Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File:                     ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier:          jNWs2MmymlS4q6own/37BDSL22VKKFYD1t/bSWTNCsM=
Subject key identifier:   50:D2:17:C8:4F:1E:1B:7E:05:9D:6C:B9:9B:07:29:B5:B6:2C:26:71
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer:       /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial:       01958B165572B185B71565DB9CF48265E02D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number:          0AE2
Signing time:             Wed 12 Mar 2025 16:00:51 +0000
Manifest this update:     Wed 12 Mar 2025 16:00:51 +0000
Manifest next update:     Thu 13 Mar 2025 16:00:51 +0000
Files and hashes:         1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: 8kOITZkfUZX5pNvWshkojWUWOGggZ4/gq/+DSMbI2kM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:16:55:72:b1:85:b7:15:65:db:9c:f4:82:65:e0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
        Validity
            Not Before: Mar 12 16:00:51 2025 GMT
            Not After : Mar 13 16:00:51 2025 GMT
        Subject: CN=50d217c84f1e1b7e059d6cb99b0729b5b62c2671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:73:94:7f:30:3b:0b:5a:fa:47:15:f5:92:18:
                    34:65:f0:0e:e4:5c:9c:a9:a5:d4:17:21:ba:c8:aa:
                    69:80:7c:36:45:c7:b1:36:06:1b:57:27:e1:2c:2d:
                    25:74:36:20:6e:86:58:c9:47:a9:32:09:18:47:4b:
                    33:c0:10:bb:26:74:ad:a5:d2:7a:38:f4:e4:f7:80:
                    86:b4:4c:27:74:41:80:e5:59:36:4f:11:61:95:ed:
                    8c:78:52:8a:a3:03:4b:ce:df:38:07:51:62:5d:4e:
                    b5:04:8d:f9:66:d2:e9:4a:96:ac:8e:ca:74:8a:99:
                    9c:3a:8d:64:c4:ad:d9:25:f9:3a:3a:ff:e9:80:dd:
                    a5:1a:a8:01:27:b5:78:64:f6:9d:13:cb:81:80:4e:
                    ba:15:1f:9e:54:a0:71:9c:29:25:ca:c3:28:78:3a:
                    51:a5:93:b8:99:a9:e8:35:a5:74:33:7b:d3:11:7f:
                    f6:d1:ff:c9:53:01:ab:d1:19:f6:39:49:9b:4e:47:
                    3c:f1:64:63:ab:c7:47:c9:40:25:89:ef:a2:0f:a6:
                    66:ed:7e:eb:99:ee:5a:6f:42:70:bb:1d:50:de:14:
                    33:25:15:8b:b2:c9:38:ec:bc:b0:66:d5:0c:58:be:
                    d2:5c:94:b9:b8:1d:a8:9a:12:c2:1a:06:9d:9d:d3:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D2:17:C8:4F:1E:1B:7E:05:9D:6C:B9:9B:07:29:B5:B6:2C:26:71
            X509v3 Authority Key Identifier:
                keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:de:b3:12:eb:b6:ec:e3:20:bd:12:6e:ff:47:84:37:10:5f:
         78:e1:2a:a6:39:5b:55:1e:83:01:64:fd:7f:a9:3d:4f:16:6a:
         92:d5:6d:a2:a5:b4:06:ae:57:e9:4f:af:45:28:c4:72:4e:6a:
         c7:bb:1a:f5:b0:4f:04:35:d3:56:34:13:17:ac:f5:b6:85:2f:
         fd:3a:f7:7d:e0:19:ae:bb:5b:d6:33:b4:92:56:1e:cc:15:d1:
         49:0b:ca:09:7c:f9:d1:91:b9:e4:1f:f2:9e:3b:84:fe:ac:27:
         d2:26:1b:52:26:5e:c9:ff:04:d4:63:9b:e7:48:45:c7:e8:79:
         0d:86:2f:65:8d:3d:be:3c:9f:0c:a2:8f:42:94:2a:a4:3f:ec:
         a4:07:1b:9c:eb:5e:61:20:ef:44:b9:44:98:31:bc:a1:a5:72:
         62:36:9d:74:a2:bc:5b:d3:a6:b9:e6:9f:d3:ab:97:ac:6d:2e:
         da:0d:9a:60:e1:cb:46:f2:65:21:5d:c3:d4:3a:dd:22:3c:36:
         40:ea:43:f6:22:6e:e8:b7:62:20:0e:5d:3e:ce:fa:d4:f8:cc:
         f8:8c:d0:43:11:1c:59:6b:f9:54:81:6d:4b:2d:7f:45:67:51:
         9b:37:f4:66:65:41:8f:35:07:4b:ef:98:c1:af:9c:f9:d9:69:
         93:7c:75:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:43 2025 by rpki-client