Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File:                     0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier:          WaDAKRWKtLh6AeIHJyT8EGmY7jja30/PU+jMzVfCyPg=
Subject key identifier:   5B:44:8F:1C:17:21:75:21:6B:BC:52:31:11:97:63:C6:35:B3:98:1C
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer:       /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial:       019643D60EE0DDFDD9C7B9326C8162D42334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number:          11C4
Signing time:             Thu 17 Apr 2025 13:00:23 +0000
Manifest this update:     Thu 17 Apr 2025 13:00:23 +0000
Manifest next update:     Fri 18 Apr 2025 13:00:23 +0000
Files and hashes:         1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: Y9fFTKMUGejoK+eUYWv9Tiqejk12oa1S1AO/j9j4u9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:d6:0e:e0:dd:fd:d9:c7:b9:32:6c:81:62:d4:23:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
        Validity
            Not Before: Apr 17 13:00:23 2025 GMT
            Not After : Apr 18 13:00:23 2025 GMT
        Subject: CN=5b448f1c172175216bbc5231119763c635b3981c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:56:1e:c5:34:58:d4:a2:c5:bc:1d:77:55:
                    7e:44:dc:88:ea:40:94:df:55:62:0a:22:cc:7f:10:
                    2a:da:27:33:4c:f3:25:12:db:75:5d:1d:00:61:d2:
                    91:ca:ac:9a:7b:e4:f1:e0:d0:ee:ea:f5:f7:d1:63:
                    80:3c:8b:ab:8e:33:99:76:b9:65:b4:28:63:ea:5d:
                    28:bf:78:05:83:90:2c:69:49:5f:62:96:34:da:34:
                    be:ef:42:c9:df:f9:e6:70:e2:da:79:ea:4f:ab:33:
                    06:12:af:96:23:1d:c7:67:5a:d3:46:37:b0:19:aa:
                    3e:33:e9:1a:07:61:fe:ed:ff:85:8f:53:ac:a0:6f:
                    03:bb:ce:50:ad:ef:0e:73:19:77:0b:95:75:6f:53:
                    10:ad:c3:a0:c4:90:94:0d:3c:f2:7c:4a:1e:bf:16:
                    49:fc:24:83:2c:6d:94:c2:94:bb:71:d9:9e:66:b0:
                    26:78:54:0d:af:db:a7:e1:40:b9:1d:9c:07:00:1e:
                    e4:84:fd:2d:46:a2:8d:67:0c:ed:32:75:6b:2e:3b:
                    74:08:f1:39:ba:31:45:01:34:64:66:dc:ab:a8:52:
                    d0:16:b1:a8:a4:ca:79:36:6a:6a:31:b7:d7:1f:00:
                    e2:ab:65:95:a6:10:02:57:47:33:ca:21:10:5f:e9:
                    f3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:44:8F:1C:17:21:75:21:6B:BC:52:31:11:97:63:C6:35:B3:98:1C
            X509v3 Authority Key Identifier:
                keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f5:0a:82:4b:3d:48:85:17:6c:f1:5b:d9:7b:35:87:54:14:
         ce:15:c5:7a:91:b7:7e:f7:0a:e4:0b:70:e7:f5:4d:2c:e1:7a:
         ae:a1:80:30:b5:35:94:52:aa:a9:fe:0f:9a:e7:22:ba:c9:cc:
         56:60:d8:af:ad:3a:fc:d3:e5:07:9c:8e:4e:09:34:d4:5b:5d:
         f0:c2:4f:24:a7:20:83:e3:56:2f:9a:2a:3d:a3:a5:a3:58:aa:
         26:92:3b:cb:31:76:b1:f3:5f:c8:36:f3:d1:ce:5b:be:c5:ed:
         fa:08:64:9f:79:6d:97:15:7b:04:61:9c:a6:89:49:67:7f:7c:
         83:14:5f:aa:c2:29:05:4d:39:11:85:67:f2:9b:49:64:fb:24:
         f8:14:f7:20:f8:49:1e:d2:9f:50:7c:94:62:80:a6:de:bb:33:
         a3:b7:2c:7b:90:d4:89:a5:b7:16:48:a3:1f:ef:ff:01:5f:88:
         74:59:04:74:10:b4:fd:9d:81:97:a9:20:f8:b2:f0:0e:6e:7a:
         f1:81:a6:4e:59:49:39:a0:02:46:4c:76:01:b4:fe:f1:f3:dd:
         19:67:21:70:e5:88:fc:77:86:fd:6e:28:8c:07:96:4e:30:11:
         98:bd:57:73:ae:5d:06:8e:78:82:f9:af:3f:2b:17:e9:24:70:
         7a:be:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:34 2025 by rpki-client