Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
File:                     02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft (raw, json)
Hash identifier:          ZVyEAhikF3ygHCK78OluYjTBtMHDAT8rznL1jIVhCNw=
Subject key identifier:   2C:7A:1B:5E:C3:79:8B:80:B8:D4:EB:EC:63:F4:70:2A:7B:2F:38:23
Authority key identifier: D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
Certificate issuer:       /CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Certificate serial:       019655A62D3774A9EC6D348C2EF24B4D48F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
Manifest number:          05B2
Signing time:             Mon 21 Apr 2025 00:01:15 +0000
Manifest this update:     Mon 21 Apr 2025 00:01:15 +0000
Manifest next update:     Tue 22 Apr 2025 00:01:15 +0000
Files and hashes:         1: 02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl (hash: u8pmAmOlIdPYzOcR4MAXKx3eWLDmloCLdBvdYgVPFec=)
                          2: W26ZqjqHqJjDL39ur5MOByNqIds.roa (hash: 0jU+Z1p1KvFeE69GaV/1hkIxIM6ZLT+t/K51maZsks4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 00:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:a6:2d:37:74:a9:ec:6d:34:8c:2e:f2:4b:4d:48:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
        Validity
            Not Before: Apr 21 00:01:15 2025 GMT
            Not After : Apr 22 00:01:15 2025 GMT
        Subject: CN=2c7a1b5ec3798b80b8d4ebec63f4702a7b2f3823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:42:2a:4e:fe:45:44:8e:92:fb:e1:60:82:1b:
                    7f:89:a9:f9:d2:7b:d0:aa:45:ec:22:04:9c:01:99:
                    56:ab:15:df:d8:6d:f5:17:75:e6:9a:a6:d3:65:8b:
                    f6:d8:c3:20:a6:d9:66:6e:79:bf:c5:be:fb:9a:46:
                    74:7e:5e:4d:88:f5:b3:5c:50:5b:d5:49:a8:80:5a:
                    7c:14:42:81:32:48:99:60:3c:5e:fa:2c:ab:d7:a3:
                    5d:b3:a0:76:89:3c:f3:c8:ed:22:ff:00:3f:ad:2c:
                    69:ca:20:a3:47:15:89:c8:d8:1b:cb:39:5f:b9:53:
                    88:7e:cb:41:70:7a:25:86:f3:44:66:21:5a:94:43:
                    d3:61:29:bd:a0:6c:1a:a0:dd:f5:64:df:02:d8:a9:
                    83:51:32:0a:5a:9e:a7:27:08:27:44:33:47:58:f7:
                    53:d8:11:49:a1:36:c1:f2:c6:e6:bd:a9:57:00:0c:
                    6b:0c:b7:e8:6a:1a:16:e2:a7:bb:8d:fc:1a:a3:ed:
                    ca:5b:57:14:ad:e7:a1:45:08:ff:83:fe:bf:46:09:
                    a6:ad:02:a1:4b:72:af:42:82:59:9b:4f:33:c5:f9:
                    6f:9b:2c:de:ce:34:d1:78:11:6a:d5:9e:a2:21:d5:
                    80:f9:7f:c8:12:84:8a:5b:0c:54:19:36:92:23:0f:
                    c9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7A:1B:5E:C3:79:8B:80:B8:D4:EB:EC:63:F4:70:2A:7B:2F:38:23
            X509v3 Authority Key Identifier:
                keyid:D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b4:37:b9:c8:ef:3e:16:c9:3e:82:da:5b:0e:53:63:6b:95:
         f8:5c:fc:50:86:e7:bd:94:00:f7:6f:c7:70:ce:da:79:7f:0b:
         71:e6:dd:cf:42:14:0f:0d:e3:4c:5d:b1:ff:0d:cb:02:80:b8:
         f3:37:1f:11:71:26:a3:60:c5:a2:7f:5c:2d:96:03:40:3b:59:
         28:61:8d:67:fe:04:68:e6:b8:d0:f6:b9:72:e8:ef:00:62:d0:
         35:ba:3b:80:84:03:47:fd:a7:3d:fc:3c:0f:61:b2:19:e5:b5:
         55:13:d6:65:a4:c6:9b:64:14:f2:1a:4b:de:e0:35:12:76:57:
         d2:0e:7b:86:1e:d9:e6:04:e1:b6:79:ef:53:94:a6:27:39:6a:
         27:e6:13:95:58:f4:55:1a:6d:92:8a:5b:6e:af:a3:ec:d3:0f:
         c6:80:05:e3:bc:23:de:26:fa:0c:4f:5f:6c:09:e9:dc:88:88:
         e2:e1:d4:34:47:38:19:87:26:ce:62:12:37:b7:e5:3f:80:a6:
         61:1e:12:42:24:49:68:54:ae:c0:b8:ac:77:f1:c8:29:ae:99:
         42:3c:c9:2b:a1:23:5a:3a:f9:1d:6f:f5:63:13:37:40:64:67:
         31:9f:1f:b2:e5:bc:24:3e:43:57:1a:0e:3c:83:3b:6e:55:8a:
         55:d8:0e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:49 2025 by rpki-client