Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
File:                     SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft (raw, json)
Hash identifier:          H6zoI1vfQwId3UeJEPStHlimt/Y3EDfUzNYdYe7bWTg=
Subject key identifier:   52:92:67:10:DF:3F:BB:0D:E3:54:CF:3F:8C:95:E3:0F:2E:62:4E:A9
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Certificate issuer:       /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial:       01964D7E9C8DF9BAC019509AC6260544786B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
Manifest number:          0425
Signing time:             Sat 19 Apr 2025 10:01:05 +0000
Manifest this update:     Sat 19 Apr 2025 10:01:05 +0000
Manifest next update:     Sun 20 Apr 2025 10:01:05 +0000
Files and hashes:         1: SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl (hash: z5/ZdkQjTDZ8tcdTjAQrxeLSc8aPfymwOzYRlqTAmrw=)
                          2: irUXbj8pGyxrPmrP5os28F3HvOo.roa (hash: NW1tIg5uUb1UHmkij/j3iUK3J1fgZQvXI2Lvvn/5OOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:9c:8d:f9:ba:c0:19:50:9a:c6:26:05:44:78:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
        Validity
            Not Before: Apr 19 10:01:05 2025 GMT
            Not After : Apr 20 10:01:05 2025 GMT
        Subject: CN=52926710df3fbb0de354cf3f8c95e30f2e624ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a2:b2:23:db:c6:61:94:a2:18:a7:f4:05:60:
                    ae:ba:c7:78:96:b9:27:e2:f7:e7:6f:e1:a2:3c:44:
                    1e:da:7a:53:42:75:15:24:55:1c:92:f8:46:6c:b1:
                    a6:27:5a:0d:52:82:67:aa:51:75:73:1f:6c:9f:5c:
                    6b:81:4b:ac:c4:8b:9e:ae:0b:18:90:6c:72:14:09:
                    40:a6:27:bf:1c:83:d0:da:19:5c:ab:c9:36:6c:ec:
                    51:80:a0:68:4c:62:77:c9:ee:d2:bd:cf:12:5f:cb:
                    b3:6b:c9:eb:90:6b:bf:d7:5e:44:c1:cc:1a:81:f8:
                    91:ac:13:37:2e:36:28:17:9b:9d:be:eb:9b:7b:56:
                    25:cd:81:3f:2f:1a:82:c4:56:60:35:67:b4:ed:90:
                    a1:66:9b:7d:76:a6:4c:0d:b6:d9:e3:6e:03:31:c6:
                    6c:3b:06:c0:73:10:5d:4d:de:b2:55:4d:4f:fe:30:
                    2d:5c:fe:1d:6d:aa:e7:b9:37:9e:76:58:30:34:df:
                    bb:e4:fd:db:21:8b:67:cf:01:80:52:5a:35:56:bf:
                    fc:8c:38:c3:7a:51:ec:2a:f2:92:ab:11:db:50:e8:
                    1a:b2:6e:99:83:9b:b3:b0:be:72:90:57:dd:49:ad:
                    06:79:f3:da:c0:9d:5a:e0:0e:64:39:61:02:73:f9:
                    33:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:92:67:10:DF:3F:BB:0D:E3:54:CF:3F:8C:95:E3:0F:2E:62:4E:A9
            X509v3 Authority Key Identifier:
                keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bc:fb:5d:d2:38:e7:e7:06:d9:00:d7:bd:76:9a:8e:87:b3:
         7f:2f:b8:49:7f:aa:0c:18:e9:6b:53:d2:cd:38:84:3d:2e:9f:
         40:fd:ac:d2:f5:ab:dc:5e:d9:42:80:c3:d2:1d:1a:1b:7c:f0:
         11:80:be:36:c2:86:d1:19:c3:a0:ea:b0:8a:ae:1e:2f:13:f2:
         e9:38:62:61:ca:ba:e6:1e:6c:2a:41:27:01:e4:df:a7:ee:c0:
         c2:44:ff:a2:a9:82:fa:ce:f4:8d:86:7f:cd:54:b5:91:28:5b:
         0b:f4:0f:13:75:dd:1b:e1:20:c9:88:8d:92:44:45:52:f3:7d:
         64:c6:88:80:23:2c:98:f7:c9:a8:b0:1a:bd:f9:5c:6d:8e:ff:
         6b:b8:2c:96:f6:0d:da:ae:83:13:9a:4b:c1:97:a6:19:e4:cd:
         4d:58:a2:80:35:a8:27:cd:1f:8a:59:84:19:2f:8f:aa:e1:a4:
         34:a3:7a:15:df:25:80:13:b6:ee:bb:66:68:e9:84:1b:f9:3a:
         01:0b:8a:16:47:4f:21:d4:19:2d:b1:ff:b9:86:f2:84:c4:e3:
         bb:b7:d6:7f:93:88:ce:66:7f:d0:86:c8:8a:46:35:40:70:c9:
         63:6d:2d:b1:e7:c2:30:b9:da:6b:49:66:44:27:8a:cb:0b:08:
         6c:92:ac:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:10 2025 by rpki-client