Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
File:                     xorAnHI17TE4Ph_ThzkY3RgzNCo.mft (raw, json)
Hash identifier:          +62eVRFRcR7EUth1fbKQh7wY5KNl+2R2Qyzp2JwXLaU=
Subject key identifier:   CA:E1:48:E7:54:74:8A:25:BD:26:EB:70:9B:23:33:FC:3F:6D:36:0E
Authority key identifier: C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
Certificate issuer:       /CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Certificate serial:       019644E922C6457267EEFF7D22F7973116B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
Manifest number:          04C5
Signing time:             Thu 17 Apr 2025 18:00:51 +0000
Manifest this update:     Thu 17 Apr 2025 18:00:51 +0000
Manifest next update:     Fri 18 Apr 2025 18:00:51 +0000
Files and hashes:         1: xorAnHI17TE4Ph_ThzkY3RgzNCo.crl (hash: gJREOlwMLx+PxumVdYAQqeWzC/stTojUh/JmzqshFTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:e9:22:c6:45:72:67:ee:ff:7d:22:f7:97:31:16:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68ac09c7235ed31383e1fd3873918dd1833342a
        Validity
            Not Before: Apr 17 18:00:51 2025 GMT
            Not After : Apr 18 18:00:51 2025 GMT
        Subject: CN=cae148e754748a25bd26eb709b2333fc3f6d360e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:50:42:0e:18:b3:9b:fa:3c:8b:61:01:af:e9:
                    d9:b5:9f:67:3c:05:c1:2d:a0:79:c9:d9:a4:05:97:
                    85:cf:4f:3d:ac:16:36:45:03:ea:d5:9f:0e:98:f3:
                    46:31:0f:3d:2a:ad:fd:54:82:42:37:20:6d:f2:1d:
                    ea:1e:00:6b:af:6a:ba:c8:f5:ce:f2:77:17:ba:46:
                    87:5e:ef:6a:8e:1c:b7:2b:1c:54:40:e7:e9:ef:08:
                    7e:58:bc:e3:7f:80:c0:87:b8:81:d1:87:69:58:72:
                    94:56:15:ad:9a:c8:73:af:b6:39:15:6c:66:ea:57:
                    a5:f5:cb:ea:e3:b2:5a:58:ee:b4:19:02:01:1c:32:
                    fb:ef:b2:b5:10:34:97:a6:4a:71:0a:d1:b2:f9:9e:
                    57:55:b9:f6:29:97:9c:e6:dd:80:72:fd:12:d7:44:
                    29:02:d3:06:af:0c:35:75:89:ea:91:5e:6a:52:b8:
                    f7:97:8f:a2:d7:4f:c6:f0:df:9b:43:d4:e5:fe:8e:
                    d2:b9:5f:e8:8b:e0:3f:c3:cb:78:c4:0f:69:62:02:
                    2a:22:41:83:c7:0f:ff:e5:43:cd:69:17:ef:8b:eb:
                    74:ec:bb:55:1b:c7:ee:d4:77:05:51:93:3b:ae:44:
                    38:ee:e5:f2:13:99:f4:dd:a5:5e:77:12:98:3e:72:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E1:48:E7:54:74:8A:25:BD:26:EB:70:9B:23:33:FC:3F:6D:36:0E
            X509v3 Authority Key Identifier:
                keyid:C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:cd:88:a9:4f:04:d3:66:81:be:71:65:12:72:cf:88:6d:21:
         b1:32:6b:bf:64:6b:80:3f:88:c5:06:a3:2c:21:af:f7:8a:40:
         2e:ab:3a:02:dd:55:d4:bc:1c:45:e8:28:69:50:38:5c:7c:12:
         31:0b:88:42:47:a9:4a:ce:fc:6d:ab:64:de:a7:4c:8e:13:bc:
         6f:e1:d9:e3:6b:7d:cf:13:49:e3:51:c5:0f:e2:be:01:1a:16:
         dc:a3:b8:61:d7:b1:bc:3f:5b:71:c1:59:15:1b:8c:02:86:f5:
         2f:dd:66:5e:e4:1d:68:c1:07:85:26:70:cd:92:15:e1:cf:ab:
         6b:7b:ec:87:c2:f4:ab:09:f9:f1:59:e4:69:9a:a0:5d:f9:50:
         3e:7d:63:c2:22:6b:a3:7a:80:00:9f:cd:9e:23:ac:d1:2b:41:
         7e:08:a8:7a:c8:93:66:6c:a4:6c:c7:88:63:2b:de:06:87:9c:
         3f:24:0f:82:34:98:82:ea:ce:9d:3c:4d:4d:7e:27:5a:0d:42:
         6e:c8:b7:61:35:78:ce:01:52:55:6f:14:53:66:59:18:93:e3:
         6f:19:9b:8c:97:9c:17:ee:b0:d6:a1:6d:79:16:3c:9e:c0:11:
         72:c6:4d:34:d7:b3:43:8f:c3:6e:6f:78:bc:27:bf:d3:93:5e:
         bb:bd:be:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:08 2025 by rpki-client