Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
File:                     ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft (raw, json)
Hash identifier:          m4C1GB4LwDN12s+Wf48vBtpUHhavKDAomzA3F4vsNGw=
Subject key identifier:   A9:80:69:E9:62:13:1F:86:6C:96:EE:1D:E5:82:10:7F:6E:6D:37:4E
Authority key identifier: 01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2
Certificate issuer:       /CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
Certificate serial:       01965537F1949552323F9B1EB0EDFD140949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
Manifest number:          1135
Signing time:             Sun 20 Apr 2025 22:00:51 +0000
Manifest this update:     Sun 20 Apr 2025 22:00:51 +0000
Manifest next update:     Mon 21 Apr 2025 22:00:51 +0000
Files and hashes:         1: ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl (hash: ZdIznRZK2oiS/ZWJM2I/HXPti8JeQzdGsoUW0PtUa5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:37:f1:94:95:52:32:3f:9b:1e:b0:ed:fd:14:09:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011463ff99c24c0937a4065d1fccfeb908fc3ad2
        Validity
            Not Before: Apr 20 22:00:51 2025 GMT
            Not After : Apr 21 22:00:51 2025 GMT
        Subject: CN=a98069e962131f866c96ee1de582107f6e6d374e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ea:9c:7d:d8:4c:f1:6c:83:51:43:3d:58:4c:
                    7f:bf:33:37:23:bb:c1:1a:67:98:ce:45:03:c8:90:
                    b4:58:67:06:40:30:ce:5a:c2:ec:69:49:18:71:27:
                    79:1b:c4:a3:59:2c:31:cf:0e:c4:9d:77:7a:00:16:
                    59:88:ab:98:3f:01:7c:8f:01:a0:ae:ea:ea:e1:d0:
                    38:4d:30:03:14:14:63:2a:a2:1b:9f:17:68:09:67:
                    fc:6f:e9:cb:f4:2c:ee:cf:0f:1f:f1:be:86:ce:87:
                    ad:08:1a:a6:d6:84:1d:80:92:71:04:01:23:ed:2d:
                    7f:1e:f0:37:e5:8a:46:a4:5c:4e:ba:e2:1b:91:7f:
                    80:42:40:15:fd:a2:28:98:5d:7c:ec:c4:4b:9c:ec:
                    50:8c:20:0e:de:ee:84:4c:e9:9b:a7:4d:76:e2:48:
                    00:25:e3:c8:83:8f:83:d9:04:db:20:6a:6c:0d:bd:
                    f7:2e:70:13:7f:bb:ad:af:bf:53:1c:f0:88:b8:64:
                    83:cc:4f:a7:c3:a1:80:80:46:37:4f:b5:ca:a9:e9:
                    1d:39:59:a4:41:9a:0f:0a:df:75:03:d6:f1:e2:72:
                    22:1a:1f:00:f3:1d:f4:21:10:6b:34:36:d7:1e:42:
                    fa:d0:d2:b3:b5:be:ef:df:8e:1b:65:09:9a:50:96:
                    d5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:80:69:E9:62:13:1F:86:6C:96:EE:1D:E5:82:10:7F:6E:6D:37:4E
            X509v3 Authority Key Identifier:
                keyid:01:14:63:FF:99:C2:4C:09:37:A4:06:5D:1F:CC:FE:B9:08:FC:3A:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARRj_5nCTAk3pAZdH8z-uQj8OtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/240024-f433-4241-b40d-d1e84cfa478f/1/ARRj_5nCTAk3pAZdH8z-uQj8OtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c6:aa:73:e3:97:a3:c7:d5:38:0e:b7:53:7c:12:4d:fb:92:
         1e:28:1b:06:e6:e2:d7:6a:0d:f2:cd:18:3f:32:7a:52:45:c7:
         b3:d6:76:8e:72:73:2f:e3:cc:b0:ba:dc:29:fa:bc:a7:4e:eb:
         17:eb:54:d0:a9:48:5e:74:98:5d:20:04:7e:0c:c6:e2:0d:54:
         2d:c4:1a:d1:26:85:0f:15:14:40:7b:1e:13:9a:01:d4:3f:78:
         e0:69:63:27:7c:dc:41:14:de:57:1e:ff:2a:ee:37:cc:95:f2:
         ea:fe:58:a2:3a:6b:41:c0:f7:6f:38:76:4c:cf:f7:a6:15:f3:
         8c:61:19:8e:de:3c:e2:38:58:21:b4:f3:a2:81:2f:0d:b2:c7:
         d2:e6:3d:28:61:c2:75:41:12:e6:42:e7:f0:b7:b4:07:29:06:
         68:ab:43:29:1e:fe:c2:c4:6a:99:63:09:86:df:5d:52:03:61:
         75:6b:56:80:58:5d:ce:12:46:bd:8f:12:96:a5:e4:6b:41:8f:
         2d:1b:c8:07:da:33:ba:05:31:94:9a:7a:f0:7e:5f:ea:95:61:
         6b:cd:22:52:38:47:e1:fb:2b:04:10:06:15:12:8e:7e:01:03:
         c1:5e:37:95:1a:c2:d8:44:e7:0a:57:11:84:24:14:31:7f:30:
         35:56:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:32 2025 by rpki-client