Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
File:                     g4dr-7WujP4Ra7X18oZKEWITqk8.mft (raw, json)
Hash identifier:          IxnnY3VvbmFXB2QRHXglPikLhLgcLQZWLJczmpcZiiw=
Subject key identifier:   CF:B2:EE:99:99:E2:8C:76:4D:1E:95:7E:24:12:6A:57:BC:08:B9:62
Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
Certificate issuer:       /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Certificate serial:       01964AB3F4288391C497B36EBEDBB2EC8BA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
Manifest number:          14F8
Signing time:             Fri 18 Apr 2025 21:00:29 +0000
Manifest this update:     Fri 18 Apr 2025 21:00:29 +0000
Manifest next update:     Sat 19 Apr 2025 21:00:29 +0000
Files and hashes:         1: g4dr-7WujP4Ra7X18oZKEWITqk8.crl (hash: TSjKRDMbeJTSrTE8LBkYr/YBMjd6TkBY5mUUpZPi4ZY=)
                          2: on6c4T5uruUZ19cPvyYxdOa3Uo4.roa (hash: DzOTGbti7Ycex9SFmllizCyD+Zg7ddBWN0hhpKZi1gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:b3:f4:28:83:91:c4:97:b3:6e:be:db:b2:ec:8b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
        Validity
            Not Before: Apr 18 21:00:29 2025 GMT
            Not After : Apr 19 21:00:29 2025 GMT
        Subject: CN=cfb2ee9999e28c764d1e957e24126a57bc08b962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:69:74:c9:4f:83:51:e3:dc:68:53:64:d5:
                    db:a4:ac:e7:17:5d:68:5d:95:ef:2d:3b:57:21:62:
                    48:9d:24:77:9f:75:12:19:bd:8e:a6:3a:59:11:20:
                    10:e9:fa:f4:b6:29:49:5a:c2:c9:07:ce:fd:18:76:
                    0d:7b:fe:26:ed:e8:75:24:15:67:c8:64:34:e8:7b:
                    e9:39:e8:8b:28:37:4d:dd:5d:96:6d:1c:81:35:3d:
                    09:d0:ef:5e:b1:03:6a:c9:69:01:de:30:a0:ca:94:
                    f3:9d:9a:bf:5e:26:78:bd:71:bb:76:15:75:34:26:
                    63:58:1c:b9:a9:a7:fa:6e:48:7d:f1:f1:39:4e:46:
                    0f:71:00:bb:88:c9:43:d7:76:8c:27:4a:00:b6:33:
                    f1:ca:08:f2:32:10:9f:4d:05:4f:8a:f1:26:40:a8:
                    af:1d:66:66:04:41:be:27:23:7c:c7:fa:33:e1:4e:
                    ce:de:12:d7:ea:fb:b7:6e:14:d0:d7:e7:34:a3:c8:
                    f6:a1:14:1e:a0:02:26:30:78:17:7f:70:c3:b7:88:
                    51:ec:00:2e:69:13:f4:1a:78:15:9e:6a:3e:0e:3e:
                    c8:8c:f5:a1:c6:f5:a1:22:d4:f4:10:98:bc:9a:3a:
                    31:a0:ee:19:ae:a2:dd:7c:86:2a:d7:81:cf:52:40:
                    ac:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B2:EE:99:99:E2:8C:76:4D:1E:95:7E:24:12:6A:57:BC:08:B9:62
            X509v3 Authority Key Identifier:
                keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4c:0a:c6:c6:3f:b4:cd:11:a4:18:92:c0:cd:51:ff:1f:7d:
         da:fa:38:60:99:1e:15:8f:e9:0c:db:84:46:60:c8:7a:0d:ed:
         5f:73:ae:d2:4c:86:fc:d2:68:51:7e:95:d9:d7:91:75:a4:f7:
         88:ad:9f:ed:23:21:84:83:c8:97:8f:7b:4c:ff:02:bc:6c:18:
         8c:a6:48:ad:45:93:4f:e2:5f:6d:15:98:bc:b5:70:ed:29:07:
         a4:dc:02:0e:81:17:93:02:a1:ce:eb:8f:cd:a0:92:84:fd:e3:
         1f:1f:d3:5a:d7:3e:fb:60:07:05:25:29:28:de:0a:88:ca:6d:
         79:4b:92:08:aa:56:e5:79:9a:bf:78:31:11:7e:bc:fe:e1:91:
         9c:09:f9:71:88:16:21:43:6e:36:b0:52:5e:80:3e:ef:2f:88:
         86:e5:0b:cf:b1:f3:17:98:0a:54:02:1d:de:12:76:69:49:f3:
         8b:a6:4d:c1:40:81:06:65:e6:f0:cb:44:eb:61:35:8b:4d:11:
         40:b3:2b:9d:f4:65:26:82:00:49:98:a3:80:b3:55:a1:73:41:
         5a:15:8e:10:3e:14:0d:5d:32:e0:9c:91:e5:6d:55:7e:52:31:
         04:f0:ee:de:8e:16:34:eb:1f:af:8c:60:29:14:68:9c:02:ea:
         a5:07:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:04:18 2025 by rpki-client