Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File:                     0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier:          MGvi8LSs/pCywZjz4L57paj84pZyhtRuwewJW0RgAPk=
Subject key identifier:   CA:21:97:03:DC:72:4E:89:C9:B5:FA:E5:FD:BC:B2:00:21:77:AB:32
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer:       /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial:       01964B8F8FCE820413979F137CEE491B401C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number:          144A
Signing time:             Sat 19 Apr 2025 01:00:21 +0000
Manifest this update:     Sat 19 Apr 2025 01:00:21 +0000
Manifest next update:     Sun 20 Apr 2025 01:00:21 +0000
Files and hashes:         1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: 8e8olhSMKxq4UXnlwv/BTZP8eexsgF5s2ucdrSVSciI=)
                          2: TEBgTQfk8TTugPkvZbXZbIl-DzU.roa (hash: X8lYrbJg3w88o9ijNvVCeQ1nN96EvrcQjM0+hkV2C/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:8f:8f:ce:82:04:13:97:9f:13:7c:ee:49:1b:40:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
        Validity
            Not Before: Apr 19 01:00:21 2025 GMT
            Not After : Apr 20 01:00:21 2025 GMT
        Subject: CN=ca219703dc724e89c9b5fae5fdbcb2002177ab32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:c7:4b:22:56:99:e4:f7:d0:46:e7:9b:96:
                    1f:0a:cf:38:df:1f:2c:3d:19:62:af:7e:c1:84:37:
                    0a:96:66:52:d5:74:20:80:6b:aa:8c:8c:ac:d1:81:
                    5b:94:6d:a1:2f:ce:d6:cd:c2:69:1c:f5:3e:c2:72:
                    c9:63:d4:50:6a:97:66:b2:12:54:14:b8:48:4a:18:
                    ba:78:b2:ed:12:bf:e7:34:f2:13:2c:d3:e9:27:bf:
                    5f:a2:75:37:9e:24:7e:fa:86:eb:19:97:fe:3a:26:
                    fd:61:cb:e8:61:94:2e:78:e8:d6:17:0d:dd:df:6e:
                    a1:eb:54:14:b8:b2:69:77:af:2b:7d:a4:82:76:ff:
                    7e:71:68:95:c1:da:2b:89:1f:3b:d0:b7:a4:90:91:
                    54:32:7f:59:09:a1:2c:8d:98:ac:30:ce:74:3b:c1:
                    4c:d2:27:08:82:84:73:97:d8:1a:60:f0:33:e7:e3:
                    e0:ee:be:f6:42:14:95:0c:06:7d:fd:0d:cf:8d:ba:
                    88:9f:53:56:30:fe:39:8d:34:06:25:31:b6:54:4c:
                    39:76:43:69:f5:41:39:18:56:e4:b0:58:29:e4:06:
                    a3:fb:cc:4e:b9:7c:8e:9a:71:a3:d4:51:49:57:7e:
                    15:4f:92:35:7e:20:03:96:e1:07:73:89:4a:2d:d6:
                    1b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:21:97:03:DC:72:4E:89:C9:B5:FA:E5:FD:BC:B2:00:21:77:AB:32
            X509v3 Authority Key Identifier:
                keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:00:6d:75:ea:bf:91:76:12:aa:64:4a:00:ea:c1:28:4c:64:
         c5:a9:06:de:0f:ad:8f:14:b2:d6:b9:59:a7:7b:ff:27:94:71:
         8e:10:c8:2d:a1:ef:81:a8:e9:96:8d:70:84:ba:23:3f:0b:00:
         be:e9:b5:70:82:7b:81:b8:5b:5d:4d:ec:2e:de:7d:58:d1:f9:
         3c:b7:3d:af:ef:f2:95:27:52:4b:d5:5b:a3:92:26:65:d7:a4:
         c5:16:13:3b:e1:9f:e2:08:6f:10:12:f3:d2:16:98:f7:80:ea:
         51:63:b7:59:83:cf:f1:55:55:5e:dc:d9:82:4d:73:00:70:33:
         74:ed:16:90:d4:ab:b8:69:5b:73:ba:e5:ed:7b:aa:cd:d9:c9:
         e2:82:11:1f:00:da:6a:43:7d:31:cb:41:9c:26:6d:3e:2c:2b:
         4b:b6:60:94:a9:5f:32:40:80:43:61:b4:2f:5e:7d:68:a4:e6:
         2b:3c:5b:6e:94:7b:46:84:0e:37:ea:8a:8b:37:eb:e6:2c:36:
         c6:75:aa:d8:65:6f:6d:9e:20:17:3c:9a:77:07:9d:a3:fc:09:
         f9:85:f2:32:e6:f7:b2:fc:60:a9:3e:ce:00:15:b4:60:e7:d1:
         08:4d:dd:65:bb:26:05:8c:e5:58:a9:59:ef:a0:77:de:d6:c1:
         6f:64:70:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:49:55 2025 by rpki-client