Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
File:                     _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json)
Hash identifier:          lw1XrwoG1z/aSg7sfJC35926DMGUNBp/mjA6vKLHA+g=
Subject key identifier:   3A:BE:11:8A:CD:B5:08:71:43:B9:19:C9:23:50:17:2F:0B:80:E1:DB
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Certificate issuer:       /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial:       019650483E6CC1493AB72C2B7AA0A97489F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
Manifest number:          14F8
Signing time:             Sat 19 Apr 2025 23:00:33 +0000
Manifest this update:     Sat 19 Apr 2025 23:00:33 +0000
Manifest next update:     Sun 20 Apr 2025 23:00:33 +0000
Files and hashes:         1: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: BBc9f6CCfWVEMtE3OK99lT4flla5VhcMEtlOIglsYnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:48:3e:6c:c1:49:3a:b7:2c:2b:7a:a0:a9:74:89:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
        Validity
            Not Before: Apr 19 23:00:33 2025 GMT
            Not After : Apr 20 23:00:33 2025 GMT
        Subject: CN=3abe118acdb5087143b919c92350172f0b80e1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:42:c6:b7:75:e4:80:1d:e8:d9:55:93:4f:
                    dd:05:31:6f:53:39:49:ec:2d:39:bc:c1:71:5f:4a:
                    d0:92:5a:51:0f:fd:94:4a:2b:ed:95:4d:bf:66:28:
                    9b:d0:98:7b:16:c8:d0:f0:55:7e:80:d6:53:af:41:
                    2f:60:8e:44:37:a6:b7:50:d2:95:83:aa:33:24:50:
                    19:54:d4:2e:09:1b:55:32:6c:04:a9:0d:04:50:9e:
                    15:67:00:71:5f:f6:73:41:89:69:4d:72:08:97:ba:
                    cc:4e:6e:81:70:f4:ca:de:45:47:cf:81:da:60:74:
                    6b:12:0d:db:cd:d6:86:a2:b9:1e:b9:a2:9c:8e:29:
                    ab:cf:48:5b:28:e6:74:8f:90:fe:b4:3a:34:77:dc:
                    1e:92:e8:df:68:c5:cc:a6:67:1e:80:80:bd:a5:17:
                    6f:d5:e9:70:1f:5e:50:85:67:34:c0:3b:5e:95:cb:
                    c1:60:15:f0:dd:69:b9:34:03:e4:75:e8:45:14:5c:
                    d2:47:9c:5b:6a:a9:49:87:80:de:ba:b0:0d:a4:d4:
                    7a:e7:37:5f:70:32:18:1e:70:d3:98:e2:63:22:e1:
                    96:81:f0:ef:2a:45:bd:ba:0b:24:93:43:4f:b4:fa:
                    fe:56:cd:ef:4d:fa:ec:4e:4e:dd:92:7b:ea:6d:d5:
                    95:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BE:11:8A:CD:B5:08:71:43:B9:19:C9:23:50:17:2F:0B:80:E1:DB
            X509v3 Authority Key Identifier:
                keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:21:2b:f9:05:c7:64:0e:90:d3:dc:fe:fb:20:34:04:78:1c:
         87:04:2a:9f:40:ab:10:82:65:37:de:ab:07:65:f7:b4:c5:a7:
         cc:5d:86:0d:46:a1:2d:a1:6f:84:30:4c:b5:b2:eb:f2:d4:72:
         39:7a:55:49:18:e5:66:0a:0c:8e:e6:4c:6c:68:2b:15:bf:e9:
         75:32:43:3c:60:84:52:32:0b:f2:c0:0b:82:ad:cc:55:f1:80:
         24:45:79:16:43:40:4c:d2:1c:2e:8c:74:45:46:a8:66:67:41:
         71:c8:f7:96:02:55:be:50:89:b5:e2:29:f4:0d:12:74:da:2b:
         f5:b9:08:82:4f:af:20:df:b1:a5:75:fc:b4:3e:81:ec:04:62:
         b7:75:07:3e:d7:de:a8:fa:c5:74:0d:8a:69:fd:cd:25:25:77:
         b2:77:25:bf:8a:f9:46:f2:8f:77:5b:5e:0c:dd:b6:2b:3c:6f:
         5a:84:c3:2f:42:a9:cc:9a:f7:ad:36:33:77:50:ee:45:75:1a:
         80:c5:93:ac:6e:93:92:09:4c:a4:60:00:fb:31:2f:00:43:5f:
         b0:87:ae:ec:d6:31:34:aa:35:ab:83:48:93:3a:d9:27:80:b0:
         43:40:b5:81:c0:fa:73:2e:35:1e:e3:85:0a:f7:5e:99:24:b1:
         7a:fb:9a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:37 2025 by rpki-client