Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
File:                     il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json)
Hash identifier:          yyj1qM8ILvWlQhcl79ZWTFES9CFOIr5zY4ty8XoevkI=
Subject key identifier:   24:1C:2C:6C:9D:94:66:2E:9E:17:7F:B9:EC:29:9A:CF:B0:DE:85:46
Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
Certificate issuer:       /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Certificate serial:       01964E5A4C8520A801075B07C0169CE80EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
Manifest number:          0CFB
Signing time:             Sat 19 Apr 2025 14:01:02 +0000
Manifest this update:     Sat 19 Apr 2025 14:01:02 +0000
Manifest next update:     Sun 20 Apr 2025 14:01:02 +0000
Files and hashes:         1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: sZPfOZUJ84PtmZT2UEss7oax1jc0OMVj1W3Xcfps/so=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:5a:4c:85:20:a8:01:07:5b:07:c0:16:9c:e8:0e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
        Validity
            Not Before: Apr 19 14:01:02 2025 GMT
            Not After : Apr 20 14:01:02 2025 GMT
        Subject: CN=241c2c6c9d94662e9e177fb9ec299acfb0de8546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f3:fe:4d:4c:74:61:d2:c6:70:1a:a8:05:46:
                    46:f1:bf:e6:fe:44:20:a9:c9:bf:26:e6:08:e6:20:
                    77:aa:a7:25:7e:a3:56:57:88:fb:a2:cd:db:cc:f3:
                    8c:77:48:f5:e6:14:96:6c:2c:1e:25:f7:58:2d:a1:
                    fa:73:72:2c:72:63:7f:68:68:76:73:fe:1c:c3:57:
                    ec:ce:87:53:91:35:8e:84:d7:b8:06:cb:af:8c:10:
                    0d:71:b1:0c:73:03:3b:77:9d:7c:60:cb:57:8b:28:
                    6a:85:88:21:0a:81:b1:93:83:53:06:54:4d:1b:be:
                    45:14:4b:da:b0:e6:a3:03:83:d2:17:0a:d9:8b:72:
                    f7:cf:c5:76:0a:59:5d:93:92:4c:1b:de:7b:47:59:
                    f4:6a:02:7f:d5:95:30:b5:e5:d9:ce:b9:e9:19:5d:
                    39:ef:4f:be:d1:ce:68:02:3d:f2:1a:ad:fe:0d:bc:
                    4e:c6:bc:cb:20:c2:22:30:ed:f7:fb:77:00:27:2c:
                    5a:44:dc:89:6b:a5:10:1e:d0:2e:26:ae:c4:db:41:
                    84:cc:08:19:2d:30:dd:da:94:4b:e3:74:ad:93:67:
                    96:e7:f9:21:95:89:31:9e:1e:59:19:df:4b:50:a4:
                    3f:6d:04:61:36:bc:b3:1b:3a:38:7e:54:cd:9c:84:
                    a5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1C:2C:6C:9D:94:66:2E:9E:17:7F:B9:EC:29:9A:CF:B0:DE:85:46
            X509v3 Authority Key Identifier:
                keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6f:7e:10:b6:ff:33:ab:f5:1c:7a:52:d2:ca:06:b9:46:98:
         a8:a1:0d:f6:e5:3c:0e:18:46:8a:0b:e3:5e:54:13:1c:63:1d:
         f5:74:33:62:e7:ba:5c:1d:01:46:99:51:d5:67:3e:d4:ed:2a:
         34:23:45:36:27:bf:71:7e:48:8b:1f:57:91:aa:2c:4a:4d:92:
         68:eb:41:c1:e7:01:3f:a5:d8:7a:37:32:29:29:34:f7:9a:b8:
         a7:7c:f2:ef:ad:91:a9:98:23:23:99:9e:65:e1:0d:b3:db:ed:
         a8:87:2b:0c:3d:47:0f:ec:a1:b8:ce:79:3c:9d:32:d8:b4:3e:
         63:94:38:88:ff:90:ff:c6:11:7f:c0:6d:35:36:b7:ed:72:30:
         1a:05:a6:dd:59:52:f8:ca:b9:fe:5e:d9:da:42:db:cc:b7:8f:
         f2:06:b2:04:44:aa:58:d0:e0:49:70:6c:26:11:8c:a0:ba:9b:
         00:e2:01:31:5d:ff:ca:ff:be:c4:a7:7c:64:8e:85:ef:c2:a5:
         26:a6:52:e4:5d:13:b9:e1:5a:4b:b7:eb:1c:ae:72:b4:13:ff:
         f8:e8:2c:c7:1f:e1:2b:af:f0:09:74:69:08:ed:97:77:ef:60:
         24:92:6c:42:74:8c:fb:63:21:b0:3f:e8:70:56:14:6b:e8:84:
         ca:36:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:50:20 2025 by rpki-client