Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
File:                     M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft (raw, json)
Hash identifier:          lSuali/X0iMtG2vfMsy4gs6E7jQ+5v7Tqj2sqjVm3WU=
Subject key identifier:   FA:AC:EC:57:48:B8:05:45:E5:D4:F0:B7:A9:55:B4:C0:43:B4:8F:28
Authority key identifier: 33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80
Certificate issuer:       /CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
Certificate serial:       019657265C8714110A192EB6D1E2B854FEF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
Manifest number:          0E15
Signing time:             Mon 21 Apr 2025 07:00:53 +0000
Manifest this update:     Mon 21 Apr 2025 07:00:53 +0000
Manifest next update:     Tue 22 Apr 2025 07:00:53 +0000
Files and hashes:         1: M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl (hash: rWvMJNaExy3UgiV1YzC8reL92MxDmCcL5ayu6JWofu8=)
                          2: dXRP_DXzvkSVasQi7xjSi_GeSe8.roa (hash: e9TN5cLdjdYdVfizmweJUa1TiVL/jCcB00INSV37pZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:26:5c:87:14:11:0a:19:2e:b6:d1:e2:b8:54:fe:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3351a9ec0aa91b932ac3c3586cfcacf0ca29f580
        Validity
            Not Before: Apr 21 07:00:53 2025 GMT
            Not After : Apr 22 07:00:53 2025 GMT
        Subject: CN=faacec5748b80545e5d4f0b7a955b4c043b48f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ef:3d:36:76:34:f8:85:fb:03:ff:0c:39:17:
                    e9:2f:cd:0b:17:a0:22:48:f1:91:5c:99:4d:37:19:
                    d9:c9:26:3b:ee:97:70:c0:b7:39:01:23:b0:23:e1:
                    36:fb:9c:ab:b2:1d:db:8c:f9:15:f0:44:4d:b8:ef:
                    c8:a8:01:72:67:97:72:c2:5e:e3:12:3f:22:b6:fc:
                    11:1c:48:e1:86:96:5f:c2:a3:26:b7:33:83:14:7f:
                    0e:17:83:ae:79:be:5b:94:b6:39:b1:0b:6c:ff:9e:
                    89:72:b1:b0:2c:78:f3:cd:47:64:11:6f:50:7e:48:
                    f8:7b:95:cc:92:7e:92:10:16:d0:dd:bb:d3:5c:46:
                    92:02:d8:b4:c0:d5:19:7b:46:e5:a7:39:f1:55:d0:
                    a5:f1:58:9c:cf:34:20:dd:cb:b9:a1:a0:25:60:b1:
                    56:6f:57:4f:5b:86:b3:41:60:0b:0d:ff:b9:5c:0f:
                    4c:71:0e:95:82:66:ee:4c:33:61:92:ae:1d:8a:c9:
                    96:12:30:4a:21:07:99:fc:cf:ac:db:af:df:30:39:
                    4e:c5:c8:d8:c1:4b:1e:92:37:0d:7f:e4:c0:97:de:
                    07:99:b8:ab:02:8b:23:75:61:25:07:37:d1:aa:b1:
                    82:99:36:7c:41:6a:25:96:b2:c8:6a:ca:65:ce:df:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AC:EC:57:48:B8:05:45:E5:D4:F0:B7:A9:55:B4:C0:43:B4:8F:28
            X509v3 Authority Key Identifier:
                keyid:33:51:A9:EC:0A:A9:1B:93:2A:C3:C3:58:6C:FC:AC:F0:CA:29:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2c4fbb-7745-4759-a0c8-6689f872fc87/1/M1Gp7AqpG5Mqw8NYbPys8Mop9YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:23:ab:d1:6c:03:f6:7a:6b:12:f4:95:2c:17:8e:51:b5:7c:
         7e:fb:58:91:eb:c6:f8:81:98:02:d5:c3:51:c2:12:64:c2:d1:
         e4:5f:9d:84:72:ed:16:7a:97:6e:77:26:b0:53:16:ca:ac:1a:
         8d:e2:60:ba:2c:f3:8a:ae:15:53:f7:98:bf:01:26:8f:a8:90:
         57:98:cf:45:00:ad:b5:63:7c:f0:e8:d1:89:01:01:c5:10:50:
         13:67:51:00:60:fc:b3:bf:82:f4:c6:0d:b5:7e:7b:da:85:7e:
         54:a2:33:69:ab:3c:1a:49:50:b7:72:97:85:7b:53:d0:9b:cf:
         8b:71:a7:f0:fd:aa:77:7f:3d:2e:dd:69:9a:cd:10:48:7d:65:
         c3:1a:e5:3c:1e:46:27:8d:5e:06:97:cc:bd:58:71:4b:62:54:
         0b:cb:a1:60:d5:c3:52:95:74:ea:d4:31:75:c9:d7:c3:aa:40:
         9d:52:0f:e0:b7:6c:3a:7f:ad:af:8d:55:d8:aa:26:86:c0:c8:
         ad:28:9d:71:f0:7a:87:ee:e8:6b:ef:2f:97:e2:b7:82:4f:c2:
         d4:f4:6d:da:c8:1d:07:82:fa:67:f9:87:e4:1c:f4:77:68:2a:
         8f:23:32:65:7c:7c:d2:16:32:14:5c:08:62:44:62:72:ed:4b:
         2c:75:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:46 2025 by rpki-client