Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File:                     Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier:          wexkiCbDdJh3bl0L01dJkiy8xTnaJAwlzKJwGxSkO8I=
Subject key identifier:   5A:E1:3A:9B:89:87:29:F2:FE:F9:45:A6:E5:61:AC:6C:D1:C0:A9:DA
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer:       /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial:       01958EBC77CEA427D721BEDDD2848673EE2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number:          08C2
Signing time:             Thu 13 Mar 2025 09:01:10 +0000
Manifest this update:     Thu 13 Mar 2025 09:01:10 +0000
Manifest next update:     Fri 14 Mar 2025 09:01:10 +0000
Files and hashes:         1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: BpkZ4Ra+34tyDygUt7x4ZsPaDsvy2sVMCutRu7hEUDs=)
                          2: R7UR19A8DA5u7WHUKAJI549nkdo.roa (hash: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:bc:77:ce:a4:27:d7:21:be:dd:d2:84:86:73:ee:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233adc97f9826262007f46286591830df58fc55e
        Validity
            Not Before: Mar 13 09:01:10 2025 GMT
            Not After : Mar 14 09:01:10 2025 GMT
        Subject: CN=5ae13a9b898729f2fef945a6e561ac6cd1c0a9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:07:1a:0a:6e:fb:7f:77:38:fb:b0:d6:fb:
                    36:8f:08:14:5a:57:f9:13:62:f9:31:39:36:99:1d:
                    e1:42:91:d1:d2:b1:30:f1:ac:2c:ca:4a:37:8c:4e:
                    99:16:31:4a:17:79:87:c8:ca:bc:9d:91:a7:fd:b6:
                    49:5f:80:76:ef:d9:26:82:00:59:17:d5:cd:c6:4e:
                    df:c5:b1:2c:76:6b:ff:32:8d:17:b5:bd:31:e0:15:
                    97:dc:2a:61:6e:53:e5:51:7f:ee:fa:ae:c6:dd:dd:
                    47:ec:c3:59:d4:dc:17:81:e9:b9:3c:fb:d8:86:db:
                    79:86:95:9c:f5:4a:b9:51:a2:67:b8:e9:67:58:8b:
                    29:a1:7e:40:81:cd:34:b8:9e:5f:dd:89:ea:d3:8c:
                    7f:d2:d6:0a:85:d1:68:49:67:30:76:16:42:96:cc:
                    02:d5:6c:4b:5f:d6:69:ef:b6:f8:91:f8:1a:a0:16:
                    58:07:21:75:d9:67:53:87:bb:45:a7:89:67:f6:a5:
                    90:9e:5a:0f:f7:70:51:52:1b:8b:83:22:b7:35:1f:
                    56:58:32:70:87:8c:06:10:d3:a2:5b:19:86:32:b7:
                    c1:69:03:89:9a:ea:22:04:03:31:a7:c7:da:23:48:
                    e7:85:79:e2:76:14:9f:95:ed:22:98:20:79:1e:6a:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:3A:9B:89:87:29:F2:FE:F9:45:A6:E5:61:AC:6C:D1:C0:A9:DA
            X509v3 Authority Key Identifier:
                keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:08:38:9d:b8:a3:be:b6:7b:91:56:9e:25:82:0b:1c:a6:8d:
         f7:16:04:e7:d8:ca:c5:9c:2f:40:96:9d:4e:61:19:80:46:94:
         45:ed:cf:ec:b1:b7:b2:d6:d9:cc:c8:41:b4:0f:88:b8:cd:7a:
         79:4d:37:81:bb:6b:1a:55:fa:2c:d0:b2:15:43:1e:e1:4a:d0:
         f1:38:e1:bd:24:16:3a:a5:8c:5f:79:30:1d:68:de:5e:a2:51:
         0d:a2:4d:f1:3f:58:ff:60:7c:d0:9b:27:11:42:bb:af:c9:3a:
         59:ad:a3:b5:2f:2f:ea:61:e0:6c:28:be:04:ed:f2:12:e4:e9:
         cb:e7:07:62:e0:70:dc:73:d0:95:40:9c:07:a6:41:ad:a3:5b:
         16:c9:6c:b8:6a:b1:c8:21:6b:10:15:27:91:5e:55:20:87:1f:
         90:af:ba:6c:37:a1:82:8c:38:4c:4d:cd:55:40:44:b8:43:d3:
         36:12:45:14:fd:38:5f:24:2f:31:63:27:33:6a:01:16:74:65:
         7d:34:02:cf:ce:d3:84:a9:61:3f:ac:75:9a:6f:92:e3:98:61:
         a7:2a:c4:cc:0d:a2:3d:9e:80:52:f2:5c:0e:65:a0:57:95:1e:
         da:be:41:e1:ce:10:04:72:2f:c1:75:2f:01:f5:50:75:7a:cc:
         d1:83:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:11 2025 by rpki-client