Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File:                     0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier:          xOgmhQKCBihlqA/XHSCeN9VvYgNS9FPlTp7V6NjbvMM=
Subject key identifier:   90:F3:E8:AC:3C:9B:25:B0:1F:A2:E8:A2:E6:54:ED:EE:32:9E:8C:7A
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer:       /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial:       019644B1DB236900425B7D6C3F2F1D01AB25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number:          08FA
Signing time:             Thu 17 Apr 2025 17:00:28 +0000
Manifest this update:     Thu 17 Apr 2025 17:00:28 +0000
Manifest next update:     Fri 18 Apr 2025 17:00:28 +0000
Files and hashes:         1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: FOoyW7HwgmqBW2+XH/SVAfnCYbj8zPCrePC1m4yCkVI=)
                          2: PdXLVimBA8zILWLashg1LUqBqm8.roa (hash: IrtzMysR6KSQR0SZiM1b2jUK5M57dKBFlK4qFH4B+Mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:b1:db:23:69:00:42:5b:7d:6c:3f:2f:1d:01:ab:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
        Validity
            Not Before: Apr 17 17:00:28 2025 GMT
            Not After : Apr 18 17:00:28 2025 GMT
        Subject: CN=90f3e8ac3c9b25b01fa2e8a2e654edee329e8c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:86:aa:d9:7b:8d:ee:7b:2b:99:35:ee:ba:93:
                    d2:a3:1f:57:cb:7d:d6:b0:39:dc:9c:73:d6:e8:43:
                    b9:50:5a:30:08:2e:34:14:07:24:42:4f:c7:17:31:
                    ea:f7:4b:fa:07:2b:37:87:2c:fc:5d:50:a4:3e:69:
                    a7:5f:b3:27:17:0b:32:95:59:0d:6b:0b:a7:a8:46:
                    4d:8e:c8:c3:b2:c4:cd:b4:17:64:70:32:b3:3c:aa:
                    ba:72:2b:6b:34:4f:15:5a:51:24:f4:f6:03:f3:9c:
                    fc:81:e7:1e:21:fb:e2:88:7b:dc:8a:fb:09:46:43:
                    98:e3:96:c6:26:4c:2a:1c:11:b7:1d:dc:ae:cc:d1:
                    c5:97:b4:c8:21:e4:ee:96:36:38:d5:61:f1:9c:f7:
                    cd:64:ee:65:4b:48:f2:7c:ee:d3:78:27:39:0c:d8:
                    8f:c0:05:a9:f8:b2:04:7a:8a:3d:35:15:cc:59:6a:
                    db:0e:6c:ec:54:c8:70:23:8a:e9:8e:2f:63:2e:82:
                    8d:f9:10:9d:2b:93:25:45:ad:fd:cf:f0:75:ba:32:
                    65:d9:d4:5e:5e:69:34:4c:7f:40:fe:fe:98:04:7e:
                    5f:d0:56:b1:ec:39:21:64:bc:4e:94:a1:55:ba:82:
                    ce:8e:d5:d1:8e:43:66:e6:22:7c:d7:93:d1:05:97:
                    7e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F3:E8:AC:3C:9B:25:B0:1F:A2:E8:A2:E6:54:ED:EE:32:9E:8C:7A
            X509v3 Authority Key Identifier:
                keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:33:46:d0:de:fe:3a:63:b6:f4:6c:35:32:fb:62:69:11:ec:
         cc:ad:3a:b0:d9:03:f8:7a:ab:ef:53:bb:19:98:4d:65:ba:b9:
         85:6a:7d:14:3f:a9:b9:71:c3:ee:7e:02:39:5e:3e:73:98:a1:
         80:aa:c6:ea:98:8d:37:4a:21:4e:12:67:22:73:fe:cc:b9:21:
         97:aa:a3:1c:a5:48:ef:0a:2e:9e:2f:4d:78:04:d0:3a:85:05:
         51:7e:59:22:f0:f3:4b:0c:9e:5e:43:3c:cd:52:13:6c:fb:64:
         76:c5:8f:f6:6d:6d:d2:26:e1:e9:92:69:5c:1a:15:5f:b8:ce:
         81:81:8a:73:0d:af:6c:07:f8:4a:a9:f8:bf:f9:41:fb:11:fd:
         0f:b7:0b:0b:89:2c:cc:1f:05:ea:cc:03:15:c0:b0:e5:b6:cd:
         ce:84:28:9f:75:7d:50:06:fc:a0:c4:00:1c:e5:f2:13:5d:55:
         c0:86:67:75:f1:c9:1f:ed:c1:ec:50:9f:e2:0d:3b:29:b6:7c:
         a1:28:30:3d:7a:eb:b2:f8:f1:c4:6c:29:1f:06:44:18:18:90:
         16:57:5c:68:d6:43:44:d7:7d:e7:92:e7:d2:87:1f:fa:f5:6d:
         4a:6e:3c:8e:e6:2a:c8:e0:a0:d9:7b:7d:bc:98:f0:8e:18:d4:
         c1:69:77:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:42:52 2025 by rpki-client