Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File:                     1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier:          dIB4qNB1hpp1Ip3wE3TjPPBc3Rw4CALBhZO/cAV58SY=
Subject key identifier:   A2:59:47:01:DA:96:11:28:2B:3F:C4:C0:41:6C:FF:F2:16:10:06:C9
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer:       /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial:       019510C700C3586964718D1A04A9DDD8FA3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number:          0986
Signing time:             Sun 16 Feb 2025 22:00:32 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:32 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:32 +0000
Files and hashes:         1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: NFi6CQFuvDmlTJJAmZKF1sRH/KaCAPx9I1xBQBvRwqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:00:c3:58:69:64:71:8d:1a:04:a9:dd:d8:fa:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
        Validity
            Not Before: Feb 16 22:00:32 2025 GMT
            Not After : Feb 17 22:00:32 2025 GMT
        Subject: CN=a2594701da9611282b3fc4c0416cfff2161006c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:3f:7d:e0:24:71:ab:63:98:8e:40:86:24:
                    12:3f:0b:79:cb:62:17:09:98:59:36:32:99:16:29:
                    e2:19:81:01:13:f9:24:cc:4e:5a:98:00:5d:4e:be:
                    96:eb:8a:76:0a:b5:ed:d3:1e:12:ec:5e:22:9f:de:
                    27:57:04:7a:60:bd:1d:10:34:ff:d6:24:9e:16:ee:
                    b5:e0:af:3f:75:54:86:9b:a1:cf:6e:d8:c7:41:8e:
                    18:b3:c5:96:11:cb:6a:6e:90:7c:bd:4d:c2:e7:af:
                    aa:a1:3e:9a:49:7f:1b:78:fc:e5:21:22:d2:00:04:
                    2b:2a:13:1d:18:10:05:1c:7c:a7:d6:ed:53:6c:c7:
                    35:00:a0:2b:78:b8:c1:16:e6:5e:91:c4:c8:05:83:
                    6b:21:10:b7:70:5f:29:db:ed:b7:06:ef:cf:40:58:
                    f2:b7:08:89:9a:d6:ad:41:ea:f1:35:13:e7:b7:7c:
                    b3:2e:d9:7a:97:cb:c5:cc:2c:99:e8:e1:d9:56:ef:
                    07:ce:df:01:bc:ef:17:54:88:64:de:e7:a4:c9:b8:
                    98:a5:29:c3:a4:41:18:e5:e3:6e:43:fe:8b:89:18:
                    1e:92:7d:78:1a:a9:85:04:d4:c4:08:df:fe:dd:9e:
                    96:0c:c2:09:89:87:80:d5:a4:d7:68:c9:0b:10:b4:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:59:47:01:DA:96:11:28:2B:3F:C4:C0:41:6C:FF:F2:16:10:06:C9
            X509v3 Authority Key Identifier:
                keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e0:a8:46:69:a4:5e:5f:e6:5d:73:9e:c1:a4:fe:9c:82:de:
         ea:e8:a9:d9:99:c7:e4:14:82:38:12:3c:dd:68:e5:3c:df:89:
         a4:97:bb:6a:80:0d:69:6a:cd:68:e8:1f:70:1b:01:e7:03:f9:
         d6:21:dc:86:af:e5:34:2b:f9:c5:05:be:88:33:07:ab:f9:85:
         fc:74:28:b3:c6:cb:31:b2:62:09:67:47:2e:f3:59:50:eb:88:
         ae:ac:fc:c3:b4:f2:09:98:ab:66:11:3b:6e:8f:19:e4:b7:22:
         db:da:de:5f:bd:e1:60:d8:33:e9:62:40:4f:cd:eb:46:d9:6c:
         0e:8f:ae:8c:82:ff:9c:e9:e3:f5:0f:5e:9f:ac:92:a2:89:d2:
         fc:fe:0a:cb:eb:97:b4:42:cb:20:d9:a4:c9:c4:8f:70:7a:20:
         37:32:2a:35:67:4a:a5:7f:35:57:d1:a3:2d:43:70:f3:2d:75:
         f5:b2:74:84:57:6f:2d:7e:87:aa:85:36:b1:22:57:a4:6b:63:
         88:c6:a0:04:94:99:cb:f8:50:bb:55:e3:3a:e9:ec:36:fc:1c:
         13:2b:fc:77:16:72:5f:37:81:da:e9:90:8b:fe:7f:f2:57:43:
         b8:66:f6:a1:39:27:05:8f:68:f2:ac:3b:9c:6e:d1:d4:18:aa:
         8b:93:5f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:56 2025 by rpki-client