Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
File:                     SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json)
Hash identifier:          6jrpaQxHF/ZRP+N8Z5XTxLLsl3qP9bLBFlmSz538KwM=
Subject key identifier:   00:69:24:F3:F7:83:52:85:D0:71:BE:B0:5A:F8:B1:69:4E:72:22:98
Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
Certificate issuer:       /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Certificate serial:       01964F6CB19A129F049BE78D9FDDE64EBB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
Manifest number:          0CEE
Signing time:             Sat 19 Apr 2025 19:00:45 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:45 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:45 +0000
Files and hashes:         1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: SPBWiUFUvtHsbyJN5N1pON+S9dtQB+Z6P9WqYwhriCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:b1:9a:12:9f:04:9b:e7:8d:9f:dd:e6:4e:bb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
        Validity
            Not Before: Apr 19 19:00:45 2025 GMT
            Not After : Apr 20 19:00:45 2025 GMT
        Subject: CN=006924f3f7835285d071beb05af8b1694e722298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:11:94:89:0a:52:aa:48:f8:e9:53:86:fe:
                    36:70:18:5c:c9:28:6f:47:a2:c1:bc:d1:fa:af:d9:
                    84:20:f3:b1:d1:7d:ed:01:a2:4c:17:7e:02:ca:d7:
                    58:32:d1:69:f8:68:12:c5:3a:23:9d:3b:69:d2:95:
                    88:30:b5:9b:5b:ea:33:f3:20:ef:e5:3d:88:b4:83:
                    c3:1b:e8:e2:ec:53:90:c5:6c:fa:52:6d:45:83:48:
                    ff:c1:08:48:5b:8b:cd:7e:a3:b9:54:0b:9a:24:1d:
                    31:4b:ac:1e:7b:58:dd:1f:7d:a0:2b:14:28:09:8a:
                    73:33:77:fe:6a:81:44:e4:1f:b4:ca:03:98:bd:c4:
                    0e:7c:ea:a5:f7:85:c7:f4:b8:44:25:d2:be:32:e1:
                    67:50:23:69:ed:79:94:42:ed:4e:c0:26:7d:5a:39:
                    9f:11:bb:e6:aa:df:a3:b9:11:fa:c3:84:ff:1d:ff:
                    86:cb:01:42:04:4a:55:c1:1e:51:be:6e:79:b1:f5:
                    d0:5b:9d:6d:4f:b2:9f:ba:ff:e2:57:7b:1a:42:a5:
                    f7:d6:33:f1:45:71:eb:89:c4:80:70:02:8f:7a:72:
                    ff:47:09:94:63:ff:67:86:91:22:4e:1d:fc:07:54:
                    6f:50:44:f6:0a:ce:b4:ed:71:47:13:c6:24:56:db:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:69:24:F3:F7:83:52:85:D0:71:BE:B0:5A:F8:B1:69:4E:72:22:98
            X509v3 Authority Key Identifier:
                keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b8:5c:a8:49:c9:8b:ca:97:e9:f1:b1:ac:be:b1:c1:12:6c:
         25:3c:63:5f:72:b5:3e:70:ea:1c:1d:c8:d5:cc:c5:0b:15:58:
         91:e6:8e:4f:ea:18:b4:c7:20:51:72:33:74:06:aa:6a:a5:42:
         ec:7f:f3:35:9c:f9:e4:27:08:a7:b4:a1:86:23:17:76:31:bc:
         f0:82:ba:76:5a:e0:2d:8e:e5:57:6b:bc:09:ff:72:a7:23:72:
         b7:eb:e3:9b:08:a3:16:b1:8b:d2:16:6f:ee:33:a0:e1:d3:4e:
         77:e9:90:d4:5b:e8:16:7b:fe:14:31:80:0f:ec:70:75:02:83:
         6a:77:52:3b:40:e3:f2:a7:99:17:39:2c:de:84:4a:f1:1f:49:
         48:7d:50:86:d3:83:5a:db:a5:b4:4f:a0:5e:1e:2c:a6:ad:52:
         f7:91:10:e7:5f:18:86:f0:e7:2b:95:a2:98:dc:88:85:64:2a:
         43:9c:c1:f4:e2:c1:14:a1:1b:68:82:5d:7d:a8:d1:f2:55:8b:
         da:33:b2:7a:f6:1d:40:96:c0:23:0c:e3:06:a2:2a:22:dd:34:
         bc:0f:a8:ac:a2:71:86:ce:1f:35:5c:62:22:b7:9d:ae:7a:cb:
         58:be:c3:16:79:5c:c6:45:67:85:03:8f:54:ed:35:c2:d9:1e:
         1d:b8:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:47:39 2025 by rpki-client