Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
File:                     VqAi3rCSj10aCl-wDpbK1MfZEdg.mft (raw, json)
Hash identifier:          TYZxHKzCgzoBfmEfwYQNStYxvj2Q4sIwzHZJ2zswy7c=
Subject key identifier:   F1:1A:0B:60:9F:9E:34:E1:A9:E2:77:02:1F:C4:A1:34:DE:B2:DC:26
Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
Certificate issuer:       /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Certificate serial:       01958C973A7928C1F1548836010579F6327D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
Manifest number:          1496
Signing time:             Wed 12 Mar 2025 23:01:15 +0000
Manifest this update:     Wed 12 Mar 2025 23:01:15 +0000
Manifest next update:     Thu 13 Mar 2025 23:01:15 +0000
Files and hashes:         1: 3boydbqbtwhdZ5CEmeaE1nZurKs.roa (hash: mbSzXY+NpIFX8W+6ZeObuPOdikS5E/3lRNbdaeW4oXA=)
                          2: VqAi3rCSj10aCl-wDpbK1MfZEdg.crl (hash: OrRCWmTh9GcYR4SpWrS36uts9Fv0sEGQHCvWUrhN5l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:97:3a:79:28:c1:f1:54:88:36:01:05:79:f6:32:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
        Validity
            Not Before: Mar 12 23:01:15 2025 GMT
            Not After : Mar 13 23:01:15 2025 GMT
        Subject: CN=f11a0b609f9e34e1a9e277021fc4a134deb2dc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7a:90:f3:14:dd:f5:f3:6b:87:cc:39:85:3b:
                    f0:0e:f7:91:8a:69:53:5d:7d:b0:fa:35:40:6c:4d:
                    9e:ea:5d:b4:32:f9:9e:e7:af:5c:f7:08:c6:9c:d0:
                    6e:85:2a:6c:22:52:98:6e:09:37:25:19:a9:cf:3a:
                    cb:27:a9:bc:d9:42:aa:9b:31:a1:0c:f0:61:0e:68:
                    4c:64:b9:4b:1a:ac:32:d7:62:fa:f6:10:5a:08:19:
                    0f:c4:61:d4:1f:e3:79:e4:7d:91:61:d3:be:51:f5:
                    94:5c:cf:a8:df:79:3f:51:1f:3f:3d:b8:1f:d7:e0:
                    da:70:c0:37:53:6e:7e:51:de:f3:9e:59:96:10:8c:
                    c0:3c:9b:30:c2:3e:4a:9a:fa:59:bc:04:2b:0a:93:
                    63:cf:26:bf:4c:f0:10:e3:f2:be:78:cb:39:00:57:
                    59:7d:d2:e4:6a:93:1d:31:66:2a:67:a7:f5:ff:ea:
                    4c:7d:46:84:10:1e:a0:24:d9:4f:0f:84:08:43:85:
                    4c:db:cd:fc:d7:6c:00:72:bf:4f:c0:de:3b:86:28:
                    d6:02:15:58:41:66:a7:fc:08:02:e2:c3:65:59:58:
                    ce:57:56:5a:4f:76:7c:cb:d1:0a:2f:59:60:f0:93:
                    d6:1f:93:04:4f:0e:77:b5:62:84:59:7e:0f:92:75:
                    c8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1A:0B:60:9F:9E:34:E1:A9:E2:77:02:1F:C4:A1:34:DE:B2:DC:26
            X509v3 Authority Key Identifier:
                keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:eb:7b:11:f3:27:c7:2f:d3:e8:0d:5e:9d:8a:23:9e:d0:7b:
         aa:06:c9:76:3e:0b:49:78:21:13:ec:88:bb:8f:f3:3f:4c:b2:
         3c:6b:6b:4b:ac:a0:9b:68:2a:78:a0:1c:a4:6c:25:18:51:56:
         e2:6f:e0:97:d8:cb:eb:53:15:a2:36:07:d7:6b:6d:fd:67:46:
         af:73:37:5d:07:a6:14:fc:35:4f:d8:95:ba:91:c5:b1:4b:68:
         c1:de:d6:90:8d:ca:07:dd:3f:42:14:1e:7f:11:b4:c9:24:62:
         54:fd:2b:05:9b:91:19:8e:de:e1:94:8f:70:bc:d1:41:4b:2c:
         74:db:95:1d:ed:8f:fb:e4:52:17:a3:cf:7a:93:43:8c:cb:d9:
         f4:39:fc:52:f4:11:81:5a:33:99:1e:3d:0d:83:19:fb:7d:8e:
         50:a3:f8:a4:6b:d4:03:5d:62:92:bb:e0:c8:4b:60:c7:7a:30:
         93:89:5d:a9:55:bc:61:fd:4e:e6:64:a2:fc:74:e2:af:b5:5f:
         17:5a:a3:0e:47:fa:59:77:d8:f2:91:71:50:44:1e:af:37:37:
         d5:7b:0b:cc:9c:83:de:d3:bd:cf:cb:97:39:c8:99:96:de:a8:
         93:34:b8:09:8e:e2:1f:9c:d5:41:44:06:80:e2:1c:52:82:cc:
         cd:17:6f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:10:34 2025 by rpki-client