Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
File:                     7a_cpurOTxKTIjsC7rwngkOGm3s.mft (raw, json)
Hash identifier:          dxZPiFHQ24oN8gTLO2hB3NvwvSqwspm24tXJO2T8D60=
Subject key identifier:   D8:64:E1:AF:61:CC:B4:18:69:DF:DE:3A:FE:E5:2B:FB:87:27:8E:74
Authority key identifier: ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B
Certificate issuer:       /CN=edafdca6eace4f1293223b02eebc278243869b7b
Certificate serial:       01962F072117CB33D7CB7103FE4BCE81944C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: 7a_cpurOTxKTIjsC7rwngkOGm3s.crl (hash: clC0LOq7LiMESTZQFELM5WlM54GMtStiYcihLLzkncA=)
                          2: 9MDvmaTaPs6Me-n4uVcmqKT8FSg.roa (hash: /pTREuez+n3EK0dILbgfWJ7sRgL4yIoJam7Lpsx5YvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Apr 2025 12:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:21:17:cb:33:d7:cb:71:03:fe:4b:ce:81:94:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edafdca6eace4f1293223b02eebc278243869b7b
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=d864e1af61ccb41869dfde3afee52bfb87278e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:04:bc:4c:62:0d:8a:41:29:33:4c:47:ff:18:
                    a5:9a:a7:3a:7b:f1:05:ab:ac:39:ce:3d:15:40:fd:
                    87:79:41:a9:01:17:5e:ca:cc:15:6b:07:bf:3e:41:
                    f7:95:33:0f:a3:84:3d:22:bf:07:4e:df:56:2c:bc:
                    9d:2b:b5:05:73:d6:04:92:20:04:76:a3:a9:5b:90:
                    ec:32:24:a0:cf:37:0e:b6:a7:49:3d:fa:0a:e4:19:
                    e0:0d:97:63:6d:6b:e0:74:3a:56:f0:a5:7e:19:1e:
                    67:b5:24:64:a8:8f:a2:a2:1a:13:f0:1a:27:f6:5e:
                    9f:67:04:7d:58:2b:d1:cc:2c:d2:21:7b:85:42:61:
                    25:31:77:1a:54:72:73:26:1b:cd:1c:7e:4c:e0:cf:
                    36:f4:1a:b5:34:2e:c0:32:3c:db:0e:0f:b6:a0:1f:
                    ff:c0:a5:b9:5c:cb:1b:4a:30:a4:da:3b:a4:63:f0:
                    23:3a:4c:0b:88:e1:eb:cf:d3:35:28:3a:e3:6f:02:
                    c5:1d:b9:e9:f0:f9:0c:06:d9:df:9d:36:43:10:7b:
                    3d:15:76:3c:9b:4d:8a:4e:d8:3d:73:03:a5:83:ef:
                    c8:ed:9b:d0:45:6d:9d:08:a6:8d:21:23:18:f3:be:
                    f8:72:70:26:20:23:17:81:a0:ae:eb:e2:b3:be:9f:
                    0f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:64:E1:AF:61:CC:B4:18:69:DF:DE:3A:FE:E5:2B:FB:87:27:8E:74
            X509v3 Authority Key Identifier:
                keyid:ED:AF:DC:A6:EA:CE:4F:12:93:22:3B:02:EE:BC:27:82:43:86:9B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a_cpurOTxKTIjsC7rwngkOGm3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/7a_cpurOTxKTIjsC7rwngkOGm3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:bc:90:0e:92:62:e2:e1:8f:8b:75:e4:d6:4b:06:c0:8f:91:
         d6:fc:9c:d3:2d:4b:2d:79:07:d2:10:97:05:ba:1e:1f:71:1b:
         0a:9f:b1:9a:13:a9:ec:e0:d1:9d:98:2c:bf:c0:24:7d:b3:fb:
         0d:f0:52:43:ba:e7:69:76:09:9f:ea:f9:95:86:c7:e4:39:9c:
         0c:c6:37:64:25:04:f9:19:92:2d:b5:a1:46:14:87:c9:f7:8a:
         d2:f3:f2:1e:01:d0:82:6d:0f:57:69:0d:36:3b:c1:93:43:9e:
         09:a4:0c:4c:61:58:13:aa:5c:80:70:56:d4:a2:e5:1c:e3:c8:
         e0:e4:65:f3:bb:46:e0:18:45:9d:06:32:92:99:40:cd:a2:f7:
         8e:a0:30:e5:d4:82:ca:ac:d7:7e:6d:85:f6:4e:f5:5f:71:f8:
         ac:9e:9e:d0:3b:c4:3b:76:27:c5:99:02:0a:cf:a8:4d:47:5a:
         1e:ca:f0:98:5d:03:d9:21:1a:55:30:30:7e:6e:a8:6a:93:22:
         71:9d:86:aa:f0:ab:81:09:a5:fc:4a:6d:aa:d2:b7:28:15:d0:
         cd:e0:19:f0:77:78:a8:41:ef:d8:f9:fb:7f:89:d5:fa:2f:ef:
         a2:96:28:1c:fa:a9:c2:94:03:a3:e7:40:b9:90:bc:c5:fc:a3:
         7c:bd:97:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:26:10 2025 by rpki-client