Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
File:                     ImidD5E9Kcxj1skmy0Yssn8YRAg.mft (raw, json)
Hash identifier:          99R2o2ARuzAfoYcBxxPRmS0y4UgdH4IxWDhIG5BE+Ow=
Subject key identifier:   B8:2D:0D:64:5F:D4:CD:E1:37:91:46:04:AC:15:C2:4F:94:C5:AB:BF
Authority key identifier: 22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08
Certificate issuer:       /CN=22689d0f913d29cc63d6c926cb462cb27f184408
Certificate serial:       0196C34C0605A4EF9B9D823621B4DFD999BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
Manifest number:          1536
Signing time:             Mon 12 May 2025 07:01:01 +0000
Manifest this update:     Mon 12 May 2025 07:01:01 +0000
Manifest next update:     Tue 13 May 2025 07:01:01 +0000
Files and hashes:         1: ImidD5E9Kcxj1skmy0Yssn8YRAg.crl (hash: qtYpg0GYHsALxnoB0NH7GWE7F80AeH6YnbS/e/v0YVA=)
                          2: PnGxbbyenKRUkbRi2afvxfE-S9E.roa (hash: JW3Jf++XQ8LN1xPVRRNLBe2ZMK/kXqbkLdynsPQmUsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:4c:06:05:a4:ef:9b:9d:82:36:21:b4:df:d9:99:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22689d0f913d29cc63d6c926cb462cb27f184408
        Validity
            Not Before: May 12 07:01:01 2025 GMT
            Not After : May 13 07:01:01 2025 GMT
        Subject: CN=b82d0d645fd4cde137914604ac15c24f94c5abbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:04:5d:b8:48:a9:df:b9:87:dc:b8:af:aa:
                    b9:2f:5e:6e:26:8f:43:ed:61:0f:fb:f9:d7:75:71:
                    4d:a1:63:de:d2:ee:a7:75:3a:e5:6f:60:aa:d5:e5:
                    c6:f2:5a:f6:77:f6:87:fc:4e:ad:a9:60:71:b5:c2:
                    72:9e:1d:4f:04:93:f2:52:36:55:e1:6d:fd:ab:31:
                    c8:31:6c:a1:27:c3:0e:a6:ea:46:c7:31:98:90:8c:
                    df:0a:24:07:22:1c:fa:4c:19:3e:ba:15:38:91:38:
                    43:19:89:98:4c:b7:d5:b9:35:a0:b4:bf:23:8b:db:
                    44:15:ef:a3:02:53:ec:f0:9b:af:50:d0:74:c5:a3:
                    74:74:a7:7b:04:49:57:87:85:65:aa:e3:8b:89:b7:
                    2b:18:17:a4:7b:76:1c:48:4e:93:88:4e:27:79:c2:
                    d0:d9:ba:bb:af:74:18:ac:27:2e:1d:96:65:73:76:
                    5a:ef:9c:4c:db:98:d6:89:cc:4b:32:1d:c7:58:14:
                    d2:7d:ff:77:9c:48:31:b3:2c:aa:a7:7d:e0:2d:b4:
                    97:bc:7a:35:09:00:b9:0e:36:25:65:83:e8:1f:27:
                    10:da:2a:82:28:75:ac:86:fa:65:bb:09:51:1c:7d:
                    93:7e:26:43:bb:dd:84:1a:85:17:40:9c:b0:06:d1:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2D:0D:64:5F:D4:CD:E1:37:91:46:04:AC:15:C2:4F:94:C5:AB:BF
            X509v3 Authority Key Identifier:
                keyid:22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:2a:4b:9d:71:f1:cf:a8:a8:c2:92:04:f0:5b:bd:1a:2a:ef:
         84:c1:03:ae:61:ae:fc:35:7a:5f:a1:24:0b:62:e9:47:42:1e:
         cb:84:6e:b1:ad:4e:2c:02:6e:a9:a4:98:f7:ee:0a:19:71:df:
         6e:b6:34:7a:af:4d:f0:eb:6c:6e:21:ee:b0:5a:13:85:6e:0e:
         78:32:79:a0:3b:8d:21:12:e2:b9:54:42:e9:90:5b:d9:cf:d5:
         75:21:70:52:1b:3d:6e:cd:b0:6f:8f:8e:84:7b:ef:3a:06:4e:
         f3:a1:47:fa:74:62:1d:db:fe:c4:f0:dc:bd:8f:eb:a3:d8:5b:
         84:06:1f:78:03:fd:93:93:bf:c6:ee:1a:1a:da:fa:a1:68:97:
         1c:41:91:64:b8:54:23:5f:df:2b:71:ae:83:9b:00:c4:9a:5e:
         4c:44:09:aa:8c:9e:67:24:df:77:8c:d1:57:6a:49:8d:cd:40:
         a0:b5:0a:32:5e:e1:46:48:f8:5a:1e:64:9b:d0:8f:ed:9e:62:
         b1:37:2a:7b:a2:b0:d6:ae:ff:f7:61:5b:bb:7e:29:80:4c:dd:
         71:01:e5:da:68:db:36:35:0e:5b:33:52:88:98:7b:60:5e:91:
         c9:70:b0:e8:e8:58:6a:aa:fc:48:89:bf:07:76:4c:6c:01:f6:
         1f:15:ca:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:38:41 2025 by rpki-client