Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
File:                     Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json)
Hash identifier:          jppvrja42xio3yso48yb5oNRSmobaPpqbU/S8TriC9M=
Subject key identifier:   0B:AC:30:F9:95:4C:83:F6:76:15:91:5E:79:FA:E2:AD:32:99:2C:09
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Certificate issuer:       /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial:       01964C6BC4DE798B329B7DF41B18459353ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
Manifest number:          0D30
Signing time:             Sat 19 Apr 2025 05:00:53 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:53 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:53 +0000
Files and hashes:         1: Mg03f5x9KEwTzrWMVXcY-DpbRQM.roa (hash: gHoeFO+xk1dFoFV2Z9UYHxVBDmrYCHhqpQCvP+8wkDE=)
                          2: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: 0xPvyey+kBMMWW1ZNVoR1KJ8M9xzGnVA1oRdmBoe+W8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:c4:de:79:8b:32:9b:7d:f4:1b:18:45:93:53:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
        Validity
            Not Before: Apr 19 05:00:53 2025 GMT
            Not After : Apr 20 05:00:53 2025 GMT
        Subject: CN=0bac30f9954c83f67615915e79fae2ad32992c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4b:1f:51:7f:7e:ab:b4:8a:8a:4a:f7:cb:f3:
                    35:46:d1:91:7b:02:87:f1:fd:f2:b4:de:50:cc:6a:
                    e5:2a:03:ed:db:56:65:68:97:1e:08:66:ef:7b:36:
                    68:9d:a5:20:ca:26:66:db:df:54:1e:91:b2:f9:a2:
                    36:16:06:cc:47:50:f5:7a:07:35:0b:1b:c2:92:3d:
                    d6:0a:10:f3:92:01:3c:5c:2b:63:e2:69:98:60:48:
                    9d:20:af:90:d1:d6:02:03:56:7c:70:29:97:cc:d3:
                    4c:70:84:f6:85:da:c9:04:7c:6f:0a:1e:a1:08:4c:
                    c7:e6:43:52:08:18:ae:bb:66:89:b7:06:a8:3b:ce:
                    9d:bd:93:50:7f:71:a3:46:78:32:96:a7:8a:ba:8f:
                    14:0e:8a:80:4e:24:5b:2c:87:75:51:f9:8b:fc:33:
                    64:1c:9c:70:b4:5d:c1:f3:f9:fd:fd:de:b9:79:8f:
                    69:28:b3:c8:d1:84:94:e5:78:a2:c4:00:8d:67:5d:
                    29:77:c6:ce:65:8d:e0:cc:5b:e6:57:24:1b:67:6f:
                    66:05:91:74:3f:b1:9b:c7:74:cb:2d:29:6e:97:0e:
                    ae:5c:5e:53:cb:02:06:50:35:2c:75:44:ea:95:35:
                    e5:e2:43:51:de:29:8c:b4:7b:02:e3:61:4a:d0:2c:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AC:30:F9:95:4C:83:F6:76:15:91:5E:79:FA:E2:AD:32:99:2C:09
            X509v3 Authority Key Identifier:
                keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:2d:ec:60:12:1e:ef:fe:68:54:96:2e:42:16:38:a6:8e:8a:
         62:58:bd:eb:e0:bf:3f:6d:70:70:9e:85:10:bd:88:96:3c:77:
         7d:7a:ab:29:22:51:ee:79:62:45:02:d5:60:00:12:72:59:83:
         d2:b1:cf:92:bb:57:a4:54:59:c6:74:bc:89:b1:6d:08:fb:dd:
         9d:ff:b5:82:7e:f1:f1:b8:b8:d9:5a:df:87:ec:a9:61:61:c9:
         e1:fe:c9:88:35:b1:c9:b2:3d:c7:6d:40:8b:f7:d3:d5:af:29:
         ed:8c:fe:d9:b2:06:8a:c2:f3:07:16:04:aa:e7:11:75:8e:11:
         e9:b9:1d:3a:b0:a8:6f:63:23:cb:c2:23:9d:75:7c:2c:ac:2e:
         cc:68:ba:03:26:cd:19:2a:19:39:73:62:9d:58:f0:72:66:78:
         31:38:16:d6:01:75:7b:51:8f:d9:91:7b:f6:07:a0:bb:ed:25:
         f3:ac:cd:5d:64:10:37:d4:ac:ac:35:f7:dc:2b:01:28:3a:ab:
         82:58:c2:17:92:14:07:25:43:0f:57:07:96:17:f9:04:63:f2:
         37:38:69:d3:9b:e2:bb:f4:23:b8:d2:6b:5e:a7:54:5e:24:f4:
         be:76:52:45:57:63:f7:99:a5:f5:ca:59:dd:b3:6c:a9:fa:6a:
         52:fa:01:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:46 2025 by rpki-client