Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
File:                     362LFgmdbN-MOoEcpYYN8Pa69t4.mft (raw, json)
Hash identifier:          IkA2TeQJvaN1s1FfAtliBY4G6k3Eatlde5tmOLlGGto=
Subject key identifier:   2A:56:27:45:A0:0F:E7:A8:3C:0F:9E:E6:FE:0B:CB:ED:1F:CF:76:79
Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
Certificate issuer:       /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Certificate serial:       0196458DB497310FC610CE0B790E6D416800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
Manifest number:          14F7
Signing time:             Thu 17 Apr 2025 21:00:36 +0000
Manifest this update:     Thu 17 Apr 2025 21:00:36 +0000
Manifest next update:     Fri 18 Apr 2025 21:00:36 +0000
Files and hashes:         1: 362LFgmdbN-MOoEcpYYN8Pa69t4.crl (hash: NjWxEPS06n7gwa5VVS3CTbvZOrqDXCEKa3xRbrnHIf0=)
                          2: ix48MvDGuyMGC7SsCyq5CBbj9_U.roa (hash: TdU/FjmcGDmmVtUcG0hSM2P6GM5lo+c3VUYtonFIPUY=)
                          3: y9Bh0m6kauwP6kD0s73D8-vrbVM.roa (hash: fBYPL7fiPGaFShtarMcQPH8FKsxoKQThi2vjq34Xkk8=)
                          4: yI6sGULCtvHmcNyhlI3Ib9zoJh8.roa (hash: XOXs8qRUtBdFjA6Dpn1zPYBHYPckC8k/wFskDMsHcgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:8d:b4:97:31:0f:c6:10:ce:0b:79:0e:6d:41:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
        Validity
            Not Before: Apr 17 21:00:36 2025 GMT
            Not After : Apr 18 21:00:36 2025 GMT
        Subject: CN=2a562745a00fe7a83c0f9ee6fe0bcbed1fcf7679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:7a:8d:91:d8:92:17:88:42:3a:64:db:77:
                    e7:d3:52:97:1e:bb:eb:eb:e3:94:d9:d1:5a:bd:19:
                    e2:27:1d:57:98:ba:4d:3c:bc:18:ff:48:5c:d5:86:
                    67:40:d4:5f:1d:3f:cb:d0:96:1c:a4:4a:41:f7:d5:
                    cc:cc:bf:49:5e:86:72:8c:4a:f9:96:9f:bf:5d:1d:
                    2c:e8:ef:40:a8:ed:97:9a:c1:19:f3:12:46:57:4c:
                    b6:0a:00:1f:62:91:ca:41:82:13:1e:20:3b:85:92:
                    ff:a5:8b:c6:7a:de:9c:1d:80:39:a9:49:ff:d7:56:
                    47:a2:73:81:96:10:f5:08:94:81:c7:df:26:2f:01:
                    ac:31:14:d5:4b:eb:6f:a6:8f:61:b6:a6:07:ce:3c:
                    b8:d7:94:d0:ae:68:eb:99:2b:10:82:45:4f:b6:46:
                    3a:ca:13:58:75:a8:3f:f4:77:a7:f5:37:38:4e:43:
                    a0:d4:be:db:5f:c1:6a:66:6e:66:02:35:eb:e5:da:
                    f3:9b:e8:f8:23:11:84:0e:a7:cf:43:c5:7a:3c:a0:
                    ec:d9:d8:d1:05:10:6e:59:5e:fc:0f:36:46:7e:f6:
                    3e:95:80:13:23:a6:18:84:15:e9:ec:9c:5c:4a:2e:
                    9b:d4:f2:47:c5:fa:ad:87:ba:7b:d0:0e:bf:70:1d:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:56:27:45:A0:0F:E7:A8:3C:0F:9E:E6:FE:0B:CB:ED:1F:CF:76:79
            X509v3 Authority Key Identifier:
                keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9f:98:cc:9d:cb:53:e5:f2:a3:6a:b9:7a:3f:eb:4c:e5:0a:
         6a:14:1b:e0:60:b6:80:a9:71:f8:c5:31:71:99:d9:1c:da:e8:
         e9:04:3d:52:3d:e7:45:e9:9c:31:45:f1:30:63:ef:3e:10:52:
         56:b8:ec:8b:dd:d1:46:2c:04:64:20:41:b0:df:ad:7f:dd:21:
         fb:da:70:b5:84:d1:7f:95:30:d0:ef:40:e1:aa:05:61:4a:dd:
         24:37:71:28:68:2a:ad:7c:15:d6:69:e1:bc:77:3d:e0:f1:05:
         02:40:c2:da:44:93:5e:51:d5:e0:f6:8d:73:4e:3c:1b:0a:51:
         c6:27:77:18:b9:55:39:96:30:d4:4d:53:d5:b6:99:db:50:76:
         0f:09:b8:7a:7f:5e:a8:22:74:51:f0:ed:69:bd:4a:8c:3f:22:
         13:d1:ec:6b:23:72:be:86:86:4e:5e:b6:0f:25:65:51:ab:d9:
         29:f3:84:f7:f1:93:de:21:1c:d8:70:47:03:d3:39:f9:f4:66:
         ed:ef:01:ea:1b:7e:6e:77:0d:aa:f6:74:a4:7b:d6:53:77:c8:
         31:34:fd:71:47:fa:71:49:e7:f5:c1:69:25:d6:48:b2:5e:91:
         59:6d:ce:94:4e:92:33:be:fb:64:9a:d4:63:50:47:e2:62:6e:
         b2:e9:19:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:35:26 2025 by rpki-client