Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File:                     4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier:          6TZeKKdwijFTBIT0kQCe86H/sUkhxdNhwlTxl/PbkyE=
Subject key identifier:   C0:4E:AF:EF:C2:22:40:D7:7A:AC:9B:09:59:49:43:48:FA:1B:17:B0
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer:       /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial:       01958CCDF786AE72B8448DE4F3D05B975C29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number:          07D9
Signing time:             Thu 13 Mar 2025 00:01:03 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:03 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:03 +0000
Files and hashes:         1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: ek4knGHhMM4otEFIXaRdGwpti6jqj+BJZkq4bbd7Q5Y=)
                          2: r-_fYxsQeAAnWT8K8BN3aabue4c.roa (hash: vX8iAlHxAeCaWnzF37mIFqPFZYMuvvYEyZXEicfJpc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:cd:f7:86:ae:72:b8:44:8d:e4:f3:d0:5b:97:5c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
        Validity
            Not Before: Mar 13 00:01:03 2025 GMT
            Not After : Mar 14 00:01:03 2025 GMT
        Subject: CN=c04eafefc22240d77aac9b0959494348fa1b17b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:b8:55:b7:7e:6c:3e:5e:8a:58:67:d2:de:
                    3b:f9:d1:00:a9:cf:5f:85:83:f5:a8:9e:dc:e1:56:
                    18:0d:aa:b1:e9:cb:11:fd:55:42:d8:6c:b7:d2:c8:
                    78:86:d4:e3:97:e1:68:1b:71:50:70:04:fa:94:ab:
                    b3:91:80:4b:c6:12:62:5a:96:c9:29:bd:6d:f3:b6:
                    62:78:b7:ca:ed:f8:59:a0:61:28:86:31:ca:cb:21:
                    42:03:3f:0d:06:37:a7:81:78:81:a3:e1:a4:e4:80:
                    14:96:ba:7b:96:2f:cf:6c:61:c4:c5:70:55:eb:52:
                    5f:28:8e:71:2f:6f:4c:fd:ad:36:6e:df:a9:9a:43:
                    41:97:32:98:ed:9a:87:10:c0:32:28:cc:b8:06:ef:
                    9a:3d:92:e8:52:d3:2f:34:a5:f4:5b:e2:17:6a:a5:
                    89:2b:79:cd:a0:b4:66:36:ed:d1:e6:22:2b:5f:62:
                    46:59:56:4c:67:dd:42:ec:e8:ca:79:a6:a2:c4:96:
                    e1:89:56:20:04:d3:42:88:30:42:42:6f:14:eb:da:
                    ab:9c:21:16:08:11:98:dc:ec:b5:3a:3e:70:3d:a4:
                    eb:f4:36:70:c9:4f:f3:63:5d:b8:ac:36:d7:cc:2c:
                    41:7e:54:b8:b8:8a:82:14:73:cb:ef:cf:a0:8e:66:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4E:AF:EF:C2:22:40:D7:7A:AC:9B:09:59:49:43:48:FA:1B:17:B0
            X509v3 Authority Key Identifier:
                keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ee:30:6c:df:5f:83:d3:5c:02:6e:8d:ee:d2:4e:ea:5e:4f:
         a8:28:da:23:a6:e5:14:3f:0a:dd:03:1b:89:9d:17:1e:1f:24:
         c3:df:a0:87:88:30:7b:e6:55:b3:ac:1b:ef:22:7a:3b:1a:ce:
         8a:1e:4e:2e:a0:0c:1a:19:21:4c:2f:b1:d0:39:12:98:17:1f:
         13:d3:a8:4e:6d:11:be:8c:ff:14:05:ef:15:03:22:8f:d2:00:
         9e:49:9c:1c:32:86:51:bd:21:4d:68:6f:6b:98:f1:6c:74:4b:
         46:3e:9f:6f:4a:e4:87:c1:f8:2c:c1:4f:c3:6b:83:90:03:33:
         8e:d3:b0:79:13:e8:07:c6:5f:b4:62:09:50:c3:84:1d:a8:27:
         d2:01:0f:9e:e8:90:18:ee:ed:2c:0a:b5:81:85:61:ec:4c:fa:
         62:40:98:96:06:17:62:e6:59:e9:9f:6f:43:93:89:4a:e7:32:
         ba:50:1f:9c:e4:81:79:2f:ef:ab:32:69:10:b1:f8:7f:a1:ae:
         6c:0f:2b:6c:85:11:0a:d1:37:c8:cc:a1:91:f3:6a:03:68:dc:
         10:2d:c4:28:d0:c1:38:f1:cf:cf:e6:96:9f:d1:36:89:b8:f2:
         4f:35:eb:74:a6:ca:10:49:78:28:f1:50:f2:78:c6:66:39:ab:
         de:af:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:23 2025 by rpki-client