Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
File:                     pLZEawxtzc3387msQReHxvLreyQ.mft (raw, json)
Hash identifier:          hD1Vc9/gpJpuPfBV4CnH5HOd5h0SoOYRJtDyXL5TesE=
Subject key identifier:   BC:6D:12:0D:98:7A:0E:37:9F:3E:77:12:2A:9A:1E:DF:37:6D:C4:F3
Authority key identifier: A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24
Certificate issuer:       /CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
Certificate serial:       01964D7E41A8C8A26FCEB9A3FA48C3A31BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
Manifest number:          0663
Signing time:             Sat 19 Apr 2025 10:00:42 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:42 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:42 +0000
Files and hashes:         1: pLZEawxtzc3387msQReHxvLreyQ.crl (hash: zIUxC9qVUkrtnF+bDM4REGTUMWKEmvvkf1qYKcoknyo=)
                          2: rIcxsp5sz0dlPPDFoVMkw-kijLA.roa (hash: 0KgN5QUZAAHsy9G448/+3BQRGi6qn4R8WGa6FVROC2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:41:a8:c8:a2:6f:ce:b9:a3:fa:48:c3:a3:1b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b6446b0c6dcdcdf7f3b9ac411787c6f2eb7b24
        Validity
            Not Before: Apr 19 10:00:42 2025 GMT
            Not After : Apr 20 10:00:42 2025 GMT
        Subject: CN=bc6d120d987a0e379f3e77122a9a1edf376dc4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:25:b8:f4:33:1b:0e:9a:c3:a4:64:d0:06:1c:
                    74:15:ce:4c:7a:60:37:05:91:0d:16:80:c5:24:86:
                    51:60:95:0f:11:cd:13:e9:63:04:61:d3:31:fb:e9:
                    f9:3a:c7:25:59:30:70:66:7d:f0:57:d9:42:2d:53:
                    c4:85:96:d4:ca:98:6d:5d:22:37:4c:89:03:07:e0:
                    ac:6e:2a:40:fd:76:94:5d:ad:93:0d:00:fa:b1:60:
                    88:dd:e3:2b:9b:fb:01:fd:3f:04:2c:d2:a1:ef:a8:
                    1c:54:c8:8d:3a:09:48:76:09:26:8c:29:03:73:25:
                    0f:cd:ec:35:ae:40:46:3c:4b:e6:0f:9e:30:66:b1:
                    5e:4f:61:f8:52:51:e7:8b:70:28:19:57:9a:81:16:
                    23:e8:f9:0e:3b:56:0d:11:94:13:cf:42:ef:ab:4a:
                    05:ac:40:b1:01:79:5d:67:ca:ab:20:8b:89:c0:31:
                    ea:37:3c:74:d9:fe:f3:66:11:c0:0e:11:d4:66:d2:
                    de:20:63:bd:15:28:26:ac:5b:73:68:6c:07:81:90:
                    1c:32:ec:a9:73:3b:71:a2:a3:a5:06:8c:df:f4:07:
                    5b:a4:46:03:7c:44:1d:29:bc:27:53:9d:18:06:be:
                    94:a6:0f:24:a0:70:88:4c:df:c1:e2:3b:c8:6e:50:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6D:12:0D:98:7A:0E:37:9F:3E:77:12:2A:9A:1E:DF:37:6D:C4:F3
            X509v3 Authority Key Identifier:
                keyid:A4:B6:44:6B:0C:6D:CD:CD:F7:F3:B9:AC:41:17:87:C6:F2:EB:7B:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZEawxtzc3387msQReHxvLreyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/90f9a8-7a9a-47d7-8493-c94d393b8a97/1/pLZEawxtzc3387msQReHxvLreyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:73:d0:fb:4e:4a:e3:8b:a6:02:07:54:77:9a:bb:04:81:16:
         5e:8f:67:15:7b:f6:4a:45:ee:77:cf:07:ed:83:31:0e:bf:78:
         e0:40:df:a5:72:2d:86:f5:12:5b:3f:3b:72:06:c6:8a:22:ae:
         33:ba:8a:98:bb:d3:21:05:27:73:ab:60:9b:77:19:bb:3d:6c:
         01:12:5b:13:4c:4f:30:55:48:1e:e5:7c:80:f0:3d:ee:56:f8:
         83:f8:bc:1c:64:1e:78:24:05:6f:66:c2:a1:8e:fd:54:07:34:
         71:bb:e0:c6:48:dc:eb:ee:55:18:43:4c:2c:66:49:0c:6b:9e:
         02:b9:2b:b9:12:fe:0b:cb:a7:1b:be:c8:90:6e:42:ab:f3:cd:
         23:78:08:ea:cf:eb:78:14:c9:5b:c9:8b:f7:8b:45:ff:4f:b9:
         14:5e:7b:25:e6:10:d5:87:74:c8:33:fd:cb:f1:6d:1b:de:a4:
         ec:eb:17:d6:ea:1c:6d:f8:4d:21:a3:1f:98:8d:f0:96:e2:00:
         98:cd:6b:91:c8:7b:c3:8d:b1:53:40:90:d4:c7:4d:b3:df:e8:
         06:a1:06:3c:1f:30:14:23:6e:55:d1:f5:3e:61:63:08:e9:41:
         33:c8:ee:5a:a8:e8:af:ed:4a:df:ec:b6:1d:ae:26:05:df:27:
         e0:ca:7c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:22 2025 by rpki-client