Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
File:                     sE0XVlP7vejZidJ-OCe8AR4CCgE.mft (raw, json)
Hash identifier:          Myc5ThPwNWlXX6VS3uuCMCzxhS404kppybKDav+XK0Y=
Subject key identifier:   00:E0:80:02:F1:4E:52:83:70:1D:84:CB:EC:89:1A:FC:1B:36:55:F0
Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
Certificate issuer:       /CN=b04d175653fbbde8d989d27e3827bc011e020a01
Certificate serial:       0196447B3904BE24096A8FC7D2D179D19599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
Manifest number:          05B9
Signing time:             Thu 17 Apr 2025 16:00:48 +0000
Manifest this update:     Thu 17 Apr 2025 16:00:48 +0000
Manifest next update:     Fri 18 Apr 2025 16:00:48 +0000
Files and hashes:         1: ALNKyGQyY09MK9vl3O2X07J6-JA.roa (hash: H9wbzE6PP25p3vlBAxK5eVjK/F1/4ACUWAsYKWxNkUQ=)
                          2: sE0XVlP7vejZidJ-OCe8AR4CCgE.crl (hash: typnUPeP3510u54MIAJXsw8WUhwAZialY63mqIcyqSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:39:04:be:24:09:6a:8f:c7:d2:d1:79:d1:95:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01
        Validity
            Not Before: Apr 17 16:00:48 2025 GMT
            Not After : Apr 18 16:00:48 2025 GMT
        Subject: CN=00e08002f14e5283701d84cbec891afc1b3655f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:3e:ca:de:f0:47:db:2e:6b:81:2d:57:17:
                    e7:b1:04:17:46:48:3d:6d:23:b8:dd:b3:48:d4:44:
                    1f:64:e3:ec:29:30:2e:95:b2:51:9e:47:cd:59:ea:
                    17:93:15:02:4d:fc:a9:82:73:58:7b:3a:97:21:bc:
                    7e:7f:37:10:90:36:06:ec:32:1d:0b:d9:0b:3c:fb:
                    40:8a:02:0c:da:81:f2:85:fc:57:d1:bd:16:0f:65:
                    1b:e3:00:9e:21:4d:cd:df:af:b9:ea:9e:f1:2a:20:
                    3b:78:b3:29:3f:8d:1d:82:62:9e:e2:f0:c0:51:bc:
                    02:29:cb:d3:94:97:92:0a:3e:28:1b:2e:71:6a:86:
                    cb:e4:f4:7e:2b:1b:b6:c2:f2:b5:76:35:5a:06:90:
                    4e:27:83:9b:37:76:eb:19:58:04:70:bb:11:30:cc:
                    d0:82:7f:d0:27:a9:e8:f5:aa:d2:fa:74:e4:3f:35:
                    99:32:e9:10:43:ac:c0:2b:04:56:b3:c6:37:fb:53:
                    16:73:69:73:69:9e:a8:8a:02:60:60:54:31:f1:e1:
                    56:57:26:6c:95:8f:5e:f3:74:52:c2:ca:68:71:f7:
                    f6:14:eb:82:4e:81:9c:c5:6b:56:aa:8d:10:43:46:
                    48:9a:dd:64:1c:7f:53:06:ab:6b:84:5e:96:31:48:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E0:80:02:F1:4E:52:83:70:1D:84:CB:EC:89:1A:FC:1B:36:55:F0
            X509v3 Authority Key Identifier:
                keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:87:55:87:82:a5:18:a9:ff:07:c4:43:cb:f8:1a:46:0b:40:
         dc:87:70:f7:d7:dc:4d:1e:c0:0b:6d:63:aa:5f:91:45:5a:62:
         01:1e:df:51:11:46:83:72:28:99:b7:b3:d8:b2:f3:02:af:d5:
         df:31:87:0e:be:63:d3:62:83:9c:9a:4b:0a:32:87:5d:93:81:
         d9:8b:82:6f:4e:f0:39:c2:8a:d5:84:a1:ca:1f:dc:f4:de:fa:
         62:29:87:88:e9:30:98:ac:06:da:8e:e8:16:8d:bd:fe:87:5b:
         fb:1a:ed:fd:5c:8f:d1:65:85:60:4e:55:ad:4a:6d:9a:39:4b:
         6b:03:93:c5:d7:09:50:37:5d:51:3e:8e:95:c8:e3:5c:5d:1c:
         a6:5a:11:4e:61:1f:7c:eb:cf:60:a4:3d:06:34:d9:20:5e:fa:
         f6:57:c8:fc:04:83:48:64:97:c2:ea:dd:0c:17:4c:ef:ea:ca:
         e8:34:f1:8c:b6:c3:93:48:ec:3c:b1:92:bc:f0:cb:a7:34:76:
         cc:25:27:ff:e5:49:12:de:b0:2c:07:7b:8e:ab:e2:e2:4f:ec:
         a7:1f:1a:1a:0a:14:a2:d3:91:04:95:ea:1f:2c:e7:a0:d4:6a:
         24:a2:f5:8c:a3:26:68:27:0f:19:90:9c:5b:a7:8d:9e:1d:47:
         68:dd:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:58:25 2025 by rpki-client