Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File:                     HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier:          7pbrgjZepKJPZT9GkMb9fEiI5gaXxvuk6Hb2vjl2/Pg=
Subject key identifier:   82:C5:89:3C:89:54:B0:33:F6:9D:05:8C:09:31:B6:9F:1D:2E:F7:8A
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer:       /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial:       01964FA381F22FA1B7AE8A8757D2042B1128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number:          0E67
Signing time:             Sat 19 Apr 2025 20:00:37 +0000
Manifest this update:     Sat 19 Apr 2025 20:00:37 +0000
Manifest next update:     Sun 20 Apr 2025 20:00:37 +0000
Files and hashes:         1: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: 9lkpxzYctXA79nrBLZAptx6q/uvfqxo5BKJQ2J81PVA=)
                          2: I5Xu8_YbkRGpwTMlPEbzbNadX4o.roa (hash: B6r1juc4mX6gmzIU2gNZpN65PXm/XHcIEb2Ag0utzNw=)
                          3: TPDLRQuqICQP26Z5DLtwUuRH6jc.roa (hash: XySQwbc/9iXTVwgfkcqQbJH2XphS+YuGBqB7m8X+7eE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:a3:81:f2:2f:a1:b7:ae:8a:87:57:d2:04:2b:11:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
        Validity
            Not Before: Apr 19 20:00:37 2025 GMT
            Not After : Apr 20 20:00:37 2025 GMT
        Subject: CN=82c5893c8954b033f69d058c0931b69f1d2ef78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f6:3a:e2:ce:4b:d6:1e:32:6c:06:89:d0:32:
                    07:cd:74:f9:ef:df:b9:77:72:b5:09:13:55:2c:f6:
                    bb:a8:a1:40:9f:00:49:c9:10:09:b1:78:96:3e:81:
                    78:1c:bd:29:0e:e9:cb:60:87:c2:ab:2c:0a:05:4b:
                    5d:bf:82:57:07:9e:92:b3:c5:73:97:ca:58:d7:3c:
                    f0:2c:db:19:c5:af:cc:13:f8:1a:3b:82:c0:6b:15:
                    3e:4a:19:1f:19:41:cf:c8:f8:17:26:eb:e0:84:b4:
                    0d:e2:04:80:b2:17:17:9e:ce:ac:70:70:2f:3e:70:
                    14:6a:10:2d:28:ea:9c:6a:bb:2f:5d:2b:61:5a:66:
                    2c:8d:1e:f6:eb:d5:42:3e:cf:38:22:03:ce:88:34:
                    b7:e5:c8:dd:40:5c:28:35:9e:19:19:3f:f5:dd:6b:
                    7f:05:c1:0e:8e:4c:34:42:5b:53:19:ff:9b:e2:30:
                    e7:10:33:b3:2a:5e:aa:47:5c:d8:0f:eb:17:9d:2b:
                    34:3c:38:6d:11:5d:10:9d:b8:06:c1:f0:d6:68:1e:
                    76:16:b2:67:f4:6f:6c:c9:18:83:e5:14:99:e1:f3:
                    74:98:92:f7:a1:e0:8b:71:d1:74:03:b0:82:41:fb:
                    bc:4a:d4:ac:db:68:cc:d6:ef:a3:97:d0:b6:5d:f6:
                    66:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C5:89:3C:89:54:B0:33:F6:9D:05:8C:09:31:B6:9F:1D:2E:F7:8A
            X509v3 Authority Key Identifier:
                keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:90:55:27:23:23:3c:83:a4:2d:b0:90:e2:21:d4:75:bb:9c:
         b1:26:3f:0c:05:54:de:fc:8c:6c:0d:7c:0e:58:02:a4:1c:26:
         74:45:a2:c2:6c:e6:ee:2d:b9:37:c3:27:de:df:e7:86:81:49:
         93:46:29:f3:2f:33:f3:ba:2c:4d:f6:a8:30:6d:cd:69:b2:a9:
         81:1c:70:3d:be:60:be:7c:bd:9e:d2:48:32:7e:13:a7:16:c6:
         c8:a9:93:3a:01:c5:82:a1:3d:1d:2f:24:f4:4e:b6:b1:89:ba:
         ac:6b:9a:df:76:05:ae:61:fe:0c:2c:54:ab:98:57:67:ac:d8:
         d9:cc:df:87:35:61:e6:10:3e:04:e8:cc:59:2b:5c:39:68:ff:
         b3:1b:14:0b:53:1b:fc:90:01:23:3f:17:30:6c:7a:10:71:f6:
         95:10:ca:5b:01:64:3e:af:7a:bf:6a:0d:47:45:a9:84:09:7b:
         60:03:6e:92:69:15:0f:a9:df:33:1e:50:63:41:11:58:4d:22:
         c8:49:ad:72:8e:ac:77:de:49:ce:71:e0:17:48:23:86:3f:0c:
         bc:1c:1d:4a:ae:03:5c:ce:0a:49:5e:e7:0d:46:94:73:20:fd:
         8c:a9:24:a9:c2:db:6e:df:44:82:43:54:32:8e:1f:53:9c:5a:
         0c:21:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:08:57 2025 by rpki-client