Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
File:                     l0mtdlnaE07UgHT025NBzodRffQ.mft (raw, json)
Hash identifier:          YVT7w1GaV5ypQljIU7wbTwiLEvMQVj1u3UHeB6RGQEQ=
Subject key identifier:   F1:62:28:38:4D:6C:A2:93:86:76:F7:15:37:FC:C0:7A:70:0C:48:4E
Authority key identifier: 97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4
Certificate issuer:       /CN=9749ad7659da134ed48074f4db9341ce87517df4
Certificate serial:       0195903D5E2E9F08D50CF7F4CD84A51AFBA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
Manifest number:          119A
Signing time:             Thu 13 Mar 2025 16:01:35 +0000
Manifest this update:     Thu 13 Mar 2025 16:01:35 +0000
Manifest next update:     Fri 14 Mar 2025 16:01:35 +0000
Files and hashes:         1: l0mtdlnaE07UgHT025NBzodRffQ.crl (hash: fg307n4x0SUj87mgcVQ1A9NCB23MeH0Dtx0AzHcvf3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:3d:5e:2e:9f:08:d5:0c:f7:f4:cd:84:a5:1a:fb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9749ad7659da134ed48074f4db9341ce87517df4
        Validity
            Not Before: Mar 13 16:01:35 2025 GMT
            Not After : Mar 14 16:01:35 2025 GMT
        Subject: CN=f16228384d6ca2938676f71537fcc07a700c484e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7a:10:17:14:98:eb:bf:d7:d1:89:10:a0:38:
                    f5:db:a9:28:55:21:b2:88:25:b6:18:f2:f6:cf:84:
                    70:f8:e2:0e:a0:5f:59:34:7b:21:88:16:c9:c4:80:
                    fe:57:5b:c2:d3:b0:9c:c8:ad:b6:02:42:e0:37:81:
                    03:54:c1:27:18:b0:1d:fa:ca:d0:53:72:c4:5c:f9:
                    72:d4:bb:b0:6c:57:61:c5:b9:05:f5:12:ab:4c:3b:
                    3a:c4:5e:dd:26:d5:12:dd:3f:21:30:79:7c:46:eb:
                    c5:c5:d3:b2:30:de:fa:fe:e2:d0:42:0e:60:bc:44:
                    2c:ef:e2:e9:af:1d:0d:83:db:65:f8:07:5e:4c:13:
                    6a:0d:ac:d7:cc:d5:a7:7e:1e:88:77:08:21:a6:c2:
                    19:34:9d:39:a9:9b:f1:c5:b4:15:45:a5:b9:bd:8d:
                    6b:48:4f:83:9c:35:31:1f:f1:6b:ac:f8:e1:eb:97:
                    9a:44:a7:1c:3e:15:25:39:41:c6:ab:5c:2c:5a:00:
                    19:a7:b9:13:3b:18:ec:70:47:46:28:a4:9a:41:d9:
                    2b:e3:a8:db:16:2e:cb:b0:03:6a:61:6f:63:a5:83:
                    20:6b:d5:8a:b2:69:84:ac:b6:8c:cb:4c:0a:fa:5f:
                    42:65:22:ba:cd:ff:22:3e:ee:65:a6:9e:1d:03:1a:
                    70:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:62:28:38:4D:6C:A2:93:86:76:F7:15:37:FC:C0:7A:70:0C:48:4E
            X509v3 Authority Key Identifier:
                keyid:97:49:AD:76:59:DA:13:4E:D4:80:74:F4:DB:93:41:CE:87:51:7D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0mtdlnaE07UgHT025NBzodRffQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a7011a-6e15-4e9b-ba9e-32d79cc49f22/1/l0mtdlnaE07UgHT025NBzodRffQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:fd:09:ec:75:43:9d:d7:92:a0:fc:24:ee:d2:43:ba:a3:f4:
         a5:f2:64:a6:60:59:52:4a:d3:d8:41:49:d0:de:6b:c1:82:d9:
         95:5e:24:60:b0:44:73:78:63:f9:d9:d4:bb:cc:45:e4:f0:aa:
         8d:7e:e7:f7:2e:8a:64:ae:13:18:c4:10:13:19:7b:b1:7b:dc:
         61:33:d4:10:f6:75:62:23:f2:13:35:c0:94:e4:83:39:13:ee:
         2a:54:45:f3:75:91:c2:bf:60:8f:5e:4b:a5:b1:35:44:ba:2b:
         ae:2f:7d:4b:7b:21:ef:5e:a2:30:ff:25:c6:37:1e:00:78:99:
         2f:f1:b1:a1:5d:5b:97:c4:41:3b:d2:ba:e0:a2:c6:4f:3e:ec:
         51:ce:38:34:5c:f3:7d:83:e1:e2:19:65:c5:d9:65:6a:1a:9a:
         86:89:38:7b:3b:0b:f4:3b:e2:ec:6a:5f:89:11:49:04:10:67:
         42:f8:d2:44:53:17:f4:06:91:40:ba:8d:ae:3f:66:a7:8a:68:
         35:9e:7e:f5:ce:ca:8c:bc:24:cd:45:34:73:15:fd:66:64:6b:
         e7:67:7b:c2:6a:45:21:32:9c:c2:b3:11:a9:a7:36:b5:5c:48:
         d7:a4:67:22:27:32:71:25:76:0b:42:b8:ee:7f:95:bd:49:ea:
         cb:87:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:45:09 2025 by rpki-client