Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File:                     tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier:          0TnllIHaMrzA9m9SMROp1HCHbCGmM5q7FfShOcNMWvc=
Subject key identifier:   33:42:54:9A:D2:94:21:86:F3:48:AD:AA:E8:13:3F:C0:C7:CA:E6:6E
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer:       /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial:       019643D5F3AF332D2FDF4B78144A61272DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number:          0DB0
Signing time:             Thu 17 Apr 2025 13:00:16 +0000
Manifest this update:     Thu 17 Apr 2025 13:00:16 +0000
Manifest next update:     Fri 18 Apr 2025 13:00:16 +0000
Files and hashes:         1: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: SAdxFlsQfzskyD1pFBTxsuEzUAxEJVhVrabYTP28R7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:d5:f3:af:33:2d:2f:df:4b:78:14:4a:61:27:2d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
        Validity
            Not Before: Apr 17 13:00:16 2025 GMT
            Not After : Apr 18 13:00:16 2025 GMT
        Subject: CN=3342549ad2942186f348adaae8133fc0c7cae66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:ea:cd:68:9e:db:33:20:72:0b:dc:6d:f8:
                    d2:0d:9f:21:d7:75:1c:15:22:f6:89:e7:97:51:e2:
                    f9:a5:07:49:ed:db:be:8e:cd:5a:a7:c4:09:48:dc:
                    2b:b8:e9:c6:f4:de:cb:45:d0:1a:5f:21:3f:ec:99:
                    41:5a:19:2c:7c:59:d5:c9:10:77:bc:c6:d5:19:c9:
                    8f:b4:a9:e6:cc:90:a8:26:dd:9f:b6:99:c9:45:b5:
                    87:ff:e3:d6:f3:bd:9c:43:ab:70:7c:76:34:50:86:
                    e3:74:ef:43:45:06:8a:57:e5:03:33:5e:59:b6:0f:
                    3c:0c:2d:22:db:55:f8:1e:5a:ae:96:dc:e7:8f:2f:
                    ac:09:7c:c6:43:18:b8:b9:bb:e4:7c:dd:01:52:06:
                    3f:e1:89:56:47:85:06:08:94:67:32:8f:48:29:9a:
                    bb:45:0a:8b:93:47:71:d9:a0:cb:65:77:42:87:b2:
                    e3:15:7d:c8:9f:1e:0e:54:e6:4d:36:97:41:21:59:
                    ed:1f:50:e4:5f:fc:fb:9e:97:5f:b9:ca:08:c9:5f:
                    55:5a:2d:da:d2:ed:ae:78:50:12:29:5e:4c:32:2b:
                    99:16:3c:6e:cc:c0:79:62:c8:c1:9d:ab:84:6e:e4:
                    4b:e4:21:07:cf:8b:5a:c3:69:a4:f4:80:c1:50:3d:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:54:9A:D2:94:21:86:F3:48:AD:AA:E8:13:3F:C0:C7:CA:E6:6E
            X509v3 Authority Key Identifier:
                keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:42:10:9b:75:d2:4a:59:fc:9e:ef:86:08:f0:c2:fe:d8:a9:
         69:a5:c7:7e:54:31:54:e6:d4:96:59:0d:ec:f3:a4:77:1b:6e:
         9d:cc:e4:1f:fd:8d:4b:44:b4:bd:96:38:4e:a4:00:e1:95:58:
         f4:60:3f:10:88:bb:40:c6:66:ae:e5:30:50:29:5d:85:64:f6:
         f9:f2:0f:4c:79:84:2d:55:fc:4b:f4:4b:0e:62:e8:f6:8e:02:
         af:fb:e4:3a:d3:3a:31:f8:72:72:45:38:fe:e0:47:bc:0a:00:
         73:4e:3b:ca:6d:3f:dc:f9:1f:5a:2a:24:48:65:80:ea:86:94:
         e4:7d:c1:80:44:5d:6c:61:99:b6:38:52:cb:b5:58:11:87:d3:
         e1:cc:ad:8b:8a:13:f6:eb:f0:db:4e:6d:20:e7:6c:8a:49:c4:
         5b:b3:55:fc:dc:bf:d6:07:ad:46:08:72:47:60:c9:4e:31:fb:
         2f:f4:cf:f4:11:fe:8f:89:89:a3:ee:1b:8d:e7:63:dd:99:14:
         60:06:74:e0:1e:d2:f3:64:55:cb:93:25:6a:65:12:3d:12:a7:
         55:eb:96:85:a2:ee:c5:70:ad:63:d5:07:7a:d9:5b:86:8f:7a:
         6a:00:25:e1:8d:7a:9c:a8:3d:e5:fa:7a:58:d8:04:b7:0f:59:
         1a:c8:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:58:41 2025 by rpki-client