Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File:                     6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier:          058SPPdkj7MS0Qlzk3iOh5BQYi/3TxnzPlfLrh86nSc=
Subject key identifier:   5E:9F:0D:A9:A6:16:FB:81:25:DD:3D:C9:14:7D:3D:98:7C:9B:60:AD
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer:       /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial:       01960ED68F15FD3EC873A999FD9ED0F996C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number:          14DC
Signing time:             Mon 07 Apr 2025 06:01:04 +0000
Manifest this update:     Mon 07 Apr 2025 06:01:04 +0000
Manifest next update:     Tue 08 Apr 2025 06:01:04 +0000
Files and hashes:         1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: BHHp7Uj5ZjPFLFMlxJf6jDj3uyJd4wQhkEzper0zqFk=)
                          2: vZG9jNJvpP2dQTHDHjZo_HSuUlM.roa (hash: l7IzR2g9EaxDuqo4eOsNuovFYqnZrK9ipQBej6WUnUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0e:d6:8f:15:fd:3e:c8:73:a9:99:fd:9e:d0:f9:96:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
        Validity
            Not Before: Apr  7 06:01:04 2025 GMT
            Not After : Apr  8 06:01:04 2025 GMT
        Subject: CN=5e9f0da9a616fb8125dd3dc9147d3d987c9b60ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:66:4d:df:98:0f:67:0a:8a:04:25:21:cc:
                    ce:a5:62:95:9c:b9:fa:7e:35:9a:ed:ce:07:7b:96:
                    7d:a2:38:9b:36:59:77:66:14:90:1b:1f:3d:7f:0c:
                    8f:0c:8f:39:06:18:9f:83:28:ec:33:02:7f:33:ce:
                    71:cb:54:a9:ca:8f:ea:4c:ba:62:2b:8f:e4:44:e4:
                    5a:5d:8b:b0:74:2a:fb:6c:d6:6b:e5:8e:4c:27:e1:
                    18:c4:d5:88:2a:30:09:25:b1:7a:41:6d:d8:9d:b7:
                    f5:91:72:6e:44:f6:58:e9:34:bb:81:69:f9:25:c7:
                    b4:a1:c1:7d:ea:89:4a:af:9e:8a:26:d7:5d:c4:a1:
                    dc:31:72:b3:ce:ae:c8:15:40:97:0e:cc:f6:30:5e:
                    11:0c:90:27:0f:25:d2:9a:50:74:79:82:30:5d:23:
                    43:3e:35:1b:06:04:90:5d:2b:ae:fa:2e:f1:68:fc:
                    69:50:c4:b4:bc:8e:15:ed:89:4a:3c:e1:5d:f4:d6:
                    f5:fd:82:25:55:7b:3d:b1:5e:f1:73:dd:b9:e7:8e:
                    0c:6d:d6:ff:fc:7f:f7:62:c1:38:11:05:16:fd:a0:
                    30:b9:2b:8f:2c:36:30:88:d4:93:c8:a0:e5:c8:1d:
                    10:9d:a3:2e:b1:c5:86:82:8b:f2:96:3b:8e:00:f7:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9F:0D:A9:A6:16:FB:81:25:DD:3D:C9:14:7D:3D:98:7C:9B:60:AD
            X509v3 Authority Key Identifier:
                keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:e9:63:5d:3f:50:75:4d:10:46:3a:f2:8b:7e:5a:1b:ba:88:
         6f:8e:14:08:57:79:0a:6e:40:f8:0f:4f:e6:1c:c7:5f:2d:d7:
         55:b7:a8:87:2c:c6:dc:68:1e:e0:61:b2:75:8f:05:7c:8a:c2:
         66:95:b0:9a:1d:94:6d:79:16:83:ef:91:c6:eb:9f:00:f4:75:
         93:22:e9:83:0e:31:ab:15:cd:8c:ad:0b:60:27:a9:84:95:58:
         38:48:93:27:66:2b:61:b5:44:25:1d:60:f1:28:89:ef:d7:15:
         cb:9b:eb:05:da:3c:1e:f5:9a:82:98:06:ec:91:af:48:9a:7d:
         53:c3:d5:17:00:61:47:70:8b:24:02:56:b9:4d:53:52:32:f2:
         d7:24:d6:9d:0d:16:66:65:e1:13:f5:0a:44:a3:8d:17:b3:5c:
         7a:eb:7d:7b:ee:99:d3:52:13:53:c5:39:bc:ec:0b:a4:5f:5f:
         77:9e:89:e8:cd:f7:84:05:88:f1:11:bd:49:e0:a9:d2:6d:54:
         79:37:ec:ad:b2:78:6e:fc:a9:01:7c:20:8c:28:48:83:d6:4c:
         09:33:50:3f:7f:bb:d9:91:1a:19:e5:52:e8:2b:e8:27:ae:b9:
         e4:a8:64:b7:02:e2:9c:8d:8a:60:73:f9:0c:5b:da:46:b0:51:
         a6:4c:65:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:57 2025 by rpki-client