Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
File:                     2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json)
Hash identifier:          ScBbi0A4DgcdjdMJ6+Bd7qEX2/61D+8tweGFSilUKp4=
Subject key identifier:   77:8B:F7:40:D8:AD:65:04:3C:34:0C:90:7D:1B:9E:22:28:17:5B:C7
Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
Certificate issuer:       /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Certificate serial:       01965538B27F218C2F23237753625252DF17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
Manifest number:          099C
Signing time:             Sun 20 Apr 2025 22:01:41 +0000
Manifest this update:     Sun 20 Apr 2025 22:01:41 +0000
Manifest next update:     Mon 21 Apr 2025 22:01:41 +0000
Files and hashes:         1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: mY3ER75mQt1iLjOg8zq3b4KQuMVm4E6THYx5LdyOMzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:38:b2:7f:21:8c:2f:23:23:77:53:62:52:52:df:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
        Validity
            Not Before: Apr 20 22:01:41 2025 GMT
            Not After : Apr 21 22:01:41 2025 GMT
        Subject: CN=778bf740d8ad65043c340c907d1b9e2228175bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:22:b5:97:c7:50:94:dd:ea:e3:69:58:79:
                    c8:43:38:65:dd:4a:25:e5:db:12:dd:5a:b6:d7:38:
                    47:29:81:9d:4f:8e:ad:ef:63:c0:c2:55:1e:c3:a4:
                    0d:e6:83:94:01:c3:77:a9:3a:08:51:e1:4e:d7:66:
                    7d:0c:a6:70:a1:17:2f:86:42:61:1a:2d:7e:06:a7:
                    64:f4:02:3a:d6:9f:db:26:96:96:46:67:05:d9:aa:
                    91:6b:99:74:ab:d0:d8:b6:a2:ea:83:51:b2:92:7b:
                    83:25:33:ff:f3:40:0f:34:fb:12:f6:2b:ff:76:30:
                    29:65:ee:60:fb:eb:bd:43:53:31:9a:66:65:76:e9:
                    bc:22:20:58:1b:3b:98:9b:0b:b7:e6:75:9a:25:e7:
                    7f:54:5f:f5:3f:2d:7c:55:cb:36:6f:b2:a4:a4:7a:
                    50:17:56:0a:22:f8:9b:7a:73:fe:3d:e3:20:58:06:
                    ba:96:83:23:6d:63:9a:e8:a1:b0:5e:4a:70:cd:2c:
                    29:b5:47:c9:89:00:3c:5d:d4:68:79:6d:74:91:5b:
                    a1:72:13:c6:1c:54:7d:ae:66:5c:8d:21:55:b7:6b:
                    fb:6e:f9:7c:bb:28:b0:15:af:b9:b5:b5:f6:da:36:
                    37:71:05:52:83:70:c8:bd:ca:ee:d8:e1:35:d3:77:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8B:F7:40:D8:AD:65:04:3C:34:0C:90:7D:1B:9E:22:28:17:5B:C7
            X509v3 Authority Key Identifier:
                keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:28:da:12:bd:4d:58:e0:b6:9a:4c:02:47:ab:24:85:c4:67:
         ae:50:91:9b:b6:21:32:23:6e:dd:8b:07:f9:5f:b5:3f:86:5f:
         fc:aa:50:92:d1:91:56:10:c1:33:2f:d0:6a:75:36:6a:33:2e:
         c9:5c:ed:35:1c:a0:fa:89:af:00:31:d0:36:27:85:d5:76:67:
         47:5c:2e:4b:60:15:b0:0f:f3:39:8d:aa:e0:90:16:36:04:4a:
         96:aa:24:e7:5b:1e:eb:57:3b:0e:5c:b9:da:0b:19:c4:c6:80:
         54:c5:5d:4e:dd:12:64:ac:45:ce:84:f7:e6:ae:51:79:fb:84:
         04:6c:66:ae:54:f8:65:3d:2e:22:b9:23:dd:2c:16:be:15:08:
         70:55:5b:33:f9:fc:11:70:72:91:b0:5e:fa:d2:e8:2a:5e:eb:
         08:04:93:b4:0d:08:6d:f6:a1:cc:c5:c8:53:1c:85:b7:9a:dc:
         f8:3f:6c:b9:64:92:ff:bf:4b:e2:00:d1:bc:e0:a2:a9:d8:e6:
         3a:33:35:9a:9e:6e:9d:0c:b7:d2:1e:17:77:50:a0:fa:d6:c3:
         e4:0a:de:19:31:4e:6b:1e:11:bd:98:41:0f:af:5b:c7:66:a2:
         ac:9e:29:0e:5e:f1:07:c9:ea:b0:cd:17:23:fe:96:10:f7:c3:
         76:dc:d0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:03 2025 by rpki-client