Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
File:                     eVBSIUjSaDdshFMMXS2lPjm_Gso.mft (raw, json)
Hash identifier:          yWnyxcywWtovc2ICLwMxTcMPztasNhqIM1eL5DYNFx8=
Subject key identifier:   48:18:27:D6:C8:FB:C1:C0:88:C6:2E:C0:8C:AB:B3:14:5D:EF:CB:AA
Authority key identifier: 79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA
Certificate issuer:       /CN=7950522148d268376c84530c5d2da53e39bf1aca
Certificate serial:       01964D7DF40EAAF99544CC511EC26852013A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
Manifest number:          03CB
Signing time:             Sat 19 Apr 2025 10:00:22 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:22 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:22 +0000
Files and hashes:         1: eVBSIUjSaDdshFMMXS2lPjm_Gso.crl (hash: kkNTbRCMlOQPY8olpoOJuclvra0+4klKEOEXGXGVhuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7d:f4:0e:aa:f9:95:44:cc:51:1e:c2:68:52:01:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7950522148d268376c84530c5d2da53e39bf1aca
        Validity
            Not Before: Apr 19 10:00:22 2025 GMT
            Not After : Apr 20 10:00:22 2025 GMT
        Subject: CN=481827d6c8fbc1c088c62ec08cabb3145defcbaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:78:0a:40:35:2f:bd:40:0f:fc:5f:e0:d7:
                    b4:dd:f3:f1:fd:f1:cf:16:27:e5:b6:70:2c:ee:8f:
                    f7:2e:56:6f:e8:f6:d2:0e:f5:85:b9:7d:7f:fb:14:
                    e7:07:8e:fd:4c:08:7b:31:16:38:e7:be:e9:98:62:
                    89:87:76:83:28:08:d5:1c:64:b0:de:6a:9b:9c:b8:
                    4c:f1:d1:47:b2:22:34:0f:1f:52:c5:c0:7a:f8:be:
                    8d:45:c2:49:05:83:67:f7:f3:0f:ed:0d:01:cb:b4:
                    53:03:e7:57:36:c6:4b:b3:d3:c9:6e:c9:43:fe:35:
                    52:5c:77:70:22:37:c9:30:1d:5b:39:fc:cd:8e:cf:
                    e7:c5:d9:cd:e4:0c:e3:9a:12:03:ef:53:1e:79:00:
                    63:1b:5a:95:ae:23:3c:21:02:4e:7c:95:bc:0f:f2:
                    dd:51:6b:9f:b4:7d:66:61:b1:08:af:a6:86:3f:a8:
                    1b:37:76:15:56:39:9c:54:06:09:9c:e2:1f:6c:7e:
                    e7:c6:90:16:0a:2a:26:d2:09:61:1e:b0:0c:b5:26:
                    af:52:cc:b6:a8:9d:99:67:06:57:2b:03:2b:52:47:
                    bf:99:61:ba:f6:49:ce:0f:1f:53:b4:fe:a6:69:67:
                    28:eb:e3:9c:5f:d3:d0:0b:47:97:6a:8a:b0:fe:38:
                    68:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:18:27:D6:C8:FB:C1:C0:88:C6:2E:C0:8C:AB:B3:14:5D:EF:CB:AA
            X509v3 Authority Key Identifier:
                keyid:79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:53:95:aa:bf:3f:cb:d8:90:78:9b:c3:65:34:89:3c:29:c2:
         28:b2:ed:68:af:ab:2b:ec:49:ba:42:56:62:f0:b6:28:9a:7f:
         fe:aa:72:65:ec:83:cf:4a:eb:5f:ff:8e:17:a3:12:a4:de:e1:
         89:32:80:15:47:56:84:97:ec:23:e7:43:53:6f:66:47:40:fe:
         6a:c8:24:8b:15:0e:9e:bf:6c:2a:ab:c2:f4:3a:8b:47:9f:fd:
         68:b4:c6:3f:12:5a:d5:dd:31:26:6e:f2:af:92:f6:6c:83:f3:
         40:c7:4e:04:66:8c:6d:1a:60:c4:e5:c0:a5:e6:25:d2:96:02:
         8b:c5:ca:e9:3b:35:be:e5:71:3d:8b:bc:de:a8:5f:3c:f0:0d:
         a7:11:13:be:32:73:ea:dc:0f:6e:05:71:ae:3c:11:5d:b3:79:
         bb:2e:a7:35:9b:75:ee:f3:c4:92:65:30:77:f2:73:ae:ca:ff:
         66:c1:e9:2a:52:74:20:85:46:e7:42:4d:83:09:85:d7:5c:13:
         5c:fd:6e:05:4e:14:9e:54:87:19:4a:0a:88:b9:79:0b:cd:18:
         af:21:50:64:62:f5:d1:89:70:41:1e:a2:a1:88:6a:88:7d:38:
         99:0c:dd:35:59:17:9b:fe:1a:dc:fa:9f:54:69:12:2a:0b:9a:
         ac:ab:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:20 2025 by rpki-client