Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
File:                     5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft (raw, json)
Hash identifier:          Ov1WxMtAeyq1cqHcPaURyjtCbNzz/Kcr2EkN2cy8wno=
Subject key identifier:   D3:53:D9:1E:F4:EC:6A:CE:13:95:9C:A0:EA:74:C5:54:8E:C0:02:E7
Authority key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Certificate issuer:       /CN=e505d93497f19d2563066b409200969711f28c67
Certificate serial:       0196545C6423930C573093EF03EBEAC7736D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
Manifest number:          0C9C
Signing time:             Sun 20 Apr 2025 18:01:02 +0000
Manifest this update:     Sun 20 Apr 2025 18:01:02 +0000
Manifest next update:     Mon 21 Apr 2025 18:01:02 +0000
Files and hashes:         1: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl (hash: gujYsqqwBqnA63Ina5UgVDzANKcw0ZJ5/ooDO7/M+bs=)
                          2: TeyiHHpQzPXntQ9zcodgsnssabQ.roa (hash: 99RzEV6KxbBUQmEGjwYOg/0KALhFJ98CPqecVaZd8t8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5c:64:23:93:0c:57:30:93:ef:03:eb:ea:c7:73:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e505d93497f19d2563066b409200969711f28c67
        Validity
            Not Before: Apr 20 18:01:02 2025 GMT
            Not After : Apr 21 18:01:02 2025 GMT
        Subject: CN=d353d91ef4ec6ace13959ca0ea74c5548ec002e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:19:23:95:02:fa:44:a5:d7:2d:28:86:1b:b3:
                    29:af:cd:0e:9e:4b:69:e7:be:6f:21:aa:5d:b9:da:
                    0c:4d:35:0b:68:5d:7a:8d:1d:c2:f8:36:80:83:a1:
                    83:7c:39:45:ce:d9:c1:e6:99:57:da:44:81:27:f3:
                    1e:b4:f9:d7:90:d5:85:51:b8:4e:b0:5f:fe:9d:47:
                    24:cb:68:65:a5:5a:c3:6e:4d:f5:a7:f9:89:34:09:
                    4d:91:29:db:e2:e6:1e:f4:b0:f1:d6:70:60:18:83:
                    7c:ec:fe:25:7f:70:9d:33:ef:bb:de:c4:e3:3b:86:
                    0e:18:ce:e2:4c:1e:a2:2f:14:8f:2b:56:26:91:1d:
                    a0:77:08:c3:cf:e7:48:d0:b3:cd:bd:27:aa:2c:2c:
                    b0:63:8e:7a:0f:c5:a4:31:26:b9:19:0f:00:61:db:
                    80:1b:14:04:45:48:d9:48:7d:96:90:3d:90:fd:35:
                    b5:07:04:ec:d3:56:2b:77:a3:8f:71:bb:b6:8f:2e:
                    c3:1c:a0:58:a3:91:20:29:81:66:12:af:63:35:fd:
                    14:ea:99:9b:1c:ba:d6:d4:35:12:f0:b5:71:95:a0:
                    75:c9:16:87:00:08:0b:c5:d6:15:53:69:73:ad:86:
                    8b:e9:fd:2a:68:32:01:13:fc:b0:43:60:27:f8:15:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:53:D9:1E:F4:EC:6A:CE:13:95:9C:A0:EA:74:C5:54:8E:C0:02:E7
            X509v3 Authority Key Identifier:
                keyid:E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2f:b2:f7:f1:de:11:13:f1:7f:45:ae:93:d3:55:35:ef:93:
         08:89:52:2f:59:7a:eb:b9:3f:c3:86:d8:a8:9a:2f:90:02:29:
         aa:46:f3:16:02:00:bb:29:f0:53:e8:18:05:12:f2:7b:28:32:
         75:96:06:ea:15:b6:77:8a:8c:94:57:56:34:43:35:51:61:04:
         2f:ef:61:c7:fd:14:b4:b1:53:64:13:1e:96:1f:16:29:17:cf:
         a4:ac:a4:52:49:54:fd:1d:72:a4:06:4d:44:64:a2:ec:47:e9:
         03:53:ae:0d:75:c6:82:fc:f2:94:73:7f:dd:6c:0a:20:4b:ae:
         c8:a2:04:42:1f:c9:7d:0f:a2:e2:c3:64:43:c2:ef:f7:36:d9:
         9b:04:8f:fe:74:41:94:f3:30:3b:c8:e1:b0:ae:a6:25:5a:7e:
         29:c8:ec:59:29:5a:db:af:e6:15:75:83:b5:88:8b:5e:42:82:
         82:18:58:d9:4e:42:2a:3d:1c:b9:19:c1:9a:8b:27:60:4c:ef:
         8d:b5:fa:f9:c3:56:89:b1:92:8b:86:ef:19:a1:ab:ef:e7:03:
         33:3c:88:9f:5a:f5:4c:22:06:e7:7f:91:9d:52:73:de:5b:81:
         7f:d7:b7:be:ec:28:84:01:a6:3a:41:26:dd:63:68:b2:bc:b1:
         bd:bf:85:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:34 2025 by rpki-client