Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File:                     EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier:          UEnEwkRQbPOAx2dFT2COttfXtee/FqdY/VFq+/nnTAc=
Subject key identifier:   59:ED:A2:4B:F0:AD:D3:3F:AE:6A:AA:56:2D:A9:EE:B5:5F:E8:6E:83
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer:       /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial:       0196537FE212890FCE6A9B9F9B21249DCF1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number:          1454
Signing time:             Sun 20 Apr 2025 14:00:11 +0000
Manifest this update:     Sun 20 Apr 2025 14:00:11 +0000
Manifest next update:     Mon 21 Apr 2025 14:00:11 +0000
Files and hashes:         1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: RZEaWwkaQEpHOEfzvmgIjk3zUsyzqlH9IHuZlwOq+9U=)
                          2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 14:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:7f:e2:12:89:0f:ce:6a:9b:9f:9b:21:24:9d:cf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
        Validity
            Not Before: Apr 20 14:00:11 2025 GMT
            Not After : Apr 21 14:00:11 2025 GMT
        Subject: CN=59eda24bf0add33fae6aaa562da9eeb55fe86e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:05:45:9a:db:96:e3:60:ae:ef:f4:05:a4:
                    ab:75:4f:74:d0:06:fb:c4:14:e8:30:76:2f:81:63:
                    7e:5e:cb:6a:73:0a:19:5b:85:b2:fa:83:a3:a4:18:
                    0b:bf:45:58:64:2f:0a:23:a5:30:a6:77:d6:3d:ba:
                    01:64:28:89:a0:09:52:88:73:fc:ba:ef:88:ec:74:
                    56:3b:b9:b2:5a:ff:ea:49:91:bd:fb:1c:39:54:ae:
                    e4:98:a3:b2:a5:e3:a9:59:11:0d:7f:cb:74:ef:e8:
                    b0:2e:28:e5:27:3d:c9:b9:ba:fa:c1:2f:70:3e:e6:
                    fd:f6:cd:21:7a:0f:1a:04:4e:6a:5c:13:8c:51:b1:
                    8d:58:f7:73:ad:69:7e:11:d2:c8:74:85:7a:f3:ab:
                    04:df:aa:6b:8e:95:f1:8a:73:76:cb:54:c6:09:3f:
                    50:be:a5:8a:f8:a6:0e:b9:37:f8:a9:4d:66:45:eb:
                    ae:3c:8e:c8:2c:ef:e3:03:91:80:10:7a:d7:16:f5:
                    05:14:c7:f7:71:65:68:1a:3b:c7:1f:e2:3d:83:0e:
                    e0:d9:fe:bc:85:a4:f9:f6:75:2f:6f:51:67:50:4c:
                    ed:3e:c3:fd:92:7c:41:a6:df:3d:8b:86:e1:ea:a0:
                    43:20:3a:72:ad:22:95:87:5a:8f:49:36:f7:48:3a:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:ED:A2:4B:F0:AD:D3:3F:AE:6A:AA:56:2D:A9:EE:B5:5F:E8:6E:83
            X509v3 Authority Key Identifier:
                keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:54:1f:5b:ca:81:0e:ee:e2:90:99:f2:2c:e2:d4:be:2a:33:
         3b:92:8c:71:c9:73:e9:c4:b5:0d:c0:99:f8:35:ee:f3:d1:15:
         66:3a:c6:cf:c5:b5:0c:b2:68:56:cd:7f:66:63:f8:42:9e:94:
         39:13:c6:b4:13:41:1b:8f:da:5f:a9:40:4a:fe:87:3b:f8:54:
         b0:19:55:7f:f8:57:01:fc:f1:d3:8e:38:26:09:ee:e6:15:92:
         85:85:2e:d5:0f:ca:c3:35:c1:7d:14:ee:ff:2c:fb:92:85:2d:
         2b:93:16:56:b4:26:21:8b:b5:56:ab:1c:08:d0:f3:5b:c5:fb:
         e3:b8:f4:6a:d4:10:c8:aa:ce:e9:87:0d:23:fa:92:61:65:7f:
         27:66:f8:72:50:b4:07:28:88:bf:17:7a:d1:83:b2:46:a4:30:
         c9:27:5d:d5:b6:a9:c9:4b:33:af:be:2d:fa:3e:4e:c0:15:c1:
         41:45:bc:d4:3c:15:e4:52:16:9e:9a:0e:81:14:a5:c4:37:b5:
         44:a9:75:f7:e3:6d:fb:79:ae:f7:b5:00:6f:6b:80:63:5c:34:
         b6:b0:2b:05:b3:a4:94:21:58:65:25:55:cc:2d:14:79:b4:ce:
         f7:18:96:17:85:5b:3e:61:d6:d0:9c:ce:2f:0e:a7:77:a2:89:
         d2:02:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:36:02 2025 by rpki-client