Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
File:                     SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft (raw, json)
Hash identifier:          qybTjxlMn//KO/+XdBqOyBnsY3cvf0JKuOM1bWXKLsU=
Subject key identifier:   30:4F:C3:1C:78:5A:DA:B7:29:E7:05:20:A8:07:AF:81:E5:A7:0B:93
Authority key identifier: 49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7
Certificate issuer:       /CN=492999fd50a69fd0412065490f5acc75a159deb7
Certificate serial:       019645204414346771208A476691D64E9F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
Manifest number:          1450
Signing time:             Thu 17 Apr 2025 19:01:04 +0000
Manifest this update:     Thu 17 Apr 2025 19:01:04 +0000
Manifest next update:     Fri 18 Apr 2025 19:01:04 +0000
Files and hashes:         1: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl (hash: N3l4CizaDNdi1bDkwsHSmRar1PNDvWg9yWbO8ZqdcxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 18:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:20:44:14:34:67:71:20:8a:47:66:91:d6:4e:9f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492999fd50a69fd0412065490f5acc75a159deb7
        Validity
            Not Before: Apr 17 19:01:04 2025 GMT
            Not After : Apr 18 19:01:04 2025 GMT
        Subject: CN=304fc31c785adab729e70520a807af81e5a70b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:d1:f9:14:b0:fb:79:fb:62:60:e9:fe:51:
                    df:17:14:91:24:ff:08:0b:c1:53:f7:a1:3f:f7:66:
                    f7:cc:ea:86:14:d2:bf:af:c3:f5:f2:87:1d:03:97:
                    46:eb:83:d0:22:8e:6e:8d:c6:66:11:49:01:7d:b5:
                    5c:0c:cc:d9:13:9c:39:a9:22:00:bd:8a:8f:0f:8d:
                    4d:1c:4d:23:17:f8:79:2c:d4:03:f0:b7:da:37:a7:
                    86:05:97:1c:ae:ab:81:8d:3f:9e:69:da:ca:e8:2d:
                    e7:f9:92:4b:ae:73:9a:5e:55:0f:da:21:63:bb:0f:
                    a9:98:98:ca:70:9e:ee:6d:80:8f:22:bb:de:ed:b7:
                    11:eb:b5:d8:56:69:e8:3f:a0:d4:14:8a:2b:89:dd:
                    e5:12:ab:22:ad:d6:98:4b:24:2d:e7:fc:97:4f:22:
                    19:db:03:2b:a0:18:c7:fa:d5:de:c0:6b:5b:41:75:
                    ed:1b:35:22:19:89:70:d3:c0:67:f8:90:df:d2:70:
                    e7:b8:09:af:5b:28:c8:ef:20:71:6c:04:af:ea:15:
                    59:5b:f6:0a:7f:08:dc:21:0a:8d:86:f1:c9:27:0a:
                    83:7b:f7:0e:76:3f:05:06:4e:32:00:d0:f5:73:06:
                    02:49:b1:65:95:b1:53:27:0f:df:e1:91:1f:f1:1f:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4F:C3:1C:78:5A:DA:B7:29:E7:05:20:A8:07:AF:81:E5:A7:0B:93
            X509v3 Authority Key Identifier:
                keyid:49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:25:10:4a:57:32:d9:06:32:66:81:d8:17:f9:db:72:84:9e:
         c2:df:67:6f:ac:23:7a:11:21:89:a3:e0:4b:a3:bc:b2:86:8f:
         e7:b7:aa:c9:cb:4b:0c:23:f6:74:44:aa:30:fe:73:94:1c:fb:
         fd:9a:99:e5:8b:da:66:4d:cb:99:36:0c:1d:05:78:c7:5d:50:
         42:2b:5c:4a:67:53:cd:cf:4d:f2:60:1f:d5:be:36:0c:c0:10:
         cd:c6:6c:11:3b:ec:5d:0b:5a:cb:76:ef:f5:cc:be:9e:24:0d:
         66:20:88:da:c5:54:0e:96:5c:f4:a4:c7:a7:a4:85:dd:b6:dc:
         60:e3:ad:53:27:63:81:d0:e8:64:f9:d8:f5:1a:38:c2:5c:10:
         25:df:6b:3b:ac:e6:9c:fc:29:99:53:a0:ab:2d:40:4b:02:44:
         77:7d:ab:4d:a8:e8:a9:9f:24:24:4b:06:cd:6b:2d:0a:e3:60:
         f8:78:e2:78:bc:29:8c:39:d7:a4:1e:a8:35:94:dd:9e:9b:a1:
         6e:39:b7:04:f0:51:a3:14:66:29:2a:19:a9:a2:ae:5c:e5:f4:
         fd:d0:69:6c:58:03:b6:55:19:b7:a1:c5:09:7c:26:ea:53:c7:
         90:05:39:b9:97:0c:d3:e6:2d:fe:7c:5d:80:cf:7d:ae:51:e7:
         36:3f:bc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:01:35 2025 by rpki-client