Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
File:                     1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json)
Hash identifier:          l9N4Xs6ooDZwmnwsR7Rd4FkocezYty5IVzqEYGNce4Y=
Subject key identifier:   16:31:DC:F4:61:E9:63:50:E3:6A:56:61:F3:88:FA:FF:FC:F0:19:FC
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Certificate issuer:       /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial:       01965236A5E8D3B1EFDACAACC09A13BC2142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
Manifest number:          0271
Signing time:             Sun 20 Apr 2025 08:00:35 +0000
Manifest this update:     Sun 20 Apr 2025 08:00:35 +0000
Manifest next update:     Mon 21 Apr 2025 08:00:35 +0000
Files and hashes:         1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: nU6udQMIPlwYyNvaCwCKfLOXKudUCnMtnOZ5zg21maw=)
                          2: lGuoxPEC-ZxNvepE_9KweYRG1rA.roa (hash: ddFvRAgGNbgqtawi7X97di7STYJ32kUEwzdijgE2enE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:36:a5:e8:d3:b1:ef:da:ca:ac:c0:9a:13:bc:21:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
        Validity
            Not Before: Apr 20 08:00:35 2025 GMT
            Not After : Apr 21 08:00:35 2025 GMT
        Subject: CN=1631dcf461e96350e36a5661f388fafffcf019fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:5c:24:34:3f:da:a0:1f:8c:af:dd:cc:c2:
                    72:15:20:2c:30:0e:ba:07:c1:40:c5:3e:e8:5c:b9:
                    6f:6c:33:95:c4:de:2d:1a:19:e8:e0:74:82:a5:43:
                    12:06:ca:87:ad:20:c4:7d:59:1d:0b:6a:99:32:8f:
                    bc:2c:58:5d:7c:21:77:b1:ab:5e:ea:6e:44:f1:32:
                    e1:fb:ac:06:61:84:f7:74:d4:76:dd:db:10:3f:d6:
                    a9:53:29:f0:21:f7:e7:d7:ef:14:cb:f2:d9:6b:be:
                    3b:d1:9d:0f:fe:90:ef:25:2a:4d:8a:39:f4:77:a2:
                    4f:09:41:54:a4:84:b6:3a:e1:20:87:9c:a7:b4:ee:
                    78:3a:4d:6d:de:c5:aa:b0:78:06:63:88:60:c8:1a:
                    59:3a:98:8f:5b:f9:5a:8d:5f:3f:9e:7b:29:e0:f0:
                    d0:82:c7:8f:ca:ee:8e:08:2d:23:3e:47:10:00:60:
                    8f:66:c9:56:f2:e4:b2:72:7d:bb:e1:b1:b3:d7:83:
                    4c:4a:6a:bc:ec:e8:df:a8:0b:66:21:32:4f:50:91:
                    ff:9a:87:21:ec:47:5e:49:31:6f:d6:69:d7:f6:2b:
                    3e:0b:c4:ee:0b:95:0b:11:03:26:f1:a8:58:a9:ab:
                    39:4d:88:67:c7:cb:dc:15:c4:e8:a3:fa:d3:a8:d4:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:31:DC:F4:61:E9:63:50:E3:6A:56:61:F3:88:FA:FF:FC:F0:19:FC
            X509v3 Authority Key Identifier:
                keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a9:e9:3a:d1:75:0f:a0:74:50:cc:44:9c:cf:69:72:79:b7:
         a3:8f:36:50:7e:d2:7c:b2:6f:b0:a1:08:5d:bb:c0:1d:c0:5d:
         2c:56:1f:ce:9c:49:15:1f:61:ae:9c:60:67:fa:de:00:c4:eb:
         35:45:7f:46:fc:ac:c0:97:2f:45:c8:03:95:58:ce:10:8d:21:
         05:23:6e:d7:04:cd:b1:53:3a:fe:06:05:ef:26:5a:7a:03:48:
         8f:6f:0b:4a:4f:18:a3:8e:7f:89:e5:c1:2e:a5:24:4f:f4:65:
         e0:b3:ca:b5:a8:62:ba:be:85:27:7d:5b:7c:28:3c:01:35:0e:
         41:d0:75:5f:90:dc:cf:5c:de:8f:53:0e:fa:06:86:f9:bf:b5:
         5d:68:b8:70:00:83:c8:24:40:bf:f9:a6:28:f7:11:62:05:42:
         a4:72:ee:38:41:44:84:6a:9d:08:3c:49:c2:0c:f6:cc:89:98:
         11:6c:91:e8:46:46:f8:bd:ef:bd:24:37:81:87:8a:dd:4b:8c:
         fb:45:6d:37:80:f2:ac:7d:98:01:8f:0b:24:3c:52:70:24:8c:
         be:61:f3:7f:8b:b8:bb:c9:66:10:7d:d2:36:8e:39:b7:e9:bc:
         66:21:e9:63:02:f4:4e:d4:c8:9b:0b:8d:b0:55:c5:cd:2f:1f:
         a5:ba:22:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:21 2025 by rpki-client