Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
File:                     oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json)
Hash identifier:          mqYUWIpiiXks4XIKm12A/osWiTAAdHdfeSVC8KVaHPE=
Subject key identifier:   29:27:1D:B7:2B:6F:72:5F:F6:48:F2:58:81:5F:50:6A:AE:E3:C3:27
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Certificate issuer:       /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial:       019651C9500C7EC4CFE7CA66EDEC380B9EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
Manifest number:          14FE
Signing time:             Sun 20 Apr 2025 06:01:09 +0000
Manifest this update:     Sun 20 Apr 2025 06:01:09 +0000
Manifest next update:     Mon 21 Apr 2025 06:01:09 +0000
Files and hashes:         1: _C22KYJjbT7k9Y0F086sSatuYjQ.roa (hash: sGeEeSXLg1Z6VuPUdF3Kx1VfqYaLdwKkzR5hHIgdTMo=)
                          2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: K+iXvOsZCtb4vKiJ6EhKLCr47wKeIe06zIYfHrfUNj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:c9:50:0c:7e:c4:cf:e7:ca:66:ed:ec:38:0b:9e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
        Validity
            Not Before: Apr 20 06:01:09 2025 GMT
            Not After : Apr 21 06:01:09 2025 GMT
        Subject: CN=29271db72b6f725ff648f258815f506aaee3c327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:aa:ba:b5:0a:2f:b5:be:65:9d:d7:2a:fd:
                    65:b9:cb:d5:43:d9:03:1a:a7:6e:8c:1a:e8:bc:42:
                    cf:3f:97:05:a3:31:68:66:47:64:04:29:5d:c1:30:
                    06:d5:94:ad:69:b3:7a:6a:d6:96:39:1c:d7:bc:00:
                    56:19:76:e3:aa:b3:27:7f:e6:28:75:8a:dc:a2:5a:
                    0e:d1:74:86:5e:9c:62:df:91:19:33:ba:2d:d8:05:
                    b3:b2:26:3a:4f:cd:33:87:8f:e3:99:62:3b:e4:6e:
                    d0:4b:0e:e6:17:a9:b6:75:b4:c2:ec:89:83:aa:90:
                    69:57:0b:61:2a:de:ad:42:a9:59:33:70:04:39:bf:
                    ff:7f:f0:ba:95:6d:08:5d:c5:86:1a:b6:b1:c0:45:
                    07:13:7b:6d:ff:e2:d0:5a:07:03:90:da:7d:f1:1b:
                    41:75:59:8c:70:70:b1:67:a6:af:9b:5b:3d:f1:91:
                    c9:14:d7:19:7b:b7:75:6f:c0:9c:63:88:52:48:cd:
                    11:84:fa:a2:5b:09:8c:57:84:91:77:b8:c4:5d:8a:
                    b5:08:35:5b:df:bc:16:c8:d9:64:de:49:94:1e:d8:
                    21:32:ba:49:14:68:5e:bb:4e:3d:04:ce:b4:f6:46:
                    3c:f6:32:8d:0d:83:96:60:08:65:51:e8:d1:35:54:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:27:1D:B7:2B:6F:72:5F:F6:48:F2:58:81:5F:50:6A:AE:E3:C3:27
            X509v3 Authority Key Identifier:
                keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:51:ea:77:ef:1a:99:c2:cb:b2:22:4b:95:c0:06:c9:29:05:
         4d:66:8a:06:48:c6:ff:e6:ed:bd:0b:c9:ff:b0:36:05:03:15:
         6e:f6:2f:cb:34:57:e5:84:9c:a8:22:13:e1:54:a7:eb:01:3b:
         ad:85:49:90:d8:41:72:a4:ff:c8:8b:37:5e:7c:75:f8:58:2a:
         26:6a:0d:4f:51:58:af:65:88:69:8c:59:24:4b:fa:e2:71:8d:
         e8:cf:32:bc:38:32:0d:08:cd:6f:1d:7d:f7:51:b7:82:c3:7d:
         cf:e7:6f:22:6c:cb:a7:cd:77:3c:f5:aa:be:bc:39:f1:70:3e:
         fa:e0:17:54:07:fe:b2:c6:53:7d:6b:e8:74:11:e8:9c:4d:33:
         c7:52:08:b2:01:b1:34:33:07:f0:5b:74:9d:19:2d:f6:e9:bc:
         15:b7:f0:62:a2:40:13:d5:4b:27:24:8c:2a:a9:ec:95:69:10:
         af:c2:c1:f9:b6:08:f7:e5:3c:d5:c6:be:05:cf:74:dc:24:43:
         b7:ab:02:bf:3e:55:04:43:4e:89:a5:e6:0d:aa:31:f6:d2:25:
         86:dd:ef:33:0d:14:98:75:61:b9:eb:05:36:da:83:58:66:c2:
         37:bc:7a:60:a0:e6:b6:94:1b:b5:c2:f0:98:9b:a8:a6:3e:99:
         b5:c9:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:08 2025 by rpki-client