Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File:                     OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier:          xSvubjk3JnOckmoMc41/W9axaG4z4y+i4ktRIq0qBwo=
Subject key identifier:   BF:95:74:3E:C4:D1:B7:90:9F:C6:C5:05:1D:AB:DF:A9:36:33:97:50
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer:       /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial:       01964CD98F064A8BF4D6D6A25E57BD5582CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number:          14F9
Signing time:             Sat 19 Apr 2025 07:00:48 +0000
Manifest this update:     Sat 19 Apr 2025 07:00:48 +0000
Manifest next update:     Sun 20 Apr 2025 07:00:48 +0000
Files and hashes:         1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=)
                          2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: nxmgDf1O8nsiyiHBKeYpRzFWY87a8FAYh0nuyxxNRXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:8f:06:4a:8b:f4:d6:d6:a2:5e:57:bd:55:82:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
        Validity
            Not Before: Apr 19 07:00:48 2025 GMT
            Not After : Apr 20 07:00:48 2025 GMT
        Subject: CN=bf95743ec4d1b7909fc6c5051dabdfa936339750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:28:ec:2b:e5:4b:27:55:6d:56:bc:e3:3d:
                    39:86:d9:8f:79:61:b8:b7:dd:5b:31:cc:d0:fb:4d:
                    90:1b:6a:e2:44:a6:a1:d0:b6:d5:b7:f2:2e:87:84:
                    41:72:d7:8d:42:90:75:cf:18:c1:8a:a6:ed:7a:61:
                    89:7a:9f:10:c7:1a:4e:66:88:27:2b:46:8f:e7:34:
                    db:1b:81:ad:d4:f3:63:23:5f:66:a1:04:38:29:3a:
                    ad:d6:7d:fb:b7:80:c1:e9:5f:b7:e7:6d:3c:f5:09:
                    72:8c:21:83:86:48:20:d7:68:ef:d3:b9:48:12:4b:
                    07:3a:b3:df:53:05:41:72:a6:c4:11:b5:96:8b:d5:
                    aa:25:08:51:4c:13:b6:8c:2e:98:af:cd:8d:14:8b:
                    a8:1a:ca:0f:87:d9:d3:04:cd:e5:f7:e9:5b:84:0e:
                    6d:5a:40:b7:6e:fb:05:9b:a9:39:c4:b7:a5:cb:6a:
                    cc:8e:88:36:37:58:2e:5d:ed:88:e2:bf:c2:a9:62:
                    66:d6:f0:06:95:b4:fb:80:15:20:5e:02:84:43:c5:
                    5b:52:7b:7b:85:ff:3b:a9:71:99:ef:8c:27:0e:e3:
                    52:30:2d:3d:28:ee:08:1f:0c:dd:d4:9d:c6:e2:55:
                    3b:7d:9e:c1:54:f9:ed:62:09:4e:44:7a:4d:8b:a8:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:95:74:3E:C4:D1:B7:90:9F:C6:C5:05:1D:AB:DF:A9:36:33:97:50
            X509v3 Authority Key Identifier:
                keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e0:d1:c1:83:7f:e8:0a:f3:ed:b7:89:75:56:10:ae:cc:f9:
         70:e4:17:c3:f4:ff:96:90:22:cd:ce:20:ba:8f:17:de:49:54:
         70:1e:e0:49:52:1e:17:58:4a:fd:b8:a0:56:d4:e7:14:bd:35:
         fe:fc:b5:f5:fd:49:fb:e1:70:22:13:7e:42:a7:de:9b:42:12:
         3a:ce:95:41:9a:b1:bc:e2:42:dc:3a:20:c0:74:7f:45:9b:39:
         cc:c8:25:da:76:19:66:96:25:84:68:81:b2:ac:b3:75:63:f5:
         e5:a9:41:4a:72:26:13:34:ae:10:bd:50:c9:bd:44:7c:8b:5c:
         d5:61:62:5c:70:9b:87:4f:4d:8a:e3:d7:86:bc:d3:13:fb:b3:
         4d:86:c0:d6:71:84:52:a5:4e:d3:eb:19:42:3c:89:1b:45:52:
         79:f5:0b:09:fb:4d:a7:39:ad:6a:55:4d:8a:19:80:f1:f1:9b:
         c3:b3:02:f5:84:6e:09:16:d0:ec:f3:16:c1:db:15:89:48:72:
         2e:70:d8:47:8e:ca:c0:75:36:3a:6f:4b:b8:81:19:6b:ca:10:
         90:5f:d1:6d:b7:b3:a5:51:0b:11:af:0f:08:72:c6:e3:7e:13:
         10:4f:cf:97:7e:e0:79:5b:eb:30:ba:0b:aa:31:fe:8c:0d:03:
         a1:0c:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:39 2025 by rpki-client