Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File:                     N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier:          TFOEik0xE/dhJXrAseSFDEbZyizXuqbq0nMdByG48j8=
Subject key identifier:   D3:74:71:22:BA:B1:31:59:9B:01:EC:62:1C:16:2F:69:C5:D4:CD:27
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer:       /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial:       01964FDA9DCC74545D7A9A1716A97A597307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number:          14FE
Signing time:             Sat 19 Apr 2025 21:00:49 +0000
Manifest this update:     Sat 19 Apr 2025 21:00:49 +0000
Manifest next update:     Sun 20 Apr 2025 21:00:49 +0000
Files and hashes:         1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: nKJkYQ8yT80Fu1287bK/6YFzp77KbtP1ttGohEYpVPQ=)
                          2: Ofe5y963IBdAewU6cuUJ3GOhnPg.roa (hash: wYPWSR0SRCo8lw+izQyw6mN43vzofM40zE5eYO1oT9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 21:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:9d:cc:74:54:5d:7a:9a:17:16:a9:7a:59:73:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
        Validity
            Not Before: Apr 19 21:00:49 2025 GMT
            Not After : Apr 20 21:00:49 2025 GMT
        Subject: CN=d3747122bab131599b01ec621c162f69c5d4cd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:30:87:98:3b:97:72:00:ee:01:31:6a:b7:9e:
                    b0:9c:15:90:96:98:47:18:c5:61:3d:ae:3b:37:85:
                    a0:f6:31:16:51:f3:99:cd:e4:bb:cf:1b:41:2c:aa:
                    55:8e:83:f2:e7:fa:32:6e:f5:85:20:6d:85:0d:50:
                    00:df:de:1e:f2:14:1a:60:30:0f:6a:04:fd:46:fe:
                    1c:b8:22:b7:55:96:3c:40:95:11:bd:22:ba:52:1f:
                    24:b0:68:10:28:05:1d:c5:60:52:82:16:37:f0:e5:
                    03:02:3b:f6:75:d4:a6:cd:ff:2c:7a:21:0f:d6:6b:
                    52:a4:f3:cf:a8:4d:bf:fe:d4:35:0f:55:b3:de:27:
                    01:ed:de:e8:a5:96:c4:d0:ea:8a:80:0c:2e:58:35:
                    1e:cc:66:8c:0a:15:79:b4:25:fc:c8:b1:65:ef:bb:
                    86:d1:d0:20:2c:b8:82:ff:ff:48:bb:9f:38:bc:b6:
                    bf:d9:ab:6c:d9:cd:4b:62:d6:67:09:3f:6a:9b:f6:
                    9c:8a:38:dd:e3:f8:0b:eb:9b:9c:e3:4f:5a:f3:46:
                    40:c0:72:c8:ff:ca:54:5a:bb:0e:68:68:40:dc:ad:
                    0e:77:be:7f:8f:bb:2e:5e:47:9a:fb:f6:5d:64:6b:
                    f5:22:f1:5d:f5:43:45:9e:8d:70:92:a1:dc:34:9a:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:74:71:22:BA:B1:31:59:9B:01:EC:62:1C:16:2F:69:C5:D4:CD:27
            X509v3 Authority Key Identifier:
                keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:02:69:83:2b:a1:c9:21:cc:19:de:c2:59:9e:90:1c:a5:a8:
         88:6c:d7:b7:69:1a:74:76:20:6b:30:25:6e:83:9a:68:e8:27:
         be:3c:1f:8a:3b:36:66:00:94:dc:0f:db:10:c2:2d:64:25:ec:
         4a:07:ad:6c:29:02:1b:fe:f6:35:46:ce:d1:bf:55:d8:45:0a:
         dd:17:f8:7d:17:ed:c2:31:56:e4:4c:b2:13:9a:44:97:2a:7b:
         07:23:fd:53:a8:7b:0c:92:eb:94:36:cb:a3:ba:42:7e:d9:0b:
         dc:3f:3f:7b:eb:5d:d5:84:c5:cb:b0:af:6a:3c:40:26:5c:46:
         46:67:39:76:94:7c:80:80:d0:3e:28:a3:0a:5e:9c:1a:94:9b:
         41:1c:02:22:d9:2c:e6:81:ab:35:d2:ad:70:b0:41:c1:75:ba:
         2b:00:10:d8:ed:55:c7:61:e6:57:19:6f:d2:c2:6a:49:97:29:
         7c:b1:16:db:75:dc:17:e3:3b:7a:80:ce:b0:7c:75:46:f1:81:
         60:0c:f4:5b:7c:76:a2:c1:1f:03:71:c2:93:7e:82:a3:7c:21:
         63:de:36:10:84:9c:38:d1:94:5e:eb:59:02:09:d2:8e:59:a6:
         aa:e1:c1:75:4f:20:09:e4:6d:3a:87:db:dc:28:2c:fa:9c:fc:
         54:be:35:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:20 2025 by rpki-client