Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
File:                     4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json)
Hash identifier:          CZxOaFYdzX9L0K0bqIvFkh/8xG5czMje5Ke1IDvwQo0=
Subject key identifier:   D0:E6:D8:C5:3D:37:E7:6D:24:A7:F1:9E:47:7F:52:43:B7:6F:14:00
Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
Certificate issuer:       /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Certificate serial:       01964A0FB74CBA480C2E9733EDF6BBBB497F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
Manifest number:          148A
Signing time:             Fri 18 Apr 2025 18:01:06 +0000
Manifest this update:     Fri 18 Apr 2025 18:01:06 +0000
Manifest next update:     Sat 19 Apr 2025 18:01:06 +0000
Files and hashes:         1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: XWbfDTNYpxSiPzznmFiPhCev9P+LV3U0eiw7gR3GJko=)
                          2: 8eT8mItdm-eFNRvcC95AKoGdkEY.roa (hash: V3x7HEHI2C6TpwyRaJQsDy3CR99xipPFrG4gu0IK5ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:0f:b7:4c:ba:48:0c:2e:97:33:ed:f6:bb:bb:49:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
        Validity
            Not Before: Apr 18 18:01:06 2025 GMT
            Not After : Apr 19 18:01:06 2025 GMT
        Subject: CN=d0e6d8c53d37e76d24a7f19e477f5243b76f1400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:4e:be:9f:77:f3:67:c1:72:0f:ee:bf:ce:
                    d4:ff:af:ef:02:c9:3c:f6:73:a0:c0:32:c0:2b:58:
                    fb:8b:63:37:80:5e:43:45:8d:bb:67:67:dd:fb:d0:
                    86:fc:2f:67:61:e6:66:82:50:bb:ba:1f:52:85:0b:
                    03:27:84:6c:14:3c:16:a2:3a:98:e6:17:1d:50:78:
                    36:e4:a9:8a:33:22:1c:41:8a:31:59:bd:d3:30:73:
                    4a:3f:16:e0:d7:8a:2d:bd:c6:bd:f2:2c:b8:cf:9e:
                    21:70:95:e4:42:b3:af:88:bf:04:e3:6c:a3:ea:7f:
                    98:aa:85:9b:73:8b:19:43:97:86:52:41:bb:af:25:
                    76:3d:0e:04:7d:5c:5f:95:f9:f8:58:e7:d9:c2:98:
                    e9:ce:90:1d:9e:d8:41:a0:87:46:2d:53:d2:14:21:
                    8c:bc:bb:a1:b7:97:dc:34:81:92:1c:24:80:f6:f9:
                    9d:8c:bd:4f:33:98:79:e2:b4:ba:ca:f0:5c:dc:cb:
                    77:87:7d:46:af:91:ee:25:1f:2a:ac:42:56:6c:db:
                    af:4f:84:27:ee:16:52:34:34:b9:8b:42:b7:84:65:
                    6d:25:d6:60:2e:d9:7f:6b:48:d9:27:a4:2e:09:57:
                    f5:bd:84:22:04:8f:0d:af:4b:f4:ce:ee:24:e5:cd:
                    cd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E6:D8:C5:3D:37:E7:6D:24:A7:F1:9E:47:7F:52:43:B7:6F:14:00
            X509v3 Authority Key Identifier:
                keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:94:f1:e4:c0:2e:43:36:c6:ac:03:1c:6b:d7:e0:76:20:db:
         b0:a6:4f:61:25:a7:3f:71:2d:ea:f6:17:cf:82:55:56:cd:f0:
         58:d8:9d:e8:b5:41:6e:ad:7f:19:d6:08:c0:83:ee:f8:72:83:
         3a:18:28:ba:a6:60:86:cd:84:c7:bc:31:e3:7a:2a:b7:90:ca:
         56:40:56:32:ec:c4:15:43:bd:c7:7c:58:c9:fa:54:f2:ab:53:
         dc:0e:f9:a3:09:09:3c:5b:53:99:3c:a3:61:8f:20:24:e9:df:
         46:7a:89:5c:f6:f6:8c:5e:fb:84:72:d9:26:15:90:f9:5f:ef:
         b3:6c:2a:72:f5:5e:28:3e:d2:05:5b:04:e3:db:f1:bc:fb:bd:
         b0:02:21:ab:00:6a:63:4a:75:61:cb:67:b7:f4:27:04:ce:1f:
         4d:e7:9e:27:ec:84:ff:b9:e5:a8:12:58:2f:89:06:66:d6:d9:
         7a:5d:92:90:d8:38:b8:85:43:df:6f:32:26:71:76:fa:ce:fb:
         80:c5:b3:3c:1c:cc:5c:1c:77:18:96:ee:5f:e5:9f:a6:68:74:
         ed:1b:32:b8:77:4b:b9:60:0a:fc:b7:b3:d0:60:be:63:e0:60:
         d7:b9:b2:bc:72:b7:97:3c:68:1b:3b:1b:b3:9b:1e:57:a8:28:
         24:ac:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:19 2025 by rpki-client