Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
File:                     oMWM0HH3gLesNAwBROsE-1DMu_E.mft (raw, json)
Hash identifier:          WOZEk3aSfQ9huOXWB8owyZpwablyjyxMmL+06Rt5Ykw=
Subject key identifier:   46:A8:B1:54:79:09:C6:B5:FB:07:37:58:92:60:E2:E5:3A:58:22:64
Authority key identifier: A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
Certificate issuer:       /CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Certificate serial:       01974F334C51DCA5B95EB8852A5A3BEC39A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
Manifest number:          1570
Signing time:             Sun 08 Jun 2025 11:00:51 +0000
Manifest this update:     Sun 08 Jun 2025 11:00:51 +0000
Manifest next update:     Mon 09 Jun 2025 11:00:51 +0000
Files and hashes:         1: oMWM0HH3gLesNAwBROsE-1DMu_E.crl (hash: HA9HAou5wP7ZS+cW0ELElIYEpK5gJMPsbaHaeGYcz3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:33:4c:51:dc:a5:b9:5e:b8:85:2a:5a:3b:ec:39:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
        Validity
            Not Before: Jun  8 11:00:51 2025 GMT
            Not After : Jun  9 11:00:51 2025 GMT
        Subject: CN=46a8b1547909c6b5fb0737589260e2e53a582264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:3e:5d:ff:2d:42:72:85:46:fb:5a:4b:70:
                    2c:e1:b8:2e:d9:5d:f4:5d:a5:36:01:13:28:f7:18:
                    34:18:a5:ff:c1:41:06:e2:96:fe:0f:47:03:f5:06:
                    62:a2:b6:ac:3e:5e:df:51:6a:24:5a:85:a1:82:c4:
                    e5:bd:70:b3:fa:31:ed:c5:00:e4:2d:13:64:45:af:
                    b3:c3:42:a2:ed:56:9b:ef:b3:fa:1d:6b:c3:43:5b:
                    75:21:0e:27:91:23:9d:20:d9:9b:a3:dd:c4:c9:82:
                    37:8c:ee:fa:45:bd:1a:42:29:ca:c7:eb:5d:f1:a2:
                    bc:8b:97:f1:09:f9:02:5e:59:aa:28:4b:da:f9:5a:
                    8c:6d:25:4d:b0:c1:4b:97:7c:1d:0b:86:d7:4a:54:
                    b7:6c:70:df:94:cf:b0:13:ec:6a:ba:3c:32:30:a5:
                    b4:42:e5:ee:76:e8:a9:59:df:29:2a:69:ed:23:8c:
                    5a:d3:6e:cc:41:00:3b:b2:31:21:e4:96:63:be:f3:
                    2e:47:70:37:37:bf:af:95:96:fb:c4:27:29:36:84:
                    2a:36:a9:e9:40:29:0a:3e:b1:2a:b2:a3:3d:70:37:
                    2e:a6:e4:cb:92:eb:07:12:e8:83:b6:c3:c4:3a:bd:
                    f0:5e:7d:f3:4f:fb:e3:aa:53:69:31:27:3b:0f:92:
                    c4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A8:B1:54:79:09:C6:B5:FB:07:37:58:92:60:E2:E5:3A:58:22:64
            X509v3 Authority Key Identifier:
                keyid:A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b4:3e:f4:41:1a:97:ab:66:e9:45:75:84:fd:0d:e8:73:58:
         6e:65:1a:fc:20:74:56:e1:9e:0d:77:bd:70:0e:9c:50:fb:d5:
         6d:bf:44:61:17:07:eb:df:94:8a:93:34:3c:9b:14:88:48:a0:
         ed:33:4b:d9:be:0a:eb:d1:a6:7c:cb:41:88:ba:0e:73:78:81:
         26:89:42:61:1b:46:5c:5a:0a:97:2c:a2:b3:4f:ce:82:e8:af:
         25:c8:c0:c4:c0:41:76:7c:51:fb:86:bc:97:8c:d6:e3:59:da:
         ea:47:38:1a:42:8f:9f:d2:2e:68:19:b7:05:e0:6f:c1:48:3f:
         64:10:aa:18:84:fd:c2:a1:b7:fb:ca:1f:c2:ab:c8:09:d3:56:
         dc:87:16:66:71:5a:1a:0b:3a:61:1d:eb:f0:10:8a:67:f1:d2:
         5a:42:96:a0:b3:aa:01:5d:35:a4:92:f1:db:73:f3:b7:13:e7:
         94:21:b9:21:3a:6a:3d:81:ed:51:77:d8:87:63:f2:8b:84:88:
         29:26:24:3d:24:bf:cb:97:01:b2:40:46:2b:99:86:08:87:bf:
         a6:29:30:33:13:0e:a6:12:82:dd:c9:16:b5:e8:b5:fa:57:98:
         70:0d:4f:de:d6:c8:68:03:7c:91:e8:3b:06:53:17:94:49:25:
         54:f5:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:40:50 2025 by rpki-client