Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File:                     C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier:          OX7gXp2t+dfHFKNr3jdkYEkPPeyfz2p78HplbQwVX0w=
Subject key identifier:   20:18:F7:B7:47:31:6A:23:9D:EE:24:77:E4:50:C1:09:2A:BB:6B:66
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer:       /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial:       01964632FA9BCF1343B16A3B7FAAD6062FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number:          02C3
Signing time:             Fri 18 Apr 2025 00:01:08 +0000
Manifest this update:     Fri 18 Apr 2025 00:01:08 +0000
Manifest next update:     Sat 19 Apr 2025 00:01:08 +0000
Files and hashes:         1: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: kwb73nNGGf48uBmTI79XG+KVX6hcrGaMdak6HCcJU68=)
                          2: lBowDCcGSdkP56eGU0lPL4u_SEM.roa (hash: j0fleVV6sjY4GNZzRXgYAIbJa3v2es0FQGzI6ZY2suc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 00:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:32:fa:9b:cf:13:43:b1:6a:3b:7f:aa:d6:06:2f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
        Validity
            Not Before: Apr 18 00:01:08 2025 GMT
            Not After : Apr 19 00:01:08 2025 GMT
        Subject: CN=2018f7b747316a239dee2477e450c1092abb6b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:41:e7:d1:91:fc:0b:78:ff:74:1a:fa:97:
                    bc:5e:17:2c:b1:3c:f1:07:cc:ef:0e:b2:b6:77:04:
                    06:e7:b4:60:79:45:e9:f6:57:39:61:a9:d7:33:46:
                    cd:5c:15:1c:9d:23:4a:1f:f2:8b:98:49:ce:6d:12:
                    62:06:9d:cd:0b:6e:c7:96:6d:27:d9:4b:16:64:be:
                    2a:70:fa:0a:d6:fc:09:93:3d:1c:13:f1:95:2c:10:
                    a8:1d:30:96:8a:4a:a1:ee:7f:cb:6b:fc:5d:ce:7c:
                    52:ce:b8:fe:52:eb:f1:55:97:de:71:ba:ae:47:cb:
                    c7:ff:4d:d4:04:f0:4f:21:97:71:3b:b0:41:b8:6f:
                    c8:19:7a:8b:3e:c4:2a:9a:eb:ee:4e:70:92:ba:b3:
                    6e:a9:9f:5b:80:44:76:6b:7a:8f:b5:a7:a1:04:1c:
                    9f:13:84:b4:f6:8f:bf:c1:dc:4c:01:96:8b:9f:b1:
                    3f:f2:08:fe:7a:14:59:e8:d2:38:80:ad:96:a2:1b:
                    ba:85:59:57:31:42:54:bb:1c:29:5b:b1:85:1f:cf:
                    f6:3f:07:a0:b3:97:cd:74:bd:5f:58:eb:ed:4c:24:
                    2f:66:20:a4:8c:5e:2b:c3:10:3e:3c:e6:f7:52:f6:
                    4e:4a:d9:42:99:4a:be:f9:de:5e:f2:1e:cc:65:4a:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:18:F7:B7:47:31:6A:23:9D:EE:24:77:E4:50:C1:09:2A:BB:6B:66
            X509v3 Authority Key Identifier:
                keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:21:1c:1f:4f:3e:f2:3c:91:99:14:05:3d:fa:60:a7:8e:bf:
         2b:00:5b:ee:b7:1d:1a:2c:28:34:ca:b9:6a:f1:4d:fa:07:f6:
         67:a5:75:e1:51:a7:9d:90:e1:dd:53:e3:fd:f2:c7:25:b2:c5:
         70:d6:66:09:c6:bf:a3:b6:a1:53:60:7b:db:93:99:24:ba:64:
         18:1b:8e:e0:89:51:7e:50:1e:c5:53:e6:8d:97:81:3e:4e:c9:
         ba:cf:c2:a6:b7:6b:3d:2d:a8:bf:77:d5:32:c2:dd:6f:17:0b:
         fc:54:50:29:f9:65:f3:42:57:d7:1d:1c:b5:c7:da:9b:b4:cb:
         12:df:09:65:89:82:33:d8:b6:0f:0a:e0:75:78:5b:e4:18:f0:
         c2:14:28:eb:d8:23:ce:3e:2c:7a:4f:7c:8d:b4:8f:37:40:1d:
         18:c9:0e:8d:9a:49:b4:96:91:d3:6d:2f:09:88:73:0d:71:34:
         56:ba:52:fb:5e:8a:90:8b:d2:9c:18:07:26:ee:1a:ec:65:0f:
         32:a0:41:53:eb:63:15:61:35:37:3c:a1:ff:5c:f4:fa:f8:04:
         a4:3e:d8:ca:8f:21:da:43:5c:ab:f8:ab:6e:28:d0:4e:57:83:
         9a:11:83:1f:a3:9f:15:db:3a:6a:ed:e4:42:4c:1d:e7:8c:6c:
         f1:5d:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:54:45 2025 by rpki-client