Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
File:                     Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json)
Hash identifier:          DmTelX1WB1mW2riDUCsHqDy1ErEDzrdFJVoDKHL6lzM=
Subject key identifier:   4B:81:8E:72:53:8A:58:E4:72:51:40:1F:CB:E7:D3:6E:BD:28:82:05
Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Certificate issuer:       /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Certificate serial:       0196526D51010CA4221CEEFB9028ABF5027B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
Manifest number:          021D
Signing time:             Sun 20 Apr 2025 09:00:17 +0000
Manifest this update:     Sun 20 Apr 2025 09:00:17 +0000
Manifest next update:     Mon 21 Apr 2025 09:00:17 +0000
Files and hashes:         1: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: O5PK5qXKzkayEDHEX5au5wTejy2Ni5nguEZOLbb6+2g=)
                          2: QXxZoEDTfmfi2igFXO5o23qZxBE.roa (hash: rgCm3B0IpeTPYIjtwWWmsRXdZPZn8nOJAF/gu4jmo9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:6d:51:01:0c:a4:22:1c:ee:fb:90:28:ab:f5:02:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
        Validity
            Not Before: Apr 20 09:00:17 2025 GMT
            Not After : Apr 21 09:00:17 2025 GMT
        Subject: CN=4b818e72538a58e47251401fcbe7d36ebd288205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:ee:f5:70:43:25:89:e5:55:d6:ce:44:17:
                    08:21:22:70:da:60:8b:17:dc:8e:7c:f9:06:a9:d1:
                    3c:7a:c2:7c:8e:ee:28:63:7e:1a:1b:16:10:8d:2e:
                    4d:74:94:b7:83:20:be:0a:f6:9d:70:a7:7f:dd:d0:
                    bb:12:bf:4d:9c:8c:39:d0:3f:33:51:f1:c2:6a:20:
                    b3:6c:f8:bd:08:7f:00:41:6b:04:7b:21:34:d2:ae:
                    54:ca:fb:8b:4f:c2:ed:56:27:75:fa:85:73:c9:47:
                    08:e8:40:a3:ec:87:a7:16:60:3e:69:73:fd:c9:8d:
                    6d:c7:53:bc:d8:93:ed:f0:92:7e:9a:fe:c0:dd:75:
                    90:5d:93:1f:01:e2:96:f0:93:a2:16:fb:72:44:19:
                    f0:64:26:ab:27:b8:84:72:db:86:61:38:a4:a7:b2:
                    f1:f9:fb:04:0c:e4:63:93:3a:b0:d8:8d:a3:29:f4:
                    cf:f5:3a:b0:b7:62:2d:04:84:91:9c:51:45:f0:1f:
                    7e:14:a7:49:3c:9e:3c:00:0d:8d:a8:fd:be:c5:4e:
                    11:21:c1:bc:20:cf:34:85:13:6b:cd:1a:a3:9a:77:
                    18:a3:f9:6d:4a:59:6a:df:df:08:3c:f4:81:ea:5e:
                    a6:ff:79:75:0c:9a:f4:69:2a:61:ec:18:d6:66:88:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:81:8E:72:53:8A:58:E4:72:51:40:1F:CB:E7:D3:6E:BD:28:82:05
            X509v3 Authority Key Identifier:
                keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b6:77:df:4e:36:1a:88:b1:f0:8e:09:31:0d:87:52:db:eb:
         c8:68:33:62:90:58:2a:24:39:9a:4d:16:5c:26:02:2a:8c:64:
         65:0f:c4:67:2b:53:24:06:dd:98:19:a6:9a:4d:6c:ec:64:3a:
         c2:c7:ff:d3:fe:70:43:5d:9e:f4:92:00:38:45:0a:24:e6:98:
         dd:cd:93:09:64:af:a6:8a:c8:d3:8e:65:75:d5:93:d0:49:67:
         16:f2:9d:8c:e2:27:b5:3e:aa:67:c0:fe:55:0e:f4:62:a6:d1:
         af:62:bd:74:e0:d5:6a:ab:e7:50:37:5a:7d:4d:c2:15:b6:ae:
         39:02:90:d0:c1:9b:f9:cc:48:04:d0:25:e7:aa:80:41:f5:8f:
         3a:ff:e1:07:92:68:f7:b9:0d:cd:be:d0:a6:5e:0f:19:c9:72:
         e5:ef:8e:43:9e:ed:35:54:74:f8:b5:81:bc:02:b6:83:c2:57:
         f8:e9:4d:bb:f3:04:a1:6a:3e:16:c1:11:af:6d:9b:ce:d4:be:
         2b:38:e0:3a:63:22:4d:41:4a:c6:26:2a:a6:3a:88:86:f6:aa:
         88:86:a7:78:e4:d0:b3:40:91:32:40:34:2b:e6:bc:cd:0e:55:
         4b:b9:6a:fb:1c:98:f0:5c:20:1a:20:73:0c:12:23:e2:e0:02:
         46:8e:fe:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:58:56 2025 by rpki-client