Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File:                     CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier:          ubgszgDEnADZAxMCNljiwBC3QHkTsdh/oazLAn642ik=
Subject key identifier:   80:E4:8B:D2:95:CA:CA:1B:E4:93:C0:7A:49:E7:09:04:5C:15:3D:5C
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer:       /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial:       0196029B7EE3820468107050609DB67A546F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number:          14D3
Signing time:             Fri 04 Apr 2025 21:01:06 +0000
Manifest this update:     Fri 04 Apr 2025 21:01:06 +0000
Manifest next update:     Sat 05 Apr 2025 21:01:06 +0000
Files and hashes:         1: 7Jx_d84jw9RCpVbZlGjBj5ncWcE.roa (hash: 5qe+SEXJJD8iF6SfIvYp7Poby6fZfVkFooQVkliL5/M=)
                          2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: YygE/mh9MIcgOLNI0NcTMgB6rYebLL3TzxsA7P/HqrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:02:9b:7e:e3:82:04:68:10:70:50:60:9d:b6:7a:54:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
        Validity
            Not Before: Apr  4 21:01:06 2025 GMT
            Not After : Apr  5 21:01:06 2025 GMT
        Subject: CN=80e48bd295caca1be493c07a49e709045c153d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:d4:f5:24:ff:87:e2:7b:a4:58:46:35:38:
                    e7:44:6f:ae:e1:25:0a:81:96:31:b1:b7:dd:9f:38:
                    9b:b8:64:04:58:13:f2:d0:f3:09:a8:b9:21:89:40:
                    2f:19:50:02:15:92:19:74:e6:86:38:19:96:eb:82:
                    db:da:a0:9d:7a:ea:27:61:a0:07:15:cf:27:26:4d:
                    08:ad:79:38:c6:4f:b5:09:e4:c2:7c:d3:2b:a2:0e:
                    2f:29:64:22:ee:34:2e:d2:31:28:0f:ee:45:61:2b:
                    20:43:c9:02:2d:b6:91:9b:04:67:3e:19:59:4d:8d:
                    1b:1a:c1:a1:44:6c:c6:99:ca:e2:ea:53:f6:73:a5:
                    e7:dc:78:56:71:d9:ad:05:22:69:4b:7e:fc:4e:6b:
                    18:75:34:7b:a4:d5:a3:d1:7e:2f:48:38:7a:1e:82:
                    41:37:44:ea:3f:5d:06:21:32:26:3b:c3:af:fa:90:
                    8d:e2:16:6e:1c:ff:df:16:b6:f7:04:aa:81:20:3a:
                    c7:a8:6c:21:0a:d2:91:15:40:80:2e:f3:a7:be:37:
                    86:1a:70:60:42:4f:d5:8c:c3:07:a2:36:ba:ae:b7:
                    8c:d9:cf:2a:41:0b:ca:5c:5a:a0:f7:0c:63:88:87:
                    6e:1b:b6:08:10:e9:d8:6c:2b:50:c5:d0:49:e2:19:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E4:8B:D2:95:CA:CA:1B:E4:93:C0:7A:49:E7:09:04:5C:15:3D:5C
            X509v3 Authority Key Identifier:
                keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d7:10:27:0e:c6:9f:22:46:1a:9a:72:dd:7f:40:54:fb:c0:
         f9:5a:84:ce:96:c9:bc:c9:69:bc:08:57:0d:5d:9f:fe:c9:0f:
         0f:29:a7:bf:f1:04:26:c4:af:f3:d4:b4:2c:3a:fb:73:37:0b:
         49:fd:5d:d4:90:79:ea:96:e0:42:57:ca:cb:0b:fe:a6:e4:32:
         ee:52:ff:64:ad:4c:e1:af:02:a4:93:68:c0:ca:fe:20:9b:04:
         14:a4:40:4c:33:88:1a:14:7f:b2:43:6f:5d:f7:df:53:61:ee:
         30:05:05:a4:8c:b5:33:2f:62:50:9f:b5:e2:8c:1a:9c:21:8c:
         f1:80:a4:ce:74:11:38:d8:60:c4:1a:dd:69:32:61:42:8f:b5:
         aa:4a:be:78:cf:db:d4:f9:d2:fb:6f:bd:a0:4f:af:df:90:c0:
         c2:e0:2d:05:1a:a6:ef:2b:e6:4d:ed:d7:76:59:e5:cf:cc:8d:
         da:dd:f3:ff:bb:3f:6e:90:5a:2f:d0:0b:73:39:1e:45:ae:80:
         60:5e:05:9a:e2:88:65:b4:04:99:4a:34:27:7f:97:da:43:00:
         ee:e2:df:37:82:2d:f2:6b:d1:d8:42:03:0b:a4:3e:36:52:96:
         6d:63:4d:51:76:f9:16:f9:62:b1:d6:b1:7b:62:9f:d2:f4:b4:
         5e:bf:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:58 2025 by rpki-client