Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
File:                     pdSlpdFMijuMuU0ctGwNbiocSEc.mft (raw, json)
Hash identifier:          thjvJEGX4utDKcQHF91lx/PuCVc56GOjMKq1gcTuqD0=
Subject key identifier:   FD:F3:E6:8A:48:94:37:1F:60:14:08:D7:5B:6E:78:02:B5:98:97:36
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Certificate issuer:       /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial:       0196553783D92F9BE206C39CD57C64231117
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
Manifest number:          1502
Signing time:             Sun 20 Apr 2025 22:00:23 +0000
Manifest this update:     Sun 20 Apr 2025 22:00:23 +0000
Manifest next update:     Mon 21 Apr 2025 22:00:23 +0000
Files and hashes:         1: 3FckEHyuwzo_yFTVo6wwNAegPsE.roa (hash: 662O0Z8AJdVhCqtS4YSdo3bxoRyCFIabv03eTH2gQcE=)
                          2: pdSlpdFMijuMuU0ctGwNbiocSEc.crl (hash: 2LXM2DFf3sQeI9jDQJaSO76Ew9gWy+VcB8MQ62agiZE=)
                          3: tUnp3lCXtooKBCH_jA_Vfa2MjSQ.roa (hash: DX7nnKsn9/Gq5SSYvCSnPhv/mgOxdAVaf7ValTsSLAA=)
                          4: wtiq9-Vyox7Vay42XDneReyQxZY.roa (hash: X66Pzq8/S5DgF09aIXIT7Nn7GhBbYBlRcxr5BY5i+n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:37:83:d9:2f:9b:e2:06:c3:9c:d5:7c:64:23:11:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
        Validity
            Not Before: Apr 20 22:00:23 2025 GMT
            Not After : Apr 21 22:00:23 2025 GMT
        Subject: CN=fdf3e68a4894371f601408d75b6e7802b5989736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7b:ad:5f:8a:11:8e:dc:41:1b:0d:f2:fb:61:
                    d4:11:bf:14:f1:35:2e:59:65:27:4d:ef:73:db:e9:
                    2d:27:2f:61:ce:6f:a3:44:47:a8:46:88:14:26:88:
                    f5:94:77:a6:cc:53:3d:63:8e:7b:13:68:c1:47:2e:
                    c1:05:5a:a9:ea:78:2c:da:55:ad:a9:a0:ec:98:5b:
                    c6:e9:46:c7:7b:c2:eb:ad:26:5b:e3:16:7c:c9:35:
                    48:b5:7f:73:b3:41:40:79:fa:a8:71:c4:04:91:2d:
                    57:c0:da:64:bf:7e:09:5c:f4:59:4d:8b:ee:c3:b1:
                    1b:0c:a3:0e:f1:44:14:a5:db:73:75:d8:96:1a:58:
                    38:47:4a:94:44:25:c6:19:b5:f6:cd:08:b7:cf:60:
                    74:82:df:d5:5b:4b:29:86:a4:7a:a9:1c:4d:65:8a:
                    fe:4c:54:c8:17:7d:87:69:33:79:4a:95:1e:77:37:
                    c1:e2:6b:e2:b2:7c:68:ef:25:d4:e9:f2:0f:5b:18:
                    3e:b2:84:6d:17:06:06:d2:09:96:16:89:73:2e:a6:
                    3e:27:fc:56:6b:b1:34:22:c8:13:f5:84:8e:e4:81:
                    5a:12:18:50:ec:42:d9:05:c7:58:59:7f:2c:84:38:
                    d0:cc:9a:4f:60:a1:ef:af:50:14:15:12:54:ba:c7:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F3:E6:8A:48:94:37:1F:60:14:08:D7:5B:6E:78:02:B5:98:97:36
            X509v3 Authority Key Identifier:
                keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:e0:07:e7:4a:98:83:86:88:08:61:d4:44:87:a3:b9:13:15:
         47:f2:72:70:cd:d2:84:08:5d:c5:61:30:31:eb:12:bd:ef:b2:
         b5:42:68:e7:f7:2f:c9:2c:1d:49:87:d1:fc:6d:87:12:09:2b:
         1f:3f:c6:13:d1:a9:1b:55:43:e8:1a:4f:6d:49:ab:01:f3:e2:
         ff:18:b2:17:8d:e8:24:5d:90:dd:d7:0a:cd:4c:de:28:c9:05:
         6d:af:f5:34:da:72:db:7f:91:61:64:f9:f8:e1:5a:57:9e:00:
         07:22:2b:30:03:7a:c5:32:74:c6:7c:a5:bd:92:e3:d2:74:03:
         20:db:d6:e2:77:24:96:ce:e4:51:98:46:3e:7d:bd:ea:3a:ee:
         1c:71:2d:0c:a5:09:56:e1:12:3e:b2:43:fd:91:b3:67:1a:77:
         14:49:e5:72:c0:fe:64:c9:3a:3d:6a:11:dd:39:bf:7a:c2:46:
         f0:c2:9d:ef:22:b3:e8:2c:66:b8:4d:63:b9:c6:12:fd:67:d5:
         5e:13:3e:7f:c3:39:cf:6d:c3:67:e1:6e:8b:f2:6e:75:ac:b2:
         06:46:2c:1d:ed:9d:2c:6a:09:f2:fa:a1:5b:c6:2d:95:a1:e6:
         da:6a:ce:3c:9f:a5:de:7d:35:97:27:39:9f:2b:17:a2:0e:f3:
         30:01:b6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:34 2025 by rpki-client