Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File:                     VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier:          RisMm9Qynspa0WwedvjpaC1Z3EVNsOPx5vF3RG1SZtA=
Subject key identifier:   61:32:2D:58:E0:50:80:7A:E8:A4:1F:A7:D5:7F:62:A3:E2:53:75:37
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer:       /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial:       0196447B8C90206F063B4A81D8970FB3F1E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number:          1202
Signing time:             Thu 17 Apr 2025 16:01:09 +0000
Manifest this update:     Thu 17 Apr 2025 16:01:09 +0000
Manifest next update:     Fri 18 Apr 2025 16:01:09 +0000
Files and hashes:         1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: LoHH2pg48QG8dKgX5GtTiBgi1cJRtmRh0jCDSrUE+I4=)
                          2: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (hash: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:8c:90:20:6f:06:3b:4a:81:d8:97:0f:b3:f1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
        Validity
            Not Before: Apr 17 16:01:09 2025 GMT
            Not After : Apr 18 16:01:09 2025 GMT
        Subject: CN=61322d58e050807ae8a41fa7d57f62a3e2537537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:ce:23:50:5a:e4:ff:83:b8:66:ee:16:c3:
                    a0:79:a2:80:8d:1f:fd:9a:d8:66:82:2f:f4:b3:3f:
                    2b:16:8f:31:6c:2c:a7:96:e7:51:3b:c1:97:35:3d:
                    d2:19:e9:8a:d4:73:35:68:4a:5a:10:40:29:52:8c:
                    c1:4b:a4:06:f8:f6:14:3b:26:da:ec:b8:36:d2:67:
                    53:e4:25:88:83:19:93:a7:54:a1:a7:e1:82:de:5d:
                    53:b3:ae:b2:98:f1:d1:c2:03:3c:5a:2e:f1:99:d1:
                    7f:03:47:32:e0:75:f9:c1:09:1a:03:8d:7f:6d:d9:
                    03:5b:60:88:44:19:b6:c1:a4:33:7d:35:c5:40:73:
                    d2:d8:01:82:c6:80:8d:ef:9c:9d:d1:8f:43:53:19:
                    2f:df:43:bb:ac:d6:95:92:c2:a2:d5:7c:79:fb:f4:
                    bb:f2:4b:5e:54:ce:f6:ec:e9:9d:66:67:1c:27:24:
                    6c:d3:c9:76:81:53:b5:9a:62:21:d1:03:1d:74:21:
                    f4:25:63:fd:87:98:99:fe:29:38:4a:91:37:4a:c8:
                    14:68:1f:a9:bb:ac:bc:0d:ee:a6:d8:54:bc:cf:bf:
                    c4:1f:bf:ca:02:86:2d:7a:cd:68:e1:3f:67:f8:c5:
                    74:2a:35:21:24:9e:f1:bc:76:6e:db:87:09:28:39:
                    1e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:32:2D:58:E0:50:80:7A:E8:A4:1F:A7:D5:7F:62:A3:E2:53:75:37
            X509v3 Authority Key Identifier:
                keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2d:7a:eb:11:6b:7e:f1:cd:f6:98:f5:0c:00:c8:38:da:cd:
         ae:8f:ef:9a:bd:c9:f5:4c:d2:29:6d:7f:8c:14:c6:3e:7a:15:
         8a:24:a4:96:43:3d:7d:9c:f3:42:84:16:34:8f:e7:b0:f3:c7:
         38:21:24:26:ef:b8:f8:04:0d:40:b1:c4:7f:56:3f:d6:f4:29:
         df:aa:7e:17:97:90:a9:0b:6d:71:4c:d1:49:4d:8c:e3:2a:09:
         43:e1:3a:c7:9e:0e:16:1c:98:e2:94:19:3a:3a:93:c8:39:4c:
         9d:14:23:6b:96:0a:01:bd:25:1d:65:46:b8:7d:ae:71:c8:b8:
         ff:b5:f9:9e:59:f1:82:ec:1a:ef:ec:41:82:d9:40:16:bb:3c:
         ee:df:03:3d:47:e7:e9:b0:66:82:7b:05:4e:88:09:e8:34:56:
         54:27:2d:5e:d7:da:ed:20:1e:96:88:cd:47:3c:08:3f:70:c6:
         96:7f:51:44:12:98:b5:52:a3:f3:16:39:6f:17:f5:42:c0:d1:
         5d:20:7d:fd:cd:dd:eb:46:68:7f:09:59:b8:f8:65:a7:2e:ff:
         42:f5:c2:75:22:fd:4f:6a:fe:ae:0d:87:1d:18:08:d3:c2:7b:
         c4:ff:5d:69:9c:49:aa:19:6e:af:55:2a:6f:58:30:53:50:7d:
         6b:2d:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:37 2025 by rpki-client