Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File:                     xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier:          97KFFY6SG3KU/ruptcWzQMTDDBrOujHDXi8Xndbzljk=
Subject key identifier:   0C:5D:BD:CD:A5:2D:64:BC:B8:4A:C1:B1:53:DF:87:6A:8F:63:AB:7B
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer:       /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial:       01958C60BF1D254AF3273AB818B184A5C821
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number:          1490
Signing time:             Wed 12 Mar 2025 22:01:45 +0000
Manifest this update:     Wed 12 Mar 2025 22:01:45 +0000
Manifest next update:     Thu 13 Mar 2025 22:01:45 +0000
Files and hashes:         1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: Z2JCErF88+c9zFdyEk9LEguBVoHEUf9sQnB4gZzpR/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:60:bf:1d:25:4a:f3:27:3a:b8:18:b1:84:a5:c8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
        Validity
            Not Before: Mar 12 22:01:45 2025 GMT
            Not After : Mar 13 22:01:45 2025 GMT
        Subject: CN=0c5dbdcda52d64bcb84ac1b153df876a8f63ab7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:dd:38:cd:3a:a9:e6:15:b9:c0:b4:81:0b:
                    02:a3:3c:5e:e9:78:98:fa:14:c0:69:22:e9:dd:63:
                    22:43:80:53:f9:cb:8b:72:11:f7:bf:95:92:8d:e1:
                    0b:70:93:72:00:b9:3d:64:82:0b:d3:71:1d:d4:b5:
                    28:1e:02:2d:da:24:07:d6:ab:0b:62:2d:85:52:c9:
                    50:b6:db:75:9f:57:f5:61:73:3f:6a:9d:4a:01:6c:
                    37:29:b7:3a:1b:f9:97:b2:f3:85:0c:6a:0b:cb:c6:
                    c4:5c:e5:e2:1b:a2:f2:4f:60:52:33:81:6c:2f:b7:
                    f3:c2:74:5d:f9:30:ce:6e:68:20:4e:8b:86:85:64:
                    26:f6:20:41:b6:00:79:8f:50:5f:70:3d:2f:79:ab:
                    70:d7:4c:e0:2b:7d:89:71:6b:80:1e:b5:f6:4b:a5:
                    f8:19:02:d6:c0:e5:62:e2:8c:10:d7:b7:dc:5e:ce:
                    ba:15:ca:e8:92:37:da:16:39:3b:40:04:c6:4e:1f:
                    76:6e:9e:f7:47:d9:9b:bf:b4:8a:f6:60:c2:09:37:
                    b2:af:4e:90:52:58:ea:c0:01:31:f6:ae:c4:e2:99:
                    be:ad:7c:e6:b5:d5:61:51:cd:16:f7:01:77:9d:36:
                    4a:ab:52:2e:df:b4:48:c0:f9:9a:66:47:d2:37:95:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5D:BD:CD:A5:2D:64:BC:B8:4A:C1:B1:53:DF:87:6A:8F:63:AB:7B
            X509v3 Authority Key Identifier:
                keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:86:e6:b7:47:cc:04:c5:a9:71:ff:3c:ee:1d:38:b1:f4:6c:
         f8:f0:54:c3:4b:a3:65:10:e8:65:29:c1:98:28:1b:7c:d8:e4:
         92:52:c8:0f:b1:45:86:93:ea:07:fe:34:4b:8d:42:84:15:98:
         52:b8:cf:10:07:a8:58:08:c4:b5:83:92:3c:0f:6a:ac:61:ba:
         a7:4a:b3:d6:9a:72:79:da:5a:fe:43:7c:76:17:82:f0:6a:cf:
         aa:0e:3b:ac:f2:1d:01:74:dc:b2:e2:a3:59:11:ef:57:b7:0d:
         dd:aa:b4:6a:8d:34:ef:09:47:1d:83:4c:a8:08:92:8a:86:d4:
         13:fc:85:b7:d0:bf:b1:68:c2:c5:ff:c2:af:b9:4f:31:13:a1:
         ff:74:a8:26:5b:52:22:f4:e9:5b:2d:9d:d8:ed:6b:75:78:b6:
         fd:31:b0:eb:06:91:3e:c9:b8:b3:d4:2d:ba:79:eb:6f:c2:72:
         8a:75:ec:e3:81:87:03:f5:06:00:df:37:e0:e5:dc:f0:a2:22:
         21:1a:57:96:ba:62:d6:e0:2f:5e:a6:2c:e8:39:22:8a:6f:4b:
         81:19:40:1b:d6:b3:67:29:1e:85:09:ed:9c:3f:93:4e:5e:3c:
         97:71:67:40:60:bb:af:d7:fd:f5:4c:53:6a:13:f5:6c:c1:2d:
         a0:fd:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:19 2025 by rpki-client