Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File:                     bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier:          nVIZOSJgDVCm6JP/GjtCeyo0mKZH++m9HDOoXPjLriU=
Subject key identifier:   40:7E:E7:A7:17:14:0C:87:80:38:1B:70:03:46:23:29:B9:E6:A9:29
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer:       /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial:       01965EA8779513701F6223F5A0FEF481247F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number:          1502
Signing time:             Tue 22 Apr 2025 18:00:20 +0000
Manifest this update:     Tue 22 Apr 2025 18:00:20 +0000
Manifest next update:     Wed 23 Apr 2025 18:00:20 +0000
Files and hashes:         1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: Z+d0LH+a/DDnUxfz9mpAMDYGUKirlQMAKyliD3VpIe8=)
                          2: dT_nuVNPNVy7zap0s-GlTGbCJFQ.roa (hash: 2ckePt60vTr0Jaf/aV6ugqWUeBibjAZagoTGX9Ra3Qc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 18:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5e:a8:77:95:13:70:1f:62:23:f5:a0:fe:f4:81:24:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
        Validity
            Not Before: Apr 22 18:00:20 2025 GMT
            Not After : Apr 23 18:00:20 2025 GMT
        Subject: CN=407ee7a717140c8780381b7003462329b9e6a929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:a9:fa:dc:5c:38:3c:ae:cf:ee:94:c6:01:
                    32:03:7d:76:ac:0e:6f:a2:46:e9:ca:fa:ac:30:21:
                    7b:ed:6f:c6:89:40:43:2d:29:f8:99:43:dc:d3:2a:
                    a1:9a:73:67:4a:ac:ba:5a:d7:ae:da:14:b0:19:43:
                    a9:47:87:b5:9b:ab:3e:94:2c:1a:f1:fc:aa:d5:ca:
                    09:73:f4:59:64:d2:0a:d7:ad:5e:d8:70:ad:3d:43:
                    38:e0:16:45:44:cb:c9:ff:1f:7f:43:47:92:df:46:
                    15:26:a2:2a:b1:28:47:10:52:74:93:f6:17:fd:e9:
                    3f:47:de:a9:d5:a0:01:ce:37:cf:db:c2:4a:b2:50:
                    60:b2:4a:d0:85:70:da:a2:5e:61:ba:79:d0:27:5d:
                    78:1e:52:52:ca:f7:73:ec:96:aa:33:80:db:28:25:
                    35:ab:06:3f:43:31:6f:73:a2:a9:e2:36:0c:ec:c5:
                    db:fc:92:44:54:eb:3e:9f:03:28:f6:15:f9:f6:b5:
                    c5:5b:cf:99:bb:21:31:97:35:bd:3d:1d:78:a7:b4:
                    0e:51:3b:27:51:9c:7f:fe:d9:2e:4c:27:64:d5:0f:
                    41:2c:4d:43:2e:08:f0:96:b9:60:54:c6:67:69:81:
                    c8:de:e4:f5:f2:d8:70:51:65:05:9c:14:08:3b:ca:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7E:E7:A7:17:14:0C:87:80:38:1B:70:03:46:23:29:B9:E6:A9:29
            X509v3 Authority Key Identifier:
                keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:eb:1b:7c:c0:2a:58:0b:ec:6c:24:b5:4b:92:cd:22:65:17:
         b3:ec:17:fe:d1:ad:fc:f4:12:ed:40:a9:37:0f:a3:44:3d:01:
         85:31:b5:2c:32:5a:54:a1:a0:74:67:5d:aa:85:00:99:f2:55:
         30:44:de:6a:4d:28:c2:35:e7:4c:95:bd:f9:67:9a:b9:d4:45:
         a7:91:86:f3:97:84:eb:68:ec:c7:42:2c:a4:8c:ac:21:3c:4f:
         14:aa:71:42:72:46:7c:24:67:50:bb:c4:12:08:f3:6a:b8:f0:
         31:f1:47:7a:47:42:d2:ac:c2:66:22:bb:69:c5:66:58:fa:f9:
         cf:a6:39:56:e4:a5:c5:77:c9:3d:7a:8c:95:ce:1f:b7:29:d0:
         d9:21:78:9e:88:69:3b:bd:7d:fa:2e:d3:4f:45:a3:5f:b3:de:
         f5:90:86:68:b4:24:78:7e:3c:88:c1:9a:62:48:72:f9:e4:45:
         46:a8:2e:c1:6f:32:da:d4:8b:dc:d0:ea:01:8d:79:35:a8:f1:
         8e:d2:2f:ac:82:ca:4a:4d:96:04:f1:ff:c2:a0:aa:f7:87:bf:
         ca:43:3c:8d:86:f9:94:b6:a8:b2:67:ee:36:8a:38:7d:c7:6c:
         c5:2e:04:ca:94:a3:ac:56:7a:f3:d8:d4:3e:9d:64:2d:08:ac:
         ad:5a:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:10:56 2025 by rpki-client