Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File:                     CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier:          ZHQ+DmxKGUIy+1Ldn/3Fg4BMwrmcwEiC7e5q2ZYLpbk=
Subject key identifier:   DA:00:9E:81:5F:C2:CF:BD:E8:92:F1:EC:C1:FC:BF:01:12:6D:42:C0
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer:       /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial:       01958B4DBB04792FA9CA77D7D8A13537DC6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number:          1493
Signing time:             Wed 12 Mar 2025 17:01:21 +0000
Manifest this update:     Wed 12 Mar 2025 17:01:21 +0000
Manifest next update:     Thu 13 Mar 2025 17:01:21 +0000
Files and hashes:         1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: d69yM3cVlTSBP34qR8afq8M2OJZ9JMFh+PhDOhbXtQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:bb:04:79:2f:a9:ca:77:d7:d8:a1:35:37:dc:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
        Validity
            Not Before: Mar 12 17:01:21 2025 GMT
            Not After : Mar 13 17:01:21 2025 GMT
        Subject: CN=da009e815fc2cfbde892f1ecc1fcbf01126d42c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:64:ed:77:74:0d:d7:19:18:94:eb:0b:a7:
                    d2:e1:1e:57:34:45:7c:b0:4e:cc:52:2e:7c:78:b5:
                    ef:28:ad:0d:92:8c:e2:ec:95:70:08:16:71:6a:2f:
                    8f:29:be:7d:41:a7:05:70:3b:5e:1e:2c:d5:d6:1d:
                    53:2f:50:62:04:df:fe:4d:35:50:9d:aa:84:12:86:
                    07:b5:c9:5f:1b:4b:87:2c:10:9e:12:3a:ad:60:24:
                    51:6f:e5:e5:89:4f:86:e4:e7:fc:22:02:0c:c0:f8:
                    19:bf:24:dd:ea:d7:30:9f:45:f2:cd:be:0a:9e:e2:
                    f1:6d:73:a6:e5:95:bc:88:89:f5:7b:2c:66:9c:4c:
                    0b:83:df:2b:7e:e3:c4:55:4c:b5:fd:16:ed:cb:77:
                    96:e7:de:f6:e7:58:7a:ca:51:21:b5:e9:2a:1c:b4:
                    ef:13:30:4e:2a:4e:5f:16:2c:bb:bb:a3:db:f3:8e:
                    83:4e:51:04:82:46:6c:47:14:ed:84:5e:70:7a:89:
                    17:4a:c9:37:7c:02:f3:7a:c3:03:87:5c:c0:a3:eb:
                    39:95:c7:88:0f:7a:69:54:0b:a6:15:19:9d:79:bc:
                    84:38:04:52:8f:56:de:5e:63:71:38:f0:a0:8e:ec:
                    ed:99:b7:26:dd:31:f9:b2:40:d6:bc:e3:7a:b1:7e:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:00:9E:81:5F:C2:CF:BD:E8:92:F1:EC:C1:FC:BF:01:12:6D:42:C0
            X509v3 Authority Key Identifier:
                keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:79:f7:05:08:3e:79:7c:88:64:9b:ee:81:52:6a:92:a5:57:
         bc:6f:2c:78:8e:6f:98:26:50:45:c7:7f:73:dd:3f:ac:58:41:
         19:6b:60:df:c3:19:c2:de:b5:a0:d1:84:eb:a1:32:a2:df:2a:
         c5:b8:26:63:0c:f9:0b:b0:72:04:48:aa:08:8d:5f:f3:c1:42:
         66:a9:06:30:81:8c:d8:d7:9e:ae:7b:5c:f8:8c:46:1d:24:42:
         f2:32:2a:f6:f3:bc:cb:c0:fd:4d:c2:7d:64:ab:02:0a:8d:06:
         c5:22:d1:9f:8b:e7:c0:b3:a6:3d:74:08:65:4c:78:43:4d:72:
         74:2d:b4:30:d6:da:8a:f6:b7:78:69:62:88:70:4a:0a:ea:40:
         58:98:d3:6a:83:c2:58:75:ed:21:a8:cb:ae:77:de:95:64:7f:
         98:4f:ef:10:7e:47:ef:b8:11:bc:b9:11:01:3b:56:ee:ba:e1:
         5d:a1:46:5d:1b:10:09:15:df:c7:52:af:7e:37:70:46:91:8a:
         04:7f:21:93:0f:33:d9:d7:fa:3f:fb:73:7f:72:b6:a7:4e:8a:
         d1:d2:46:85:fc:a5:2e:6b:50:5a:85:7b:8e:7f:19:3f:ea:88:
         da:62:f5:6c:c9:25:4f:5a:24:78:41:70:3e:82:77:7b:0c:bc:
         72:0b:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:13 2025 by rpki-client