Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
File:                     yRh69xD2KF4TVTBxMoudmUhSxHE.mft (raw, json)
Hash identifier:          IbgEL5K9An1Aao1cbSo/MeZTQKTVNlQPx9UGgQMbOCU=
Subject key identifier:   41:92:A3:AC:5D:69:A8:57:19:28:F6:93:08:15:14:66:88:72:36:EF
Authority key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
Certificate issuer:       /CN=c9187af710f6285e13553071328b9d994852c471
Certificate serial:       01964B905659ACD4640A848A47C7DB3BE165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
Manifest number:          14F4
Signing time:             Sat 19 Apr 2025 01:01:12 +0000
Manifest this update:     Sat 19 Apr 2025 01:01:12 +0000
Manifest next update:     Sun 20 Apr 2025 01:01:12 +0000
Files and hashes:         1: yRh69xD2KF4TVTBxMoudmUhSxHE.crl (hash: +jgJV5ek5992VqlnH8BebDUCiYWvN/uQHrBQUDqVAuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:90:56:59:ac:d4:64:0a:84:8a:47:c7:db:3b:e1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9187af710f6285e13553071328b9d994852c471
        Validity
            Not Before: Apr 19 01:01:12 2025 GMT
            Not After : Apr 20 01:01:12 2025 GMT
        Subject: CN=4192a3ac5d69a8571928f69308151466887236ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e4:04:4b:d4:ff:85:45:95:0c:9f:e3:7a:65:
                    17:d1:2c:59:f8:59:e5:28:6c:fb:a5:be:f1:6f:2a:
                    26:b3:a4:6f:5c:fa:92:42:9e:e8:26:bf:66:ab:7e:
                    88:14:af:b5:39:b2:41:c4:51:c7:b9:d5:f2:03:59:
                    c1:4c:97:29:c9:54:2b:69:57:a3:cd:9e:86:02:c1:
                    70:e6:73:16:f3:06:b3:18:96:78:d5:c0:3b:7d:45:
                    8e:81:d2:75:bc:4a:8d:88:c7:c4:ee:0a:13:ae:b5:
                    9e:6e:99:d7:d1:c1:97:6f:77:b2:51:1a:0e:44:73:
                    3a:fd:1d:ee:c9:95:49:63:d6:2d:47:1b:99:cb:27:
                    84:fb:12:3e:8e:30:94:5a:be:60:ca:4b:7c:46:fe:
                    3c:88:c0:7f:ad:a5:b0:f5:0e:49:10:47:24:d5:42:
                    d0:97:0f:8e:ca:6e:64:33:79:a4:34:7c:0e:48:18:
                    e6:db:62:a7:72:2e:e6:d7:ba:c6:f1:71:41:39:8c:
                    84:db:15:6a:99:2e:74:fa:19:8d:5c:18:fc:63:ff:
                    91:64:0b:ce:de:78:33:9e:05:69:9d:82:37:f2:58:
                    16:e3:d6:d1:af:86:38:c2:cb:91:1c:56:02:57:c1:
                    d2:60:f8:43:7d:57:d4:15:cd:48:ea:0b:8e:3c:aa:
                    9d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:92:A3:AC:5D:69:A8:57:19:28:F6:93:08:15:14:66:88:72:36:EF
            X509v3 Authority Key Identifier:
                keyid:C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2a:89:da:f5:90:83:1e:72:6f:e0:0f:d5:70:ab:e5:30:f6:
         8f:d3:e8:aa:db:5c:ca:f2:98:f5:c0:55:da:f2:06:7c:66:97:
         a2:42:23:6d:b2:f5:59:84:fa:62:14:28:ef:04:cf:30:09:86:
         e2:59:bc:e8:f5:82:51:7b:61:ee:fc:55:2e:4a:79:34:69:82:
         27:f3:ff:63:84:f1:09:5b:e4:50:4b:c4:a9:8b:5b:56:0c:61:
         e2:ce:55:d3:a9:ed:15:5b:6e:6b:0a:7c:96:0e:82:17:23:7d:
         eb:bb:63:46:17:d3:f1:05:f5:8d:2f:72:b7:3b:4f:07:9b:70:
         d2:67:38:3c:95:7c:e5:82:65:4e:b1:35:ea:2c:fd:27:c4:3a:
         3f:49:fa:37:63:3b:bd:aa:7e:cf:d0:60:a1:a9:5e:47:cc:6d:
         b1:dd:c7:fc:87:3d:11:84:0f:87:2c:3b:b4:c5:84:51:c7:e7:
         7b:8f:08:7e:48:52:6d:66:21:de:2a:63:1d:d7:03:f9:d0:23:
         20:2a:1a:95:f3:88:06:7d:67:ab:43:20:04:81:42:1a:2c:2d:
         a1:24:8e:c6:41:09:e6:24:69:77:49:76:6e:7b:77:51:31:aa:
         c6:7f:d2:5b:f5:88:49:a8:a7:5d:f1:58:1a:28:68:45:86:b8:
         c8:8d:7d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:46:41 2025 by rpki-client