Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File:                     HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier:          z4g+yf9jA6KhB0nFcDpqmzYf3Ldiyeqd2tLF+iBYn0w=
Subject key identifier:   03:62:E7:CD:95:1A:1F:8E:95:7D:86:5A:08:34:2E:08:A5:BF:B6:C0
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer:       /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial:       019644447DB1D317A4B6C3F58883230F0FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number:          14F3
Signing time:             Thu 17 Apr 2025 15:01:01 +0000
Manifest this update:     Thu 17 Apr 2025 15:01:01 +0000
Manifest next update:     Fri 18 Apr 2025 15:01:01 +0000
Files and hashes:         1: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: NczvXVzdyvgMUJfM1rQm94KQjjTrWMxdf3tSjt7NNOY=)
                          2: zx0be_pkiDVp3Bp6Y2p73CdjnRQ.roa (hash: NeFjM/BvfaVvBPbeh43NItXZIzj0r2G0lwwaiN3R4Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:7d:b1:d3:17:a4:b6:c3:f5:88:83:23:0f:0f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
        Validity
            Not Before: Apr 17 15:01:01 2025 GMT
            Not After : Apr 18 15:01:01 2025 GMT
        Subject: CN=0362e7cd951a1f8e957d865a08342e08a5bfb6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:8b:29:c3:a7:cf:ca:4f:ad:47:ac:cf:b6:
                    1b:99:55:cf:03:e7:7c:95:1a:c7:d3:77:f4:13:9a:
                    e7:85:60:29:35:fb:e3:65:f8:ce:6d:6d:9f:a5:6b:
                    0c:52:6e:16:25:ff:45:73:d5:46:cb:46:a8:7e:b8:
                    8b:d7:d1:35:e0:37:fc:47:41:c0:b2:1f:a2:25:38:
                    44:1d:58:d8:f3:01:88:2c:c5:9e:e3:2e:cf:6e:af:
                    02:9e:8b:86:49:08:1d:c6:26:a6:06:d7:16:1b:70:
                    75:d4:9a:4c:f0:8a:c0:91:50:30:95:75:f3:50:6d:
                    58:1e:b1:7f:ff:35:44:8f:87:a0:65:a8:38:77:4f:
                    ff:d6:3d:fd:c1:fc:6f:10:57:6b:98:f9:1d:02:a7:
                    df:38:86:77:f0:3a:70:6e:bf:87:6b:71:51:cd:0d:
                    20:31:7a:d6:fa:28:9b:4f:75:d5:d1:78:02:91:a2:
                    c5:5d:0b:85:03:46:91:de:c8:c3:2f:04:de:7a:fd:
                    e8:39:0b:46:b7:e0:b0:7a:e8:83:cf:f8:76:67:45:
                    7b:ee:8a:8b:7f:ce:c4:d1:f8:ea:a3:ac:2d:c6:45:
                    84:46:bc:77:e8:60:96:12:96:7a:43:d3:c6:5d:49:
                    c9:94:4f:96:da:15:94:29:a2:e8:e4:14:d9:08:44:
                    75:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:62:E7:CD:95:1A:1F:8E:95:7D:86:5A:08:34:2E:08:A5:BF:B6:C0
            X509v3 Authority Key Identifier:
                keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:23:dc:e6:5a:9e:c8:5d:45:99:e3:5d:7d:8f:51:ae:ec:fa:
         1d:90:47:ce:84:6e:78:9f:49:f8:51:1b:b3:f6:03:7d:2e:65:
         1e:7a:ba:dc:c0:ae:2d:a5:b9:94:47:14:de:8b:41:2e:40:a7:
         a5:34:0c:e9:95:48:4b:6a:af:a6:2c:3e:05:dc:b0:1f:42:ec:
         8c:b0:44:4c:2a:f3:81:f3:1c:24:a3:00:61:ad:5c:b9:93:e8:
         37:52:05:a1:1e:fd:4b:b0:8f:be:44:83:3f:f8:f7:19:c3:cd:
         14:cc:5d:0c:a4:2b:8f:c1:36:a5:ca:1f:5f:44:b4:81:07:39:
         c4:e7:fe:a1:3d:53:68:dd:fd:a6:f8:de:49:16:b4:b1:42:81:
         95:30:48:03:75:d7:58:80:c5:27:b7:e9:a9:0a:4c:1c:45:ef:
         27:50:c0:2c:0d:81:ff:97:82:2e:83:ca:ce:e0:0f:ca:fa:79:
         bd:94:89:44:7a:a5:62:71:2e:b1:f9:c1:62:1a:5c:1d:17:bd:
         0d:a2:5f:50:e3:48:b8:a6:03:9d:a5:36:0b:ee:41:60:7e:46:
         6c:b7:4a:c9:f5:df:e2:d9:9c:19:0a:93:96:a2:b5:63:c0:76:
         28:29:a3:9e:5a:b8:fa:a7:80:f4:2f:5d:ef:e8:e4:f5:c7:f4:
         84:6a:28:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:34 2025 by rpki-client