Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
File:                     uCtyJxX5G-eSoew8Med-2doFy-E.mft (raw, json)
Hash identifier:          SanG6GR23ucM5dB7XL6AZC1EFeVewEpKFxdm0IKb+0c=
Subject key identifier:   6C:2A:EE:D3:E9:FE:C3:F7:CE:FB:18:85:B3:D5:CC:7C:53:6E:D4:90
Authority key identifier: B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1
Certificate issuer:       /CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
Certificate serial:       01964B9081EFEB0BFEED89A0086F72CEE9A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
Manifest number:          1500
Signing time:             Sat 19 Apr 2025 01:01:23 +0000
Manifest this update:     Sat 19 Apr 2025 01:01:23 +0000
Manifest next update:     Sun 20 Apr 2025 01:01:23 +0000
Files and hashes:         1: uCtyJxX5G-eSoew8Med-2doFy-E.crl (hash: XeN8la+XZEC2/embu2tS+DilZTZ9jG9zivB6ZxmuFEs=)
                          2: uXdBuhKzl7TqagYxbnMVKfuzZgw.roa (hash: 439m9an3WKHP1JzPsBM0Kr1+N4e9+/KuslEwF/6KLxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 01:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:90:81:ef:eb:0b:fe:ed:89:a0:08:6f:72:ce:e9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82b722715f91be792a1ec3c31e77ed9da05cbe1
        Validity
            Not Before: Apr 19 01:01:23 2025 GMT
            Not After : Apr 20 01:01:23 2025 GMT
        Subject: CN=6c2aeed3e9fec3f7cefb1885b3d5cc7c536ed490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:31:52:d1:2e:3e:00:3b:82:d1:f1:77:7f:
                    d7:76:0a:c1:b5:26:cf:64:91:9a:46:b0:9f:7a:1f:
                    02:b5:ad:4b:46:6e:23:cd:cf:8c:83:5a:93:48:08:
                    67:2c:49:31:91:98:05:52:02:46:d0:f1:b1:34:1d:
                    52:40:24:e1:66:a8:13:95:02:be:a0:a1:3a:23:d1:
                    94:08:44:51:64:12:58:3c:3b:7c:f2:75:11:b8:23:
                    f2:cd:1b:ca:cd:64:19:ae:b4:90:0c:0c:45:9b:04:
                    52:cf:92:ea:d0:98:e9:2d:3d:fb:80:af:5e:88:04:
                    1a:7f:e6:91:a1:f0:04:e4:4d:28:69:66:9e:e2:4d:
                    bf:7a:76:d2:17:6e:a9:17:9a:08:82:6f:a7:f8:d7:
                    80:94:03:de:41:7a:11:5e:f9:0d:f7:5d:65:59:88:
                    8e:8f:69:66:1e:ad:b2:de:b5:06:39:c7:fe:49:6b:
                    35:db:28:00:eb:6a:ca:6f:92:0a:ef:3d:6d:f2:11:
                    a9:2f:b3:42:4f:f6:5f:72:f2:6b:b4:86:cc:0d:4b:
                    c7:3a:d7:62:13:72:9c:aa:af:25:57:ae:4b:8b:c4:
                    8d:1d:76:a0:a8:f3:1a:1a:a4:d3:21:6b:63:26:fa:
                    e4:2a:63:dc:e1:b1:60:7e:ce:2b:6a:2f:f7:b4:3e:
                    2f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2A:EE:D3:E9:FE:C3:F7:CE:FB:18:85:B3:D5:CC:7C:53:6E:D4:90
            X509v3 Authority Key Identifier:
                keyid:B8:2B:72:27:15:F9:1B:E7:92:A1:EC:3C:31:E7:7E:D9:DA:05:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCtyJxX5G-eSoew8Med-2doFy-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/396759-b0c6-48ef-97b3-a15a18613da6/1/uCtyJxX5G-eSoew8Med-2doFy-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:22:e9:b1:ce:a5:1e:ab:f7:07:3f:ff:95:fa:7f:24:f9:ae:
         a8:7c:ae:99:63:06:d8:66:bf:27:f1:39:f8:ca:6d:8e:c3:b7:
         fd:33:ff:cd:3b:4d:ca:71:3a:53:f5:65:30:1d:d1:7a:9d:a8:
         c5:d4:49:a0:5b:64:02:15:a6:ff:58:ac:61:45:cb:58:c5:2d:
         1c:64:a7:bd:d2:82:6c:9f:7e:0d:a1:eb:62:e1:db:c2:9c:f4:
         0b:4f:d8:57:83:78:f7:a8:bc:d8:18:65:45:7c:91:91:f9:58:
         a1:65:e3:d2:20:b8:2d:3d:33:fd:d8:4f:29:89:0d:3a:00:1d:
         a5:79:a9:75:41:16:a1:65:4a:b4:48:d6:5c:7d:de:8a:c5:7f:
         29:05:e4:10:5e:a1:71:f7:72:7f:a2:51:25:10:50:41:a3:fe:
         b3:92:64:ba:cb:89:1d:69:53:cb:a2:23:31:ed:92:97:b1:eb:
         7e:0a:6b:85:00:9c:65:c6:eb:e4:dd:a4:5a:70:af:ad:a0:d7:
         72:c4:49:89:f8:6b:ce:e1:50:8b:2e:1e:49:fb:10:5c:69:0f:
         a5:ce:97:45:72:4b:9f:63:a9:0f:0d:2b:fc:f3:82:eb:38:10:
         38:74:3b:2c:58:f4:23:bc:af:a0:82:8c:f8:2b:77:c5:aa:13:
         01:5b:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:40:16 2025 by rpki-client