Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File:                     DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier:          kn062hdp2ANy865rmJSd9sbw+rjgzb6mOkR7Qn9aq38=
Subject key identifier:   92:D4:D1:A6:E3:9F:82:58:64:96:E1:74:39:38:CE:E7:8F:48:2A:C5
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer:       /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial:       019611A1BDF2573F4F4719AC481B5C959218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number:          0700
Signing time:             Mon 07 Apr 2025 19:02:14 +0000
Manifest this update:     Mon 07 Apr 2025 19:02:14 +0000
Manifest next update:     Tue 08 Apr 2025 19:02:14 +0000
Files and hashes:         1: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: pgEre3i+Ya/GLf5QDk1wqw3a3pw40sOP3LYrrLe9d3I=)
                          2: vyoLOYF7hsLBOGjck5t3unLW39g.roa (hash: zHMbGWldBzia3+X0+26y7vhQZZJp5fFWFDYQyTykG6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:11:a1:bd:f2:57:3f:4f:47:19:ac:48:1b:5c:95:92:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
        Validity
            Not Before: Apr  7 19:02:14 2025 GMT
            Not After : Apr  8 19:02:14 2025 GMT
        Subject: CN=92d4d1a6e39f82586496e1743938cee78f482ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:f2:2a:c7:8f:8f:89:c9:33:68:b5:d1:a2:
                    7a:92:52:1a:b8:dc:6e:43:d1:af:93:82:64:06:9c:
                    7d:ff:f6:52:4b:29:da:7c:c1:af:99:bf:36:bc:8a:
                    97:e4:10:2f:31:2c:37:28:3d:65:44:67:af:ec:c5:
                    f2:dd:d5:5c:ad:53:ea:ce:0f:bb:b6:5a:0f:4b:b8:
                    2d:f5:f8:46:5f:7d:43:4a:56:e9:33:b8:f4:63:16:
                    2f:a9:0b:99:07:c9:56:f5:65:1a:3e:94:2c:39:3e:
                    31:29:00:a3:5a:97:69:e8:ea:d9:f1:78:4b:0d:22:
                    f2:48:9a:3d:52:09:61:21:e8:7b:99:73:a0:f4:14:
                    c8:72:0a:b2:9a:73:35:86:01:bd:6f:f7:ca:85:77:
                    cb:ee:96:8f:e1:6b:52:95:ee:f5:fc:5e:d7:82:9c:
                    d8:d6:c2:7a:49:05:fa:85:0f:4c:17:d5:5a:54:6c:
                    f3:f5:cb:df:f3:32:73:3d:ad:88:79:a3:61:89:70:
                    47:93:31:f0:fc:b2:f1:79:7a:03:8f:78:6d:da:71:
                    5e:10:99:42:3d:fa:53:ea:3f:f6:dc:a6:a6:76:66:
                    c9:3c:3e:04:e1:21:3c:5b:d1:f7:b7:cf:dc:eb:7a:
                    f0:51:30:d9:c6:28:a4:12:8f:92:d9:17:ae:96:83:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D4:D1:A6:E3:9F:82:58:64:96:E1:74:39:38:CE:E7:8F:48:2A:C5
            X509v3 Authority Key Identifier:
                keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e3:32:4d:fa:2b:5f:75:e4:e3:59:41:71:7c:b1:9d:bb:46:
         95:59:34:46:d7:fb:d0:13:5a:4b:0f:e2:31:af:87:d4:18:3b:
         f0:ff:a0:49:b9:39:b2:1d:b2:de:2f:bd:70:8e:4d:0a:db:35:
         28:17:9d:5b:f6:f7:ab:d8:c2:50:d4:7d:a6:de:bd:96:98:6d:
         b0:97:40:7d:95:56:9f:f4:f3:29:d8:65:bb:b9:45:81:e9:82:
         90:ea:71:f1:f7:d6:68:bd:ff:5a:b3:62:22:d7:db:f7:e9:25:
         37:c5:c5:8e:89:bc:6d:52:28:f4:6d:47:5e:3b:fd:99:64:b8:
         e0:57:49:70:86:06:b6:bb:85:6c:26:4c:5f:6d:a6:26:7e:d1:
         f4:b5:f1:db:e0:41:db:ea:49:ee:49:8c:8a:01:23:49:ab:b0:
         21:85:31:17:ce:00:50:a5:ce:5a:17:8b:bd:b0:f6:c1:87:98:
         5b:f6:59:b5:41:21:3d:b4:d4:a8:b7:ca:52:e1:a4:4d:99:7c:
         fc:a6:0e:78:99:02:d2:a4:d5:52:5a:d7:a2:e9:3a:77:3d:78:
         d5:10:f0:57:ad:8c:d1:46:86:68:89:cc:7d:fe:d3:94:be:ca:
         65:12:90:ab:f8:97:e5:8d:2b:d7:92:21:0b:2b:cc:02:94:65:
         ec:3d:82:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:56 2025 by rpki-client