Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
File:                     eINdJYNK4Na8nZKPZGEn-8VL0z0.mft (raw, json)
Hash identifier:          5tLjE7rCvgRtwmP49M0lEzzD5kBuQVCK9NRtO1vDcQg=
Subject key identifier:   E0:C5:62:47:40:83:CB:E8:9F:25:A7:D0:53:4F:35:07:C5:50:2A:1C
Authority key identifier: 78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D
Certificate issuer:       /CN=78835d25834ae0d6bc9d928f646127fbc54bd33d
Certificate serial:       019649A1DA172135AC60AE306B5E3F31D40B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
Manifest number:          14F5
Signing time:             Fri 18 Apr 2025 16:01:05 +0000
Manifest this update:     Fri 18 Apr 2025 16:01:05 +0000
Manifest next update:     Sat 19 Apr 2025 16:01:05 +0000
Files and hashes:         1: eINdJYNK4Na8nZKPZGEn-8VL0z0.crl (hash: apzmXy3de3w2X7NeQnYl0Kw+VblMwS0h67/6TL9wxQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:a1:da:17:21:35:ac:60:ae:30:6b:5e:3f:31:d4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78835d25834ae0d6bc9d928f646127fbc54bd33d
        Validity
            Not Before: Apr 18 16:01:05 2025 GMT
            Not After : Apr 19 16:01:05 2025 GMT
        Subject: CN=e0c562474083cbe89f25a7d0534f3507c5502a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:db:32:e3:29:f3:d1:dd:9b:e3:5c:2a:a2:e4:
                    8a:ef:13:e8:af:8a:9d:35:75:1e:05:c4:b1:9a:d5:
                    c8:3f:1a:58:d7:df:16:46:29:a4:93:26:b5:94:33:
                    d2:f6:f6:c0:4b:dc:9d:e9:2c:55:d1:c0:d9:5d:45:
                    d6:21:66:0f:62:00:95:64:2f:cb:2c:3d:ea:24:80:
                    66:5d:0d:cc:5a:e9:f9:f4:56:c2:eb:6a:80:6b:35:
                    8b:4e:3a:65:7c:9a:cc:82:52:c1:8d:02:aa:ca:09:
                    47:5f:58:c1:9c:67:d9:11:af:c2:86:71:82:a1:0d:
                    51:36:23:33:92:f1:87:4a:66:f8:ca:57:0e:86:a4:
                    07:4f:bc:2b:f5:27:75:7a:2e:5c:9a:7e:99:72:8d:
                    04:34:40:de:73:0c:61:d0:2d:9a:3a:89:d7:a6:fc:
                    2d:0f:c6:37:a9:e2:7b:dd:12:54:e8:f4:ac:40:66:
                    1c:11:6c:2f:02:0f:40:e5:68:02:fc:1f:d0:ba:3a:
                    2d:04:2d:d9:9c:51:d0:36:23:99:cd:84:6f:9b:b6:
                    f7:e7:4f:d7:85:b9:a8:e8:bf:e1:a0:d3:cc:63:25:
                    ad:37:ef:2e:6f:b9:1e:a2:e0:22:83:5f:ed:f0:65:
                    a3:f6:1e:8c:63:46:be:db:ab:55:e6:7b:e8:34:2d:
                    cb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C5:62:47:40:83:CB:E8:9F:25:A7:D0:53:4F:35:07:C5:50:2A:1C
            X509v3 Authority Key Identifier:
                keyid:78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:b4:1a:1f:56:c0:30:8a:81:cf:f5:07:bc:28:9e:e8:90:
         b5:ca:00:b2:ad:31:37:46:59:92:0d:c9:66:21:05:76:33:41:
         10:61:cb:12:1e:c6:de:a0:bf:a0:95:cb:07:c0:4f:60:44:74:
         b4:c0:e1:8c:5f:95:02:8a:be:ef:1a:44:a8:35:f7:38:1f:28:
         af:b8:0e:f8:10:f4:98:c9:94:68:68:b6:82:25:bc:74:fb:a5:
         c7:81:e3:84:2d:98:c6:94:15:6e:80:fb:f4:fd:b2:06:ac:42:
         ef:2a:cf:5e:bd:e3:8f:79:e0:71:5e:18:e9:e3:bb:cf:9f:16:
         d4:07:8e:92:70:8c:81:a1:3e:cf:63:28:84:0b:30:83:0a:7e:
         d6:6c:26:2b:bf:df:10:2d:4e:97:c2:4e:d5:7f:68:ba:62:28:
         d4:83:15:73:bf:14:93:dc:ba:75:e2:d5:30:56:2c:cd:89:53:
         66:81:53:36:b2:c9:70:39:e0:57:7c:c6:c9:ed:f4:96:22:b5:
         99:ea:85:fc:49:e6:fa:e4:87:25:49:ec:53:bf:59:30:f2:61:
         92:34:59:9f:cb:34:a4:95:cf:4b:43:a7:86:c2:ee:5a:23:cd:
         f4:3c:48:2d:8a:f0:3d:a7:19:f8:a6:86:75:2e:1c:85:a5:e9:
         93:80:72:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:20:18 2025 by rpki-client