Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
File:                     vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft (raw, json)
Hash identifier:          /IMJbUQ1lPErkvWCqcVJLNQxch/jGWgbplbxCdDOtoo=
Subject key identifier:   D6:36:93:87:BC:A2:28:30:AF:45:EF:3F:58:69:4B:30:29:81:41:1D
Authority key identifier: BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87
Certificate issuer:       /CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
Certificate serial:       019642C3F4EB660E47F5B9DE02700384FD49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
Manifest number:          10C2
Signing time:             Thu 17 Apr 2025 08:01:00 +0000
Manifest this update:     Thu 17 Apr 2025 08:01:00 +0000
Manifest next update:     Fri 18 Apr 2025 08:01:00 +0000
Files and hashes:         1: Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa (hash: rJO6XBbSiJFNojO75GzhljDBEykmJAUvcojH0FS1+Mc=)
                          2: vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl (hash: PRB+ow7sWL5KV16/D0kE6S4JcQ88UI/j9yFIYX+ynlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:c3:f4:eb:66:0e:47:f5:b9:de:02:70:03:84:fd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
        Validity
            Not Before: Apr 17 08:01:00 2025 GMT
            Not After : Apr 18 08:01:00 2025 GMT
        Subject: CN=d6369387bca22830af45ef3f58694b302981411d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:2c:c0:5f:fb:ce:81:d1:6a:c2:cc:90:8b:
                    cc:cb:86:5b:d2:9e:78:23:07:fe:37:fa:85:7a:95:
                    14:32:92:69:2d:0e:81:4c:e3:6f:3c:14:eb:cd:c1:
                    36:e3:e7:45:40:f9:5b:89:ac:52:47:87:7e:a3:33:
                    7e:0f:d8:ec:ee:77:9c:30:49:05:37:f0:dc:0f:22:
                    da:ad:d5:0b:25:e5:fc:15:e4:dd:b9:c4:eb:18:d3:
                    f2:f0:fa:71:39:4b:81:8b:df:73:92:6b:21:1a:da:
                    02:86:d5:be:d4:1c:8d:32:77:4b:ca:46:32:7a:8e:
                    1f:fa:01:30:a5:73:ad:55:97:51:6a:5f:ea:44:67:
                    ff:10:b8:f4:7b:0c:47:a4:6c:24:ee:e7:15:d8:5a:
                    87:bd:fa:c8:bf:58:02:44:35:ed:75:95:ea:8e:d0:
                    cd:06:17:9a:9d:a1:52:a9:7e:aa:00:43:a3:b2:3d:
                    53:15:52:a3:90:7c:df:8c:d4:ee:45:8a:6a:c9:2b:
                    be:41:0a:ff:b3:26:98:b1:aa:3d:39:64:98:17:17:
                    54:33:5d:ed:de:04:c2:10:ba:e1:bb:d6:a8:04:80:
                    c6:fd:30:fc:9e:21:7f:45:cf:71:bb:b0:95:70:8f:
                    85:23:34:c1:63:70:96:a4:01:e0:45:5f:e4:5b:55:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:36:93:87:BC:A2:28:30:AF:45:EF:3F:58:69:4B:30:29:81:41:1D
            X509v3 Authority Key Identifier:
                keyid:BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6c:f7:68:f5:b2:85:2d:3d:b2:a4:55:70:9c:fe:ef:46:5b:
         df:be:45:c3:8a:10:43:21:8e:7c:94:57:31:ef:3d:2c:39:1b:
         29:b9:ab:db:d0:64:cc:a7:8e:f2:9a:46:87:26:6c:d9:ac:ea:
         50:c1:40:b3:c6:7f:64:65:ee:04:ca:8d:53:54:47:8e:34:c2:
         0d:eb:41:3b:a1:c0:cf:c0:6b:6e:db:80:30:90:47:29:f5:68:
         1d:d7:ae:52:bc:72:ef:e5:c8:ae:26:54:fc:bd:5e:7a:57:d9:
         ee:27:fa:a3:46:5f:22:76:c4:93:15:37:93:b7:90:9e:50:ee:
         e1:31:16:a2:1b:c4:86:84:83:ba:ca:f1:41:de:1a:14:1f:d4:
         85:7b:91:89:53:1c:98:ee:60:96:c6:d2:18:80:d6:29:44:bc:
         e6:41:59:0f:15:15:1d:cb:ba:28:53:b3:db:cc:ae:08:6c:3a:
         6e:17:5f:e6:53:ae:27:5b:4c:17:35:35:db:fd:0f:33:d5:db:
         11:b5:7d:e1:dc:40:ba:8f:02:f9:9a:cd:34:b2:ee:24:c4:40:
         1a:b3:d1:d5:c7:7b:98:7f:de:43:87:ee:4c:a2:9c:c4:82:7a:
         d2:f0:b7:c7:03:38:38:97:6e:0c:22:4e:1b:3f:cf:17:ee:9a:
         2d:25:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:24:38 2025 by rpki-client