Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
File:                     Yg0Py0uU5BGo3iYgncFeMt-omqA.mft (raw, json)
Hash identifier:          9YAT61bbA7S+GkyMc4fQBsjXbZnTTqAFBLW/gHWjFHw=
Subject key identifier:   11:D5:57:88:D1:54:B7:E4:4D:FB:9D:49:C8:74:7C:94:3A:42:9A:05
Authority key identifier: 62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
Certificate issuer:       /CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Certificate serial:       019652A4E5156AB86D3CE5ECE3D6DAABB769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
Manifest number:          08C5
Signing time:             Sun 20 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 20 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 21 Apr 2025 10:01:00 +0000
Files and hashes:         1: Yg0Py0uU5BGo3iYgncFeMt-omqA.crl (hash: wWakqQxlztM8HePzzya+hmcmZXd/T4upoiIx1q1/ld0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:a4:e5:15:6a:b8:6d:3c:e5:ec:e3:d6:da:ab:b7:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
        Validity
            Not Before: Apr 20 10:01:00 2025 GMT
            Not After : Apr 21 10:01:00 2025 GMT
        Subject: CN=11d55788d154b7e44dfb9d49c8747c943a429a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:7b:00:08:20:a2:34:71:40:6f:0d:41:2f:
                    4e:61:25:7e:2b:99:17:58:7e:fd:70:f8:6d:63:cd:
                    88:fb:c4:29:0a:20:49:52:99:04:19:3a:4a:47:5c:
                    85:98:7b:62:45:cb:9c:48:a1:0a:a6:a7:f6:ba:60:
                    6a:3f:e1:39:fb:09:e9:92:9a:98:70:6b:9c:99:99:
                    fa:1e:48:6f:e4:30:3b:e7:35:c9:6a:54:86:cf:5b:
                    74:48:a4:7e:99:9f:1b:1e:69:79:10:ee:d1:93:f2:
                    fe:43:d9:61:4d:8f:42:ef:cc:81:45:2a:50:85:8b:
                    a4:7d:06:ed:ef:43:8b:30:bd:4d:ff:fd:77:a2:91:
                    0a:41:fa:5a:6e:55:c5:ad:d0:e0:32:9d:1e:ba:aa:
                    61:cc:37:57:5a:df:d4:16:f2:87:8c:dd:45:2a:f5:
                    ab:04:b4:82:2a:c9:04:ee:be:c3:9a:bb:24:45:bc:
                    ab:93:5c:87:dd:5d:ab:06:89:c0:e7:a0:f1:bc:ab:
                    02:a7:0b:ad:d7:65:c3:2c:f1:c6:c9:a5:e7:90:38:
                    db:c6:52:63:81:12:44:7d:79:dc:5a:40:20:0c:eb:
                    11:d6:31:d8:26:91:a8:7e:10:ce:31:8b:5a:34:ec:
                    f7:be:cb:da:22:8f:3e:b6:ac:74:b0:98:94:f9:9d:
                    19:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D5:57:88:D1:54:B7:E4:4D:FB:9D:49:C8:74:7C:94:3A:42:9A:05
            X509v3 Authority Key Identifier:
                keyid:62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c3:23:ec:b8:47:6a:86:9c:05:81:96:cc:2e:28:6f:d3:ff:
         d6:74:df:07:d5:dd:b1:83:cc:00:d2:ea:bc:e1:f3:3a:0f:09:
         fd:c5:2c:0b:59:2a:a5:1f:72:40:ed:aa:29:35:ab:da:fd:18:
         b5:81:c1:12:d1:30:36:68:e3:35:ba:65:29:c6:cb:91:b7:38:
         86:ec:1b:47:7b:fd:73:b5:7f:4d:bc:73:01:73:b1:ac:4a:03:
         6b:ca:ab:0c:8f:4f:1c:7a:fb:0c:be:a7:37:6e:38:6f:28:b1:
         5d:39:a3:5f:82:09:bb:80:90:77:76:1b:d5:6f:95:c3:5d:5f:
         07:01:9c:06:85:96:13:df:82:2f:ef:29:d8:c3:7a:42:2f:dc:
         64:4c:5a:3a:65:e7:8c:b2:77:f6:e3:21:ee:dc:4a:cf:30:9a:
         ca:7a:38:a6:23:3f:53:5c:47:d9:90:02:01:b6:6d:da:fc:f3:
         69:80:8e:34:59:fe:a2:34:02:80:38:24:9d:73:fe:98:10:f1:
         a1:75:d3:51:ff:66:71:32:ce:f5:5c:56:b5:22:cd:d8:d2:1f:
         ac:00:40:94:fd:59:15:78:47:e8:e7:b1:7e:c2:da:9a:1d:3f:
         96:3b:c6:c1:6b:f7:40:e7:fb:c1:9b:7e:05:50:5e:38:c0:89:
         d3:05:00:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:21 2025 by rpki-client