Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File:                     VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier:          5ZyFOezEPtXrFrI0c7BaPpLcedmJDT8tKKftNjPaG5s=
Subject key identifier:   34:C4:94:C9:06:01:33:93:C1:3F:AE:7E:19:DA:9B:9F:A7:03:CA:17
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer:       /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial:       01958B166B9EEF08F08B22968917F153C946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number:          11A2
Signing time:             Wed 12 Mar 2025 16:00:57 +0000
Manifest this update:     Wed 12 Mar 2025 16:00:57 +0000
Manifest next update:     Thu 13 Mar 2025 16:00:57 +0000
Files and hashes:         1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: +IvakaxBx4Tb8sTejW0MCK/vO3xDpWJaknz2naSnMVU=)
                          2: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (hash: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 16:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:16:6b:9e:ef:08:f0:8b:22:96:89:17:f1:53:c9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
        Validity
            Not Before: Mar 12 16:00:57 2025 GMT
            Not After : Mar 13 16:00:57 2025 GMT
        Subject: CN=34c494c906013393c13fae7e19da9b9fa703ca17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:c4:28:32:f1:d4:40:a2:04:2b:47:02:7c:
                    20:01:c2:d8:ef:52:2f:ec:4f:eb:8e:cc:da:c6:9c:
                    a4:c5:70:92:c8:c7:59:12:1f:ff:4e:ee:cf:f2:35:
                    cb:c3:77:03:2f:c5:c5:54:33:38:8f:97:ee:06:a3:
                    02:19:3b:6a:35:7c:0b:f5:cf:ea:77:12:4e:18:bd:
                    05:2a:76:c1:b2:63:cf:8b:29:53:2c:79:e5:d8:8d:
                    71:3a:02:9a:7d:86:53:8c:53:ba:85:69:58:c9:07:
                    cf:ac:c1:02:8c:8d:f3:91:e4:f5:da:22:e9:a7:32:
                    a3:15:7b:0a:f3:7b:cc:a7:19:46:9c:02:50:5f:d2:
                    4a:73:94:a0:e9:59:58:09:4e:9a:57:8a:53:d3:24:
                    f5:85:79:1a:4e:9b:35:18:df:4e:4e:5d:72:40:76:
                    c3:87:b5:4c:ad:47:d8:08:4d:40:3c:34:09:8d:ff:
                    95:60:0d:79:22:42:46:45:7e:2b:59:1f:78:5a:03:
                    a0:63:77:07:40:27:6a:74:a2:ea:23:ba:85:8c:9a:
                    9b:4b:75:63:5c:7f:bc:a2:2d:0a:17:d6:10:f9:73:
                    56:15:8c:e5:ea:5f:ed:5f:28:fa:46:7c:cb:89:ac:
                    db:8c:ed:1e:fe:9d:2f:00:38:4f:64:73:2d:a3:1a:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C4:94:C9:06:01:33:93:C1:3F:AE:7E:19:DA:9B:9F:A7:03:CA:17
            X509v3 Authority Key Identifier:
                keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7c:20:18:49:0c:23:6e:c7:91:97:17:8b:89:1f:30:8f:4e:
         90:4d:cc:e5:08:90:37:a8:1e:26:84:de:91:5c:e0:13:50:49:
         84:9e:7a:25:71:5f:91:80:f7:27:75:34:f6:3e:44:e9:c1:11:
         9d:05:50:52:51:91:85:59:ef:8e:81:7b:a5:ba:c6:a0:a6:43:
         e1:bf:42:16:a1:63:f2:3b:c2:dd:94:f6:56:ba:d7:91:2d:87:
         1a:7a:09:16:bd:56:b3:bc:d5:37:e4:d4:99:53:e4:3a:c4:95:
         25:62:21:1a:d2:65:b4:dd:73:b0:a1:a0:84:ab:2d:3b:8c:81:
         7a:84:4d:98:c5:69:e3:be:19:62:74:78:33:c8:55:f6:0d:02:
         47:5b:33:57:5b:e6:f0:ad:d0:98:6f:3c:67:86:76:70:08:6f:
         28:97:1b:d6:66:a3:72:e5:46:d8:47:24:81:98:9d:5f:11:7e:
         ff:23:04:41:96:4e:b6:55:96:52:ee:33:69:71:59:bb:93:68:
         a6:e2:19:1e:a3:2b:94:e4:5e:05:15:55:15:34:6c:12:05:18:
         0f:7c:50:77:0e:66:66:69:91:e1:a3:8d:f0:f4:a3:cd:b6:e4:
         f0:0a:de:ae:e2:5b:3e:13:8c:b8:31:d2:1c:57:a5:ef:5c:f7:
         41:b7:5f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:17 2025 by rpki-client