Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
File:                     aTHX56mXSaOF6usn-FCridqPLuA.mft (raw, json)
Hash identifier:          OS6PN/63mmuRGIJ2kLE4tcvitJ/qfEdFDS/ovuSl1JE=
Subject key identifier:   FB:08:10:E4:B8:18:35:33:B0:77:22:B4:D3:DC:C6:B2:E7:C9:E5:CA
Authority key identifier: 69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0
Certificate issuer:       /CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
Certificate serial:       019651C92B98342CBD0587B3ED166785747B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
Manifest number:          0439
Signing time:             Sun 20 Apr 2025 06:01:00 +0000
Manifest this update:     Sun 20 Apr 2025 06:01:00 +0000
Manifest next update:     Mon 21 Apr 2025 06:01:00 +0000
Files and hashes:         1: NluQuRsgOiFaIXTWt3y3rez6Bh4.roa (hash: JKkT06F430W2THw9Cv6TXAFRcJ7i7LHFoCLoKhmOqSc=)
                          2: aTHX56mXSaOF6usn-FCridqPLuA.crl (hash: bhWxu9r76pVQqmoCgBqelI8DUuOY1/BkjVyAltYiKpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:c9:2b:98:34:2c:bd:05:87:b3:ed:16:67:85:74:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0
        Validity
            Not Before: Apr 20 06:01:00 2025 GMT
            Not After : Apr 21 06:01:00 2025 GMT
        Subject: CN=fb0810e4b8183533b07722b4d3dcc6b2e7c9e5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:77:f4:63:e0:08:ff:dc:38:8f:81:c5:59:d7:
                    67:17:d3:c5:dd:d0:4f:9a:ae:90:9d:a7:ab:e0:e8:
                    45:5e:01:be:1c:31:4c:b0:39:8d:ed:d8:4e:d8:49:
                    95:1d:ea:e3:b4:90:6c:ba:26:19:38:c2:44:8a:14:
                    c8:00:fa:f6:e2:bc:57:06:47:4f:b3:2c:46:d1:b0:
                    ad:a2:0f:02:50:6b:75:d1:c4:5a:00:cb:02:fb:d1:
                    3c:a6:c3:68:cf:4f:e6:c7:12:9d:b8:12:f1:9f:25:
                    54:f9:1c:6b:80:da:6b:27:49:70:14:8a:ff:ee:6d:
                    ca:0a:09:e8:46:b7:43:e4:ae:0d:50:e1:28:ec:07:
                    0d:3d:9a:a0:8b:c7:73:91:e3:b8:78:9c:b1:cd:32:
                    b8:33:2f:23:e6:3d:57:70:8e:2f:f3:1f:01:c4:9b:
                    c9:b0:9a:a0:79:ae:80:4d:1c:57:b8:86:97:5d:a1:
                    5a:bb:55:cc:6f:2d:6c:09:24:ae:d8:14:2b:76:5d:
                    6c:f2:b4:1c:e8:ba:97:fb:75:1f:b1:57:ea:5f:e8:
                    93:94:e8:1c:2b:46:8d:72:20:07:18:40:67:8b:79:
                    39:e7:71:b9:d7:9f:44:9d:38:54:91:ec:4f:51:91:
                    ae:fc:be:12:82:43:36:3e:5c:a3:8b:8c:6a:41:8f:
                    7c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:08:10:E4:B8:18:35:33:B0:77:22:B4:D3:DC:C6:B2:E7:C9:E5:CA
            X509v3 Authority Key Identifier:
                keyid:69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2d:b0:42:a9:43:48:ad:da:cb:18:1a:40:79:99:dd:41:4b:
         1c:c3:c6:98:a8:8e:20:d3:dc:c8:1b:ef:eb:de:23:5e:06:61:
         c3:a8:f3:f7:8a:9e:3f:63:2a:1e:68:bc:dc:26:bb:ee:bf:51:
         91:b0:61:31:21:d1:3e:4b:bd:2c:bd:df:47:36:0e:5b:a0:13:
         29:67:7a:f6:e4:29:8e:d4:1b:dd:09:11:92:1e:ac:d4:d4:81:
         fb:8d:6c:65:35:2e:58:a7:4d:4f:5a:25:6d:35:d4:15:f2:4a:
         49:65:a5:9a:27:c8:5e:60:0d:f3:0c:d6:a7:65:c4:2b:19:7b:
         63:f4:aa:a9:ea:9f:d2:89:60:8a:27:ef:b6:16:13:de:55:ec:
         ae:75:ce:41:6c:1e:7f:08:6e:66:8c:dd:ec:c7:df:d1:ac:9d:
         c4:7e:b5:7a:5c:75:88:82:10:f0:f8:83:d6:b2:c2:7d:29:10:
         5d:82:ba:8b:54:da:54:e0:37:93:81:b6:12:9b:ed:1c:1d:8d:
         a2:3d:67:26:05:69:ef:0c:47:17:44:af:4d:2f:97:da:58:5d:
         41:bd:c0:53:29:17:61:ec:69:de:36:e6:ef:be:8f:c3:65:6d:
         15:f0:2e:fd:9f:8f:b4:c3:f1:2f:28:15:cc:95:26:80:ea:43:
         23:6d:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:50:48 2025 by rpki-client