Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File:                     XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier:          9DByecWiydumNWN8/5sga6iMxFoZchIPbygcIGKPO20=
Subject key identifier:   36:A5:32:B7:34:41:22:9F:F3:AE:02:7A:67:8C:2C:2B:0F:68:D1:72
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer:       /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial:       01958CCE59ECC70BB64F4984857B6DE935D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number:          1494
Signing time:             Thu 13 Mar 2025 00:01:28 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:28 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:28 +0000
Files and hashes:         1: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: 6ODydoGpW2jbxK/NXf8Vm8McCsQnYMrN69xpr11lX/U=)
                          2: wl9SNv70naNlxlbGYA9UwaRdUUM.roa (hash: cBLc9nicdCyrqpLVSvLzNsHxSpcCPqY4HcbtkzPI2zI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:ce:59:ec:c7:0b:b6:4f:49:84:85:7b:6d:e9:35:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
        Validity
            Not Before: Mar 13 00:01:28 2025 GMT
            Not After : Mar 14 00:01:28 2025 GMT
        Subject: CN=36a532b73441229ff3ae027a678c2c2b0f68d172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:d4:d1:cd:f6:da:7c:11:c9:bc:ad:cb:79:
                    d2:64:7e:52:ce:80:fc:f0:d2:01:df:10:76:e8:69:
                    f6:ea:80:68:1b:cd:27:48:97:1c:51:7c:c3:38:e2:
                    8f:2c:b5:0b:7c:f3:60:69:8b:f9:2c:a4:0f:ea:23:
                    dd:c4:08:e1:57:86:20:53:4c:ab:27:b8:1e:af:18:
                    9e:fc:aa:48:85:e7:5e:c7:d1:56:ed:9d:c1:40:43:
                    de:17:3e:fe:c1:7a:c0:9a:d4:aa:d9:d1:14:28:84:
                    81:8f:77:b5:da:7b:b8:7c:b0:af:90:07:18:d3:7c:
                    fa:e1:df:6c:51:7a:ed:c5:20:20:a2:c2:38:99:f2:
                    ef:58:9b:9f:3d:07:16:ac:b8:19:9c:b6:7d:a3:c0:
                    ac:14:4c:0e:36:ed:b7:5f:43:64:72:86:9d:bc:b3:
                    71:9e:39:ff:b8:ef:04:b9:1d:f2:c3:d9:3d:16:bd:
                    3a:0f:53:10:1e:49:9b:60:84:2e:18:62:9a:3b:d3:
                    ed:29:97:91:dc:02:71:20:d0:22:a5:68:01:93:64:
                    ae:60:92:ff:51:09:56:46:56:9b:15:b0:2f:be:05:
                    ab:cf:2e:12:85:3a:53:d3:f6:88:06:81:99:62:b6:
                    e5:2c:cc:a5:4f:de:22:84:38:26:32:b7:4e:b3:8d:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A5:32:B7:34:41:22:9F:F3:AE:02:7A:67:8C:2C:2B:0F:68:D1:72
            X509v3 Authority Key Identifier:
                keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:2c:c4:d7:39:a4:f0:bc:7c:a6:2e:38:2a:ae:72:0b:ed:bd:
         22:74:ae:12:34:bf:6e:7d:18:47:59:27:98:98:c8:90:c7:7d:
         ef:ee:26:6c:13:6d:e8:c4:fb:15:2e:d1:1d:b8:e1:df:f6:89:
         a0:31:51:c8:54:e2:30:9b:c5:93:6d:01:e9:d5:4a:04:c3:8e:
         bc:78:9d:33:83:32:da:f5:a4:38:0c:25:fc:f6:61:11:4b:17:
         1c:58:24:f0:29:26:5f:a2:2f:99:62:bc:e6:8e:ed:2e:24:0b:
         27:cc:90:0e:e5:b5:18:59:05:4a:d1:0d:09:76:36:6b:5f:4f:
         12:36:25:ba:8c:ea:da:fb:ab:6e:2f:ca:25:f6:7a:97:31:d1:
         b3:76:8c:65:5d:31:4c:c9:e0:ba:24:aa:53:05:ce:56:74:7b:
         a8:9c:82:74:4e:1a:31:ef:1c:05:14:31:fd:2c:e6:4c:6f:d2:
         e9:f4:da:76:37:a0:c8:62:38:da:b0:07:db:57:4e:53:fe:0c:
         f4:09:c7:54:a4:12:ab:ed:1e:8e:d0:2f:4e:e2:27:fc:86:3c:
         27:0e:bb:7f:80:63:8d:69:92:fd:50:ab:c2:92:bf:c5:45:b5:
         a0:7b:2d:e1:f9:32:30:3e:2c:49:5c:71:e1:ac:00:2e:54:12:
         17:16:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:28 2025 by rpki-client