fb:76:9d:88:
         60:9b:c0:44:a5:ce:c6:c5:4a:fd:89:80:30:f9:09:c2:4b:6d:
         26:4a:3e:ed:cf:10:8d:35:df:6c:9e:79:b5:17:1a:2b:a7:59:
         27:21:66:0b:aa:da:9f:5c:b1:f5:bd:0c:5b:8a:86:ed:9e:db:
         63:4e:2a:a2:06:13:d1:02:e8:d3:cb:f2:47:25:aa:ae:9f:20:
         6d:0b:e8:aa:34:93:98:a8:50:6e:ae:b7:9d:ae:d7:15:17:41:
         76:bd:22:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:46:29 2025 by rpki-client