Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
File:                     FyROqUT-mGNME2MDjuMdVDVpkmE.mft (raw, json)
Hash identifier:          VtaG0Gn8Z30JVv35VWBkTrx1/I0f6F4c1cao+g2se5k=
Subject key identifier:   13:C6:5F:8C:34:25:75:9B:F9:69:26:8B:E7:2E:54:DD:33:A7:3B:33
Authority key identifier: 17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61
Certificate issuer:       /CN=17244ea944fe98634c1363038ee31d5435699261
Certificate serial:       01965838A0BF46799F74D72DE8DBC9C07C98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
Manifest number:          F3
Signing time:             Mon 21 Apr 2025 12:00:28 +0000
Manifest this update:     Mon 21 Apr 2025 12:00:28 +0000
Manifest next update:     Tue 22 Apr 2025 12:00:28 +0000
Files and hashes:         1: FyROqUT-mGNME2MDjuMdVDVpkmE.crl (hash: 2qrr/sUYMEnFl3Ku9TuJTTiPdo0zIZBWhZ7K+iAkEcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:58:38:a0:bf:46:79:9f:74:d7:2d:e8:db:c9:c0:7c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17244ea944fe98634c1363038ee31d5435699261
        Validity
            Not Before: Apr 21 12:00:28 2025 GMT
            Not After : Apr 22 12:00:28 2025 GMT
        Subject: CN=13c65f8c3425759bf969268be72e54dd33a73b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f1:ca:ff:b1:3f:6e:6a:d5:62:65:3b:4a:45:
                    8e:f0:1e:41:20:d7:fc:20:fb:c7:a5:22:a5:27:80:
                    7a:b0:31:a3:48:dc:46:ff:79:cc:8f:6e:b7:76:67:
                    80:06:86:11:85:95:c5:08:23:52:dc:bf:e1:6e:cd:
                    b9:13:e1:f1:46:33:c6:6a:ed:a3:ee:29:b4:b3:99:
                    99:3e:3f:68:42:98:c6:10:27:03:af:42:2e:e6:f4:
                    3a:46:1b:2f:ad:ae:8c:62:1f:b7:2b:ca:45:52:14:
                    8a:c3:5a:e5:10:1c:da:6d:77:ad:ab:9b:ae:62:19:
                    38:fb:93:4c:61:00:25:e6:5c:d4:09:19:b6:d0:ec:
                    34:b2:21:3e:ec:6d:cc:a0:5e:e3:fb:ff:e3:17:58:
                    fc:41:b5:09:2d:1b:36:f8:3d:07:73:f3:e9:75:15:
                    d6:5a:67:d2:98:34:9e:16:92:5f:6b:97:72:3f:df:
                    b9:a2:44:d3:23:88:bf:04:06:e4:de:73:30:ea:29:
                    f7:14:1f:2e:b0:05:90:a9:95:ea:27:5d:70:03:23:
                    3a:37:28:b9:c7:c2:19:d7:df:d9:6b:5d:61:3b:f0:
                    4b:5a:38:ea:24:f7:ea:b2:4f:06:ac:df:6d:a2:0c:
                    2e:66:5e:c7:6b:8d:cc:e0:a3:8c:1f:0b:dc:78:9b:
                    8c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C6:5F:8C:34:25:75:9B:F9:69:26:8B:E7:2E:54:DD:33:A7:3B:33
            X509v3 Authority Key Identifier:
                keyid:17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b7:a3:d6:c1:b6:8f:4a:69:d3:ee:7f:94:b3:23:b3:ee:97:
         0d:1e:39:31:55:03:76:d1:d5:7c:d3:8e:ab:f9:f2:5d:2a:d5:
         bd:49:89:e0:b1:2b:23:af:60:06:e2:f9:90:e9:6a:75:60:2d:
         66:55:36:b4:5a:5c:80:36:d4:e1:54:23:ce:fe:e0:8a:d0:bf:
         86:00:c2:02:e5:e4:79:9d:d4:66:17:e4:89:a5:71:6a:48:6c:
         19:13:40:a2:7c:c5:3a:b9:e4:a2:89:b3:6f:a4:f4:7b:ea:6d:
         30:34:05:d2:21:33:3b:52:ff:a8:2b:9c:63:ef:ab:d1:12:6c:
         fe:34:ac:c8:1d:b4:ed:cb:1b:8e:f9:c8:68:e8:60:f9:4c:05:
         19:c7:31:1f:e2:7c:4c:77:9b:2e:40:0b:c6:3b:9b:7a:5e:7c:
         87:5a:59:08:27:e5:f8:db:98:2b:0c:97:12:58:fd:d6:ec:38:
         14:26:9b:8b:04:4d:61:65:d8:0e:fd:12:90:02:ee:a9:ab:74:
         e0:03:31:cb:97:ca:54:60:f5:09:b8:38:37:5f:0d:58:e5:31:
         ee:67:93:12:ec:ce:82:b3:31:92:f1:a7:55:9e:b0:ed:4b:5b:
         7d:df:87:d1:2b:42:56:5c:7f:21:d9:be:a8:70:ec:0a:eb:55:
         bb:a7:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:26 2025 by rpki-client