Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
File:                     RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft (raw, json)
Hash identifier:          CDuHZDR8+GT8O4M5cg4yAHJvsXOdmrAiBKB1thRAehY=
Subject key identifier:   67:68:1D:15:5D:1F:D3:63:BB:CC:D9:86:BD:02:57:9E:92:7A:1C:8E
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Certificate issuer:       /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial:       01964FDA667D2783AB8715196558D552B4CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
Manifest number:          03E9
Signing time:             Sat 19 Apr 2025 21:00:35 +0000
Manifest this update:     Sat 19 Apr 2025 21:00:35 +0000
Manifest next update:     Sun 20 Apr 2025 21:00:35 +0000
Files and hashes:         1: RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl (hash: 4jG3CZMqywXAphO6qBWKQm7Xxgo2IY/KoV/vMrPc3/o=)
                          2: vUZm6nnQuTxWv0zwrqYoRNaKsTM.roa (hash: Jd8FHgIjElXB18MWjUn4lp0g7hpzNeZ3zr50jxllMWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:66:7d:27:83:ab:87:15:19:65:58:d5:52:b4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
        Validity
            Not Before: Apr 19 21:00:35 2025 GMT
            Not After : Apr 20 21:00:35 2025 GMT
        Subject: CN=67681d155d1fd363bbccd986bd02579e927a1c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:5a:19:5c:5c:8b:e5:ee:39:01:50:bb:f6:
                    2a:a5:0d:26:2b:93:31:3f:01:ef:c4:3f:4a:67:07:
                    37:e8:c2:b2:ae:b4:95:fa:19:54:59:8b:5a:9c:06:
                    f5:a6:08:8d:de:a7:f2:e3:86:9d:17:72:8e:d4:ec:
                    d2:6e:e3:1e:b2:5e:36:f1:3f:06:92:39:c8:07:74:
                    9e:d0:31:bc:f7:ed:09:51:57:50:ae:04:22:ca:9d:
                    00:7b:d8:73:d4:62:c3:8f:3b:ae:a1:f4:8b:ce:a5:
                    00:c1:4a:6b:bd:55:5f:b5:83:aa:0a:0b:45:99:69:
                    b3:1a:9a:3b:b2:e5:17:b3:42:aa:05:de:bc:a9:37:
                    e2:84:46:f7:0c:41:25:7b:46:7e:ea:b6:6d:b0:2d:
                    ef:c9:f7:22:0b:49:09:dc:a1:2e:10:ae:4e:fc:3f:
                    80:35:6a:31:e1:77:41:28:45:01:53:f6:cb:63:c4:
                    eb:81:38:a2:cb:2c:f5:4a:b1:c1:4d:38:ff:69:c5:
                    c4:d9:a6:92:f2:88:50:9d:0b:a2:95:b9:e9:7e:dc:
                    b0:35:5e:5b:8c:0e:77:83:a3:a0:c8:8f:c0:e0:76:
                    8a:bf:16:0e:23:83:9e:72:df:26:ee:99:a2:90:71:
                    b2:61:d0:c2:ca:7d:e9:15:d5:90:95:9c:9e:ae:1d:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:68:1D:15:5D:1F:D3:63:BB:CC:D9:86:BD:02:57:9E:92:7A:1C:8E
            X509v3 Authority Key Identifier:
                keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:82:55:e2:64:76:7c:9d:5c:06:ee:5f:94:e0:8b:6f:28:6c:
         64:c4:4a:6f:19:5d:39:e2:fe:b0:81:2a:68:65:fc:a7:77:58:
         14:2c:d5:d3:25:11:0f:8b:91:aa:bc:27:e2:ba:43:08:e7:47:
         df:99:b3:e4:c8:35:a9:60:ff:5f:62:e8:83:b0:78:d1:e7:ff:
         09:b8:a1:94:c1:53:ae:bd:06:d6:ab:d5:04:0b:b1:9d:4a:2f:
         b3:b1:f7:5f:d7:fb:8a:7b:ee:c5:e4:ef:ec:da:8b:86:77:77:
         48:85:16:d2:3a:72:49:d5:a8:38:ab:f2:c0:ff:e6:6b:ae:29:
         6a:f0:f4:7f:c4:ed:27:02:b2:50:61:ad:f2:09:ad:7b:02:77:
         b0:75:8c:2e:d0:a4:52:26:f8:b7:17:91:77:39:4c:0c:63:f9:
         b3:5f:6d:06:75:97:e4:49:70:13:90:65:b7:c4:08:e7:ba:81:
         06:9f:fe:b7:ca:90:4a:be:b0:ac:63:e3:80:2c:0c:62:f0:da:
         0f:4e:59:7d:c7:13:f6:07:9f:a6:2d:ea:f3:85:28:78:f7:60:
         7c:8e:77:25:ed:b3:2f:ba:20:c7:4c:d4:14:a0:5c:1d:c4:38:
         2d:4a:27:d9:06:80:39:83:ec:6c:29:1d:32:de:4a:15:7f:7f:
         95:c3:43:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:22 2025 by rpki-client