Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
File:                     V3GDYWiNFi_4AjwSJ81kTa45ocA.mft (raw, json)
Hash identifier:          U01GVsI9DXmAtRQ+xTYc6wsmFgNa1qtI+lsvrpeivH4=
Subject key identifier:   C2:88:AB:2B:E9:9D:11:20:B6:09:D2:C3:70:25:9B:22:6F:AB:D4:C2
Authority key identifier: 57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0
Certificate issuer:       /CN=57718361688d162ff8023c1227cd644dae39a1c0
Certificate serial:       01964A7D7AC651FCFAD58C105A552F00B613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
Manifest number:          1487
Signing time:             Fri 18 Apr 2025 20:00:59 +0000
Manifest this update:     Fri 18 Apr 2025 20:00:59 +0000
Manifest next update:     Sat 19 Apr 2025 20:00:59 +0000
Files and hashes:         1: V3GDYWiNFi_4AjwSJ81kTa45ocA.crl (hash: 3MXnNCxM+c6aEu4JG+/OgeintJ9uTCtCrQPx3tyjEmM=)
                          2: lgeLoySacO5n6-jqTWkewt--0AI.roa (hash: cHeeK4JCsJJNj8Pz7DQjcNm/axVPSQ0h4TJyF4NqSFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:7d:7a:c6:51:fc:fa:d5:8c:10:5a:55:2f:00:b6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57718361688d162ff8023c1227cd644dae39a1c0
        Validity
            Not Before: Apr 18 20:00:59 2025 GMT
            Not After : Apr 19 20:00:59 2025 GMT
        Subject: CN=c288ab2be99d1120b609d2c370259b226fabd4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:6f:c9:44:66:06:8f:e9:7b:41:0d:33:64:
                    4f:f1:4f:0a:fe:3a:79:9f:9e:b8:89:62:a9:a6:c8:
                    8d:d6:9c:b4:f2:7e:7f:a8:80:34:4f:12:62:e2:40:
                    76:ce:fe:20:9e:05:3f:73:dc:1d:39:f1:ec:32:b2:
                    7a:f4:0d:74:c0:27:a0:6e:83:21:f9:e8:65:8b:95:
                    4d:fc:83:fc:24:a9:cd:dc:e8:c3:db:6d:72:94:c9:
                    06:3a:25:93:d7:99:2a:e5:50:05:7e:83:db:2b:9c:
                    1e:27:a2:a7:0f:61:e5:a5:63:65:b3:e6:5c:18:72:
                    52:d4:a9:7c:fb:b6:35:75:dc:35:16:9b:7a:ec:5c:
                    8c:6b:74:00:49:df:40:21:6a:c2:8f:ac:70:5d:ba:
                    00:81:7f:20:ff:2f:16:40:f5:12:82:e7:97:5f:b1:
                    95:6b:5f:b7:82:1c:2f:c2:ed:a9:6d:53:51:0d:62:
                    d1:de:fe:4c:82:3a:2d:83:30:44:c2:2a:cf:00:8a:
                    a0:ba:86:30:41:fa:1b:59:c2:f5:83:f5:4c:55:9b:
                    a7:b0:3e:44:e8:a9:6d:22:db:56:8e:92:cf:da:14:
                    c8:14:fc:3f:ac:a1:fe:76:0f:93:11:6e:d7:94:68:
                    cd:23:c3:77:23:71:32:ce:8c:43:8c:c7:ba:85:1e:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:88:AB:2B:E9:9D:11:20:B6:09:D2:C3:70:25:9B:22:6F:AB:D4:C2
            X509v3 Authority Key Identifier:
                keyid:57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a3:2b:7e:93:a1:f8:09:22:27:94:cf:6c:0c:6d:88:83:9a:
         de:38:da:04:d1:7a:a7:85:ca:76:4e:87:36:6d:94:0c:2f:80:
         1b:25:12:d1:9b:7d:23:ed:a0:c0:31:d1:1d:f1:5d:8b:e0:4d:
         03:69:ac:18:71:c4:4d:ce:ea:ff:b9:e2:37:42:74:f1:21:40:
         bd:cd:79:10:9c:e5:ab:fe:97:45:e7:3f:e6:2d:43:64:33:ae:
         93:9b:61:41:7d:e7:bb:f2:f4:1a:fd:d9:d8:46:4a:8a:17:f0:
         cd:9e:ce:51:86:a7:08:9b:4c:14:fa:09:af:f9:85:31:bf:f7:
         95:9d:8b:68:43:f7:e7:da:97:b8:52:7d:c8:f7:8d:8f:2b:e3:
         c4:58:c8:aa:7e:20:21:2a:4b:71:97:f2:74:b1:3b:23:3a:a5:
         23:73:1f:13:73:3f:42:f7:07:2c:c9:50:e3:31:59:35:f4:43:
         24:e1:dc:1d:d7:30:05:d0:99:0d:5e:b0:ed:b1:42:df:9a:cc:
         ca:9d:bf:0d:12:71:ca:3a:32:2f:d5:d1:1a:1a:31:08:fd:23:
         2b:02:58:dc:82:6f:e9:16:24:80:93:6a:5d:53:8e:a6:fe:46:
         0d:63:ac:d9:c0:e5:ea:af:b7:f1:af:66:40:39:f2:d6:15:86:
         76:bb:0f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:28:51 2025 by rpki-client