Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File:                     1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier:          RaA0kzXMJjIMFFGTpBX1SfMu3xS+FR7QAfaWNkJptBI=
Subject key identifier:   C1:4D:72:84:BC:6E:90:A8:8E:D0:80:6B:0A:5C:03:FC:C3:D7:1C:C4
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer:       /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial:       019608D4773816C8F4AFE716C19DCE206AFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number:          14DF
Signing time:             Sun 06 Apr 2025 02:01:03 +0000
Manifest this update:     Sun 06 Apr 2025 02:01:03 +0000
Manifest next update:     Mon 07 Apr 2025 02:01:03 +0000
Files and hashes:         1: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: btQr9fmoKP3lI0cfN6dwclN3djYkGT9WdL0WY2YOH9c=)
                          2: 20JZoPz-t_mgvCADeYADS1I1_kA.roa (hash: RK32qURGpdFetMp2/p5tqjPHVuZOydtV4ypb7Fv2oMw=)
                          3: FOD3WMgpxNybQzPuOwe78NsZWus.roa (hash: aFhRTJ+99Rr5uEMBT8AVfzARvPKS5dqhwYxUDD8GnV8=)
                          4: I7kRS98TWlLCpdxkZBJ1Ghb8vEo.roa (hash: pMswfMPqF7jqU8BWibFY90ZZ9yo1kLeHnDWRYRgreMo=)
                          5: JKL9ye3UOtI1o8T1cr1S9hXZ2no.roa (hash: lqCnv+8U/mZxgsC3R6bKu9b+cHWg6szFuB9C89FECMk=)
                          6: NKAZ0yQz4XuaBkRE9662AOjULN0.roa (hash: WvZwUHQ3SYfvF1aNu0uLqAKbebVCJ8X+LsDJ8/NlJz8=)
                          7: fPkUlM10HdenIbz-4UarZNI0zVw.roa (hash: YSGgPzsusSZwFwzPhGTMehx0nsGiu8yxsdihONVOyuU=)
                          8: hjRwwruuc7xXtL8W5gfmyR6abQw.roa (hash: djOP6Nk8xft6q+iLH/g7Yin3X++Oc/uER5vpULDglLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 22:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:08:d4:77:38:16:c8:f4:af:e7:16:c1:9d:ce:20:6a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
        Validity
            Not Before: Apr  6 02:01:03 2025 GMT
            Not After : Apr  7 02:01:03 2025 GMT
        Subject: CN=c14d7284bc6e90a88ed0806b0a5c03fcc3d71cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:05:8f:bb:67:a0:9b:02:b1:8b:1a:fc:3f:
                    7d:8e:11:72:26:32:6a:87:eb:62:0a:33:ab:44:dc:
                    a2:ba:37:b2:3e:5b:d4:02:1c:0a:8e:84:5f:c1:55:
                    c7:c5:27:18:b8:9c:a6:5b:4c:72:1f:44:f1:5a:6c:
                    5e:e0:1c:f8:21:d1:62:39:51:83:02:e7:f4:1b:8a:
                    22:03:e4:12:71:a2:80:8f:fe:fd:c8:83:0a:c0:61:
                    b1:71:3c:71:ff:14:27:44:c0:e1:e7:be:45:bc:84:
                    16:12:04:9e:1a:b0:56:3f:81:44:0c:42:3d:7e:1a:
                    44:97:bb:55:11:f9:5b:b8:c9:a3:6d:77:f1:bc:f2:
                    91:ca:c5:b8:18:ef:5e:a1:68:77:94:70:81:97:f6:
                    f9:58:a7:e5:c7:99:a8:61:4d:71:ba:3b:f7:35:fb:
                    15:a6:82:0c:de:64:23:77:af:53:74:f5:46:80:77:
                    60:03:89:de:77:2f:c4:e8:cc:3d:9f:dd:7e:03:62:
                    c9:ad:1b:c9:5c:c3:33:5e:36:83:7b:82:00:e5:0b:
                    62:80:cd:13:1e:6a:bf:d8:3c:f5:ce:73:21:3e:d6:
                    c7:e9:87:aa:30:b0:e4:39:ed:5a:18:3c:c0:b6:e1:
                    a1:f3:bf:b3:64:fe:58:d5:1c:a8:b4:c0:28:9d:d6:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4D:72:84:BC:6E:90:A8:8E:D0:80:6B:0A:5C:03:FC:C3:D7:1C:C4
            X509v3 Authority Key Identifier:
                keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:28:db:5f:b4:87:74:83:01:fd:a3:13:af:3a:01:d0:33:d7:
         fc:c4:e2:e9:01:c4:ea:8d:af:b0:d9:90:b8:3b:81:62:7e:4e:
         02:54:04:33:7f:12:b9:b0:c5:83:71:43:4d:ba:24:3a:01:a4:
         ca:47:05:27:0b:49:5c:79:4d:cc:ee:37:8c:f7:fc:81:7a:8f:
         9b:a4:4f:d7:4e:8f:76:94:0d:02:36:c3:9c:ab:53:cc:31:b7:
         2f:67:8b:d0:10:b8:58:b0:ec:4e:c8:6e:5d:01:d2:82:3c:0c:
         7f:86:5c:15:78:67:2e:79:c2:23:86:1f:23:94:22:25:37:ec:
         e0:cc:30:4c:ec:eb:e3:06:0e:49:f5:2e:24:c1:11:4c:38:d9:
         9a:59:56:70:3c:39:ee:64:c6:e0:8e:e0:a0:fd:b9:ea:91:ca:
         78:96:e6:55:a5:bb:a1:f8:73:af:3d:39:ed:10:cd:49:04:02:
         d2:5a:8f:24:83:75:cc:88:60:50:e6:e7:0b:9f:9b:21:f0:e4:
         ce:07:8b:fb:d3:e7:64:06:be:da:c5:53:27:e0:0c:f7:36:81:
         7b:f5:5d:26:66:a0:e7:e7:6c:ce:bf:99:d8:7d:ac:f0:f7:e3:
         46:25:2c:ca:7d:65:3a:f0:4a:20:e4:a3:96:58:58:05:c0:4a:
         f8:99:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:03:28 2025 by rpki-client