Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
File:                     7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json)
Hash identifier:          kHucwcveDq/5WeBP3xsQEhQGVECwhBSkICpifHznLmg=
Subject key identifier:   C4:47:4C:0C:01:BA:FC:60:25:A7:3E:A6:26:AC:A2:3B:5F:8A:F0:82
Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
Certificate issuer:       /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Certificate serial:       01962F06C079466491273CEF0AB414FA9963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
Manifest number:          0438
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: 7-iKgq_egyYwcadsMDWwyFWqLlo.roa (hash: JZB2sXO6oOa8aKp3FuzQIf3wYfe4hIYqBJM+BUdhsu8=)
                          2: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: +kw8Vt6YzmNPeiSc5JzrOyA33rVgOIJgNVv46ORaVDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Apr 2025 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c0:79:46:64:91:27:3c:ef:0a:b4:14:fa:99:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=c4474c0c01bafc6025a73ea626aca23b5f8af082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:84:74:36:8b:25:a8:2f:af:c4:a3:75:56:70:
                    ec:09:ba:3b:e8:42:ed:76:e5:47:7b:b2:52:49:66:
                    7b:e5:23:95:71:b1:35:66:1d:f4:e2:b7:c1:51:42:
                    72:51:bf:63:45:69:db:3b:3b:e9:48:95:33:b5:b4:
                    9b:39:c5:d9:f1:68:1f:f7:5a:db:fb:94:8b:7e:47:
                    01:09:ef:ae:94:36:5b:8b:a5:c8:72:d5:c3:b7:14:
                    11:f1:be:7d:e6:36:52:06:d3:4a:8a:be:ce:f4:ad:
                    31:8f:1a:5c:cb:55:0b:3b:1e:71:ad:21:cb:4f:08:
                    5d:c7:db:b2:b2:e5:f1:0f:7c:e1:2d:f2:25:a4:f3:
                    ef:ea:76:08:7f:c1:11:51:6c:7d:55:49:7f:ab:af:
                    62:9d:88:11:cf:c1:cd:ac:fc:b6:15:3f:de:d7:af:
                    bd:20:b8:1e:b0:9d:20:51:7c:c8:62:97:2b:eb:a3:
                    06:1e:58:d6:9c:d2:2a:a5:19:77:5f:29:ef:62:bf:
                    3f:d7:e1:e3:c2:d1:56:c8:73:27:49:31:4d:34:ba:
                    6f:9b:53:f6:73:37:fe:c5:66:08:17:52:28:37:9a:
                    c6:dd:60:bb:97:29:6e:6c:23:c7:01:eb:a4:8c:07:
                    42:aa:86:36:1d:39:ea:1a:dd:25:4d:23:c2:b3:13:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:47:4C:0C:01:BA:FC:60:25:A7:3E:A6:26:AC:A2:3B:5F:8A:F0:82
            X509v3 Authority Key Identifier:
                keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:4b:ac:b0:9e:26:a5:31:79:94:5e:30:03:34:ad:96:a6:18:
         51:df:b1:d9:1f:1f:c9:23:97:b4:f4:99:8d:9c:26:e2:92:64:
         fe:db:78:64:7e:b1:46:95:7c:2b:d1:de:f2:80:ec:d2:ea:58:
         5b:60:78:c2:20:9c:98:50:96:36:f8:e6:32:e4:66:73:7d:e5:
         0c:8b:3f:59:ae:ec:71:ff:cb:dc:8d:9c:6b:aa:ed:9e:e6:20:
         ae:66:1a:63:22:bd:6c:81:85:36:5d:eb:f3:76:4b:e5:6f:ed:
         20:7a:22:c5:b7:cb:e7:a9:4f:e0:0c:9a:a6:6c:05:a3:7a:4e:
         a7:d2:ea:80:25:2f:d2:7e:d8:ec:dc:e2:9b:3f:ab:c4:0a:1f:
         65:62:24:fe:0e:0b:9d:e3:3a:f9:f8:5b:1f:68:df:72:75:7e:
         71:24:ab:d4:47:b4:ce:d2:0c:41:ea:c5:d1:bc:b5:c4:b8:83:
         c0:0d:00:8c:d7:73:6f:d2:34:f9:1b:27:3d:59:87:d3:b9:33:
         b1:03:1d:2d:ab:42:1c:df:6d:d4:27:1d:e6:4c:c2:a8:a7:bd:
         ee:db:e0:60:b6:2d:28:92:a1:6b:f3:26:5d:20:e7:4a:26:7a:
         fb:6b:eb:a3:b6:10:17:71:ac:6d:39:f2:f9:5b:f1:f3:63:fe:
         e5:bf:c1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:43:22 2025 by rpki-client