Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
File:                     voR-uyRJqE-_ayVcYEAo0UIgLJU.mft (raw, json)
Hash identifier:          wJRhDJMKpg5TG/d+BS5wHtzM/dcBF8rATpEJHmxR0L8=
Subject key identifier:   49:4B:42:AA:22:1D:63:B9:FE:70:93:CA:EB:BD:8A:36:0F:1A:4C:1B
Authority key identifier: BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95
Certificate issuer:       /CN=be847ebb2449a84fbf6b255c604028d142202c95
Certificate serial:       019652A47935510BE03E2124FA823FE88177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
Manifest number:          14F7
Signing time:             Sun 20 Apr 2025 10:00:32 +0000
Manifest this update:     Sun 20 Apr 2025 10:00:32 +0000
Manifest next update:     Mon 21 Apr 2025 10:00:32 +0000
Files and hashes:         1: voR-uyRJqE-_ayVcYEAo0UIgLJU.crl (hash: W8AAeqoftLJeZ8cF5ke00FjQ+DHhOk29A+WoK16CGzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:a4:79:35:51:0b:e0:3e:21:24:fa:82:3f:e8:81:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be847ebb2449a84fbf6b255c604028d142202c95
        Validity
            Not Before: Apr 20 10:00:32 2025 GMT
            Not After : Apr 21 10:00:32 2025 GMT
        Subject: CN=494b42aa221d63b9fe7093caebbd8a360f1a4c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c6:df:93:61:1f:9c:c3:93:5b:c2:07:42:db:
                    9d:b6:8e:e7:76:eb:6a:6c:ee:cd:07:ff:83:62:c9:
                    ed:81:83:6d:b3:4f:ce:89:ca:49:0c:64:0e:43:10:
                    7c:92:44:eb:a1:64:e6:10:86:25:4b:e9:8f:50:aa:
                    f2:74:fb:39:f5:ed:10:68:d5:c7:ed:a9:14:92:72:
                    20:ab:0b:fd:16:11:e3:e9:1d:23:21:0e:f5:e3:e6:
                    b6:f1:6c:de:68:41:fe:3f:0b:7e:5d:c9:22:1e:eb:
                    0e:0b:f1:50:97:90:a0:9c:9c:b4:62:d0:48:06:ab:
                    8c:c0:d9:44:a1:7f:ca:2c:e3:2e:f9:7a:54:1e:1a:
                    54:ab:62:76:31:cc:e9:f5:41:86:3a:ef:24:d1:37:
                    22:6c:6f:45:7d:bc:0f:61:37:d8:3b:14:99:e5:c2:
                    68:8f:e5:69:89:18:b7:fa:32:58:8f:aa:de:fb:14:
                    be:17:ec:7f:74:95:be:50:8d:97:0d:45:65:1c:c8:
                    e0:77:16:c0:9e:80:5d:32:de:94:aa:57:fe:20:b3:
                    af:55:6b:5c:24:f7:f4:16:e1:be:50:a6:46:9f:b9:
                    2d:c6:af:1e:78:2f:c4:24:8a:eb:95:95:7d:e9:5b:
                    f1:62:bd:3b:60:a8:6e:4f:bb:69:4a:df:1f:38:a3:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4B:42:AA:22:1D:63:B9:FE:70:93:CA:EB:BD:8A:36:0F:1A:4C:1B
            X509v3 Authority Key Identifier:
                keyid:BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:fb:e2:b4:b6:85:5e:2f:17:7f:01:1b:69:ed:87:74:a6:54:
         75:a1:26:84:29:3f:cb:6f:3c:7b:1c:12:3f:18:19:c5:0a:ee:
         ee:03:5c:f2:19:47:31:7b:79:52:0e:1b:4f:5c:09:c3:54:20:
         cc:6a:f6:56:d1:42:ee:45:0c:a5:af:92:1a:fd:b1:43:9e:87:
         2f:5c:9c:c7:2d:6a:90:46:2d:8c:d8:85:d8:42:00:da:ad:5f:
         5a:f9:4a:b3:f9:11:1d:10:7d:e1:7b:e3:d6:05:9a:18:15:49:
         5d:72:62:96:e9:16:2c:e6:58:32:22:32:05:30:54:b1:79:47:
         b1:ba:87:29:f3:9a:85:09:68:12:d0:4c:45:66:4c:bf:b9:01:
         82:56:95:7b:d5:ec:b2:30:e3:19:3e:9e:24:cb:fe:db:3a:ae:
         d1:95:d7:74:9e:84:bf:c8:bf:89:d2:eb:29:29:4d:32:a6:b9:
         6a:dc:c1:3e:57:f3:d2:41:a9:fb:54:bd:ae:9c:dc:c0:b7:c0:
         18:26:4d:7f:6a:49:de:00:2e:98:35:64:db:9a:d5:b1:83:81:
         3c:5d:26:ac:a7:6e:16:a5:1e:ce:e1:7d:1b:3c:4c:06:55:e9:
         b5:7b:66:ea:32:29:7e:1a:13:51:d1:83:3a:50:6c:ca:61:e6:
         ab:23:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:58:51 2025 by rpki-client