Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
File:                     VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft (raw, json)
Hash identifier:          7OWy7gSQjO/eoWCyJ+PIx+poX9KqNXG0nwynmQ/ktMg=
Subject key identifier:   BA:0C:1D:42:A2:B5:B8:BB:F3:2A:97:E5:6E:BF:72:C8:CB:0A:DA:C0
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Certificate issuer:       /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial:       019656EEE38268F934F798F5C0E7569F3E37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
Manifest number:          0D10
Signing time:             Mon 21 Apr 2025 06:00:18 +0000
Manifest this update:     Mon 21 Apr 2025 06:00:18 +0000
Manifest next update:     Tue 22 Apr 2025 06:00:18 +0000
Files and hashes:         1: VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl (hash: rwDGDLjkkkIKbB+Is8nNdO4/pAM/xgbV7HhWHznygbU=)
                          2: cJ5glVz4GHRzOf6IyvRRck-9UEU.roa (hash: 58bsNe/joAKOWYDPmFBrEXcY+rLRfxv60aTTZ4/yvVI=)
                          3: gDx_EkaHuEb4LxSm5qDhRH-UdZM.roa (hash: XHmtxgaP2vmqWx5qZWaBQh+bglRBX5m7TvdpxAwnTCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:ee:e3:82:68:f9:34:f7:98:f5:c0:e7:56:9f:3e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
        Validity
            Not Before: Apr 21 06:00:18 2025 GMT
            Not After : Apr 22 06:00:18 2025 GMT
        Subject: CN=ba0c1d42a2b5b8bbf32a97e56ebf72c8cb0adac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:59:1e:ad:bb:33:67:2e:0f:d7:54:a3:2d:
                    9d:d3:a8:72:2d:e7:b8:f7:c1:88:7a:72:e9:22:7c:
                    7f:4e:29:a0:bb:64:e2:98:1c:99:7b:74:c2:bf:cf:
                    31:bb:d7:f0:87:0c:5a:10:85:30:a6:82:dc:ee:02:
                    b8:0c:49:54:96:7c:dd:9e:00:95:55:5b:e7:2d:a8:
                    42:f5:75:31:3f:82:9f:01:dd:2f:ad:0e:17:c0:14:
                    4b:de:93:45:af:ea:a4:a5:80:58:52:d0:5a:c1:07:
                    fd:a2:d5:3c:a7:e7:22:f0:e2:11:e9:67:d1:bb:e4:
                    80:02:c5:8e:e7:9b:ec:b0:44:61:09:a8:d3:8a:16:
                    51:fe:eb:e0:88:e2:1c:92:e6:18:a9:3d:45:61:ea:
                    59:de:89:cf:61:37:cd:4b:e9:3c:7f:78:ca:aa:a7:
                    e2:4d:17:e9:f6:d0:38:10:9d:c3:56:c4:99:37:7f:
                    65:e1:66:9b:41:3c:03:48:76:c4:0a:ee:a2:53:29:
                    14:45:f2:58:89:76:16:0c:94:72:1e:58:1e:31:41:
                    12:7a:72:bf:6a:2b:e1:26:db:d6:ab:c5:82:cd:1a:
                    ca:ef:3a:35:61:67:fb:a2:9f:9c:e8:f9:ff:b7:20:
                    ed:55:59:2f:e2:93:f8:22:0e:30:53:0c:bd:0e:9a:
                    44:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0C:1D:42:A2:B5:B8:BB:F3:2A:97:E5:6E:BF:72:C8:CB:0A:DA:C0
            X509v3 Authority Key Identifier:
                keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:eb:02:56:72:ce:8e:55:d0:96:6b:57:ea:df:0b:19:4f:8f:
         8b:54:14:52:b5:74:c3:55:87:c5:7c:e7:4b:02:85:99:09:02:
         43:94:01:88:8f:75:9a:df:9e:4d:c8:7e:32:43:15:e6:f1:20:
         26:65:ff:93:02:17:55:9f:0a:6d:8f:48:16:e6:ce:9c:2b:5a:
         94:bf:9f:b5:c2:09:e1:8b:ab:82:d6:5d:d9:db:2f:ad:5f:a7:
         f3:89:01:b8:bb:d4:52:fe:83:02:7a:a6:1a:7c:9b:c7:3c:75:
         f1:28:74:bf:1b:6e:f1:68:0d:72:ad:9b:15:ac:77:4c:ca:92:
         24:06:c1:b2:1e:a0:f7:9c:5c:61:38:85:12:a1:c7:29:39:54:
         4d:5c:61:05:b0:3a:b3:16:43:b1:fc:b9:6f:29:0f:04:16:7b:
         fa:6c:cb:4d:44:78:d5:b3:ec:9c:9b:2b:5e:a1:42:f0:1f:ab:
         ff:dc:66:c3:79:92:58:7a:cd:da:33:2a:d3:18:e8:6d:1e:f7:
         e2:50:4f:8f:61:70:fa:9a:7c:09:04:f0:fb:af:36:2b:82:a9:
         8c:1e:f2:d4:01:cd:e5:35:b1:ad:14:5b:e5:d2:f5:fd:65:d1:
         c3:3f:d0:a3:86:b7:5f:e5:ed:49:6b:79:be:14:bc:7f:73:bb:
         24:c0:90:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:42 2025 by rpki-client