Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
File:                     MfxYQJK_niCslRtZUN1PpxMgPMM.mft (raw, json)
Hash identifier:          pDKKOLb4YWUs7cdshDs7z/FdLxyyYGgKhrPHXoqSKt8=
Subject key identifier:   48:22:2B:2A:A8:46:C6:E4:74:E4:A6:92:81:DE:3A:D8:03:7B:7D:91
Authority key identifier: 31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3
Certificate issuer:       /CN=31fc584092bf9e20ac951b5950dd4fa713203cc3
Certificate serial:       0194C38855BBC17A65A36EA875E71826E543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
Manifest number:          0E4C
Signing time:             Sat 01 Feb 2025 22:01:19 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:19 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:19 +0000
Files and hashes:         1: MfxYQJK_niCslRtZUN1PpxMgPMM.crl (hash: Lahz+VAKmZqOaRE3S+18XA9EGMBcUpTl7SFCeQJe/jI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:55:bb:c1:7a:65:a3:6e:a8:75:e7:18:26:e5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31fc584092bf9e20ac951b5950dd4fa713203cc3
        Validity
            Not Before: Feb  1 22:01:19 2025 GMT
            Not After : Feb  2 22:01:19 2025 GMT
        Subject: CN=48222b2aa846c6e474e4a69281de3ad8037b7d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f0:64:0b:49:80:10:8c:fe:14:ba:d7:d9:31:
                    e7:02:c3:a1:5f:90:b3:5c:e4:b5:19:a2:07:e6:39:
                    4c:85:db:a2:67:5f:15:51:81:b5:20:87:8c:5e:1c:
                    57:70:09:b6:3b:ac:22:e8:c8:bf:b6:7a:64:1b:ca:
                    ce:76:d8:64:45:00:d7:26:f7:f1:e5:69:5e:ed:a0:
                    90:d9:c2:74:d9:29:4e:60:ce:df:4c:bc:48:55:b1:
                    66:1d:2b:68:2f:b4:7e:39:29:41:03:75:49:2b:56:
                    5a:a4:6c:fe:77:d6:53:08:5a:fb:04:74:bb:d6:ad:
                    95:cc:14:2a:11:3a:64:90:29:0a:28:d0:f2:61:18:
                    22:6c:ce:e5:b7:99:17:fa:b8:a4:bc:da:19:8c:02:
                    65:98:08:37:75:ba:20:a2:85:35:83:64:1a:e1:9f:
                    f9:29:66:12:c2:19:3f:07:04:60:26:fc:4f:83:dc:
                    96:46:45:f6:36:42:41:0b:96:e3:a7:4b:29:e0:b5:
                    b3:c1:27:84:2a:20:1a:af:d9:8b:55:68:88:8c:85:
                    6b:85:db:d6:96:c3:21:91:06:32:51:04:bc:2c:a3:
                    d8:9f:77:8f:fa:28:bc:5e:af:ed:d8:28:25:d3:81:
                    51:01:2e:c0:fe:e4:b6:bc:a6:82:92:c5:c1:6e:02:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:22:2B:2A:A8:46:C6:E4:74:E4:A6:92:81:DE:3A:D8:03:7B:7D:91
            X509v3 Authority Key Identifier:
                keyid:31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e3:15:4b:24:10:92:cc:bd:40:1c:11:95:2b:bf:a0:b4:04:
         d9:7b:43:e8:1a:b8:1d:30:62:9c:18:09:78:14:90:0f:9e:97:
         98:e2:63:95:97:f6:23:12:5d:ba:3e:52:db:00:f4:3d:36:59:
         53:70:1c:66:6d:1f:be:08:82:5f:aa:56:bc:8d:07:50:f3:35:
         83:81:67:3a:ec:eb:95:38:4b:32:1f:cf:28:12:01:6f:f9:a4:
         6e:18:3e:f1:82:d2:e1:c5:0e:5e:3f:ee:ed:12:7b:0d:69:27:
         32:5e:09:d5:98:9a:dc:a1:6e:4b:ac:30:05:a6:3d:20:a4:fa:
         57:36:91:26:23:dc:63:6b:8e:56:3f:ee:e2:d8:fc:e3:99:71:
         53:f6:7d:3a:2c:e9:bc:78:21:79:bd:86:fd:ba:d0:da:b8:a7:
         5c:30:07:eb:1d:e4:dc:a8:be:86:0f:2d:7b:67:3e:5b:7b:fe:
         f9:f1:f9:7b:a9:1c:9d:91:df:25:34:5c:78:a8:b7:1e:1d:9d:
         26:4f:42:20:ec:2b:fc:3b:73:84:7e:26:61:28:a6:35:7d:09:
         d3:c0:01:53:b9:c6:51:0b:db:27:5d:33:0b:b4:2b:09:59:44:
         46:69:f1:66:75:d4:7f:d4:37:b2:fd:37:5b:7d:25:2f:f7:dd:
         00:81:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:25 2025 by rpki-client