Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
File:                     Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft (raw, json)
Hash identifier:          5q09Lq71wD/QhHlsRzXELpluLZMuI4p18M1cegiqLLE=
Subject key identifier:   45:47:1C:42:A9:F0:DD:71:8B:71:48:46:09:B4:38:32:FB:2D:29:4E
Authority key identifier: 17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
Certificate issuer:       /CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Certificate serial:       019657CB1235248CA5C032E5AB67D727863D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
Manifest number:          1502
Signing time:             Mon 21 Apr 2025 10:00:48 +0000
Manifest this update:     Mon 21 Apr 2025 10:00:48 +0000
Manifest next update:     Tue 22 Apr 2025 10:00:48 +0000
Files and hashes:         1: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl (hash: hPXSENijczI+SN0vYuS5Mc/RaWEBjSBKvzTvb/4m4ls=)
                          2: sXBgVFkVLsDSLFu0VPEzayMbTVY.roa (hash: 9PH3zbHvy0n97ISInagYoPKrYxbqwVNlm+VRnpV8hJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:cb:12:35:24:8c:a5:c0:32:e5:ab:67:d7:27:86:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
        Validity
            Not Before: Apr 21 10:00:48 2025 GMT
            Not After : Apr 22 10:00:48 2025 GMT
        Subject: CN=45471c42a9f0dd718b71484609b43832fb2d294e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fc:44:6d:0b:cd:11:55:c1:d9:1c:0c:c6:d7:
                    2f:ad:84:8a:b4:6e:ca:0b:1b:ae:6b:32:7a:e6:fb:
                    29:85:ab:60:ed:f9:ae:de:10:23:f0:5e:da:1c:9f:
                    07:9e:80:d4:9a:41:88:f4:79:d2:3f:c8:c6:3c:3f:
                    82:ef:4b:a8:3e:f7:4c:0a:b1:a9:fa:18:d2:9c:57:
                    0f:14:d8:6c:36:f9:f8:4c:1d:8c:93:58:04:31:fb:
                    36:39:f1:e0:be:f3:33:db:b5:e7:eb:19:95:a1:c0:
                    61:ea:e9:b5:42:3e:79:27:cd:d0:eb:fa:0f:12:f0:
                    76:dc:ec:b4:4e:e5:0d:cd:80:9f:56:15:95:d8:db:
                    f2:d0:a6:61:48:6c:ec:a4:79:37:a5:33:6c:7a:8c:
                    6f:fb:83:d4:db:d8:5f:c8:c9:b9:14:9d:91:20:26:
                    fb:0e:7d:32:7c:1b:35:13:de:7c:46:9f:01:c5:55:
                    70:59:c3:db:43:7e:b1:cb:df:3c:83:7e:4a:b3:0e:
                    71:3f:74:e8:a1:dc:89:0f:a9:5b:2b:0e:76:ff:df:
                    23:43:b1:d5:5f:dc:9e:da:2b:32:42:00:2f:6d:87:
                    43:cd:0f:34:ee:e2:3c:4f:39:fe:82:ac:38:d1:85:
                    cf:6b:30:30:e7:25:0c:f8:a1:16:af:e0:0c:5a:23:
                    41:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:47:1C:42:A9:F0:DD:71:8B:71:48:46:09:B4:38:32:FB:2D:29:4E
            X509v3 Authority Key Identifier:
                keyid:17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:66:b4:d3:7a:fd:ec:28:81:54:cb:6d:37:b8:5c:d9:65:56:
         f3:97:4d:61:69:d5:6b:06:e5:3a:8a:6e:04:3f:c9:34:09:26:
         99:c2:a6:0d:3d:e4:cc:83:8e:86:5f:2b:11:75:6a:41:08:37:
         4b:d1:04:d1:25:49:21:1a:3c:8c:f4:f6:e9:55:9c:67:ea:90:
         c3:bc:c9:74:0d:f7:4c:6a:23:ed:e3:52:23:77:95:c3:fb:ea:
         4e:41:e5:24:d6:7e:d1:87:60:b8:a7:d4:d8:3e:4f:a3:d3:86:
         23:dd:e2:a0:5b:37:b4:9a:18:62:67:33:b9:8e:11:dc:25:3c:
         ba:2f:05:85:06:c5:c6:a3:20:d2:5f:c0:21:48:92:02:b5:35:
         3f:e0:d0:7e:61:34:56:d5:ab:d2:88:5e:cb:37:25:bb:63:ce:
         ce:d0:78:3d:69:bf:47:ca:d9:57:86:f8:c3:3d:8b:bf:ad:0c:
         ff:2d:d6:69:92:51:93:36:7c:6f:88:64:22:3e:70:86:2e:91:
         3a:74:94:8e:1f:6a:95:ea:b6:8a:b6:b7:a8:d6:1b:20:15:b5:
         87:fe:c8:8f:d2:7a:44:4e:1d:69:61:3d:5a:e1:ad:04:92:8f:
         50:94:7a:65:15:71:24:f8:c8:60:ad:28:1c:ca:1e:3a:c7:4e:
         28:06:c4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:23:36 2025 by rpki-client