Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File:                     i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier:          bDL3fjXGpa6FzOwzIrBVbSFUCYFTUdD8FGmVGjAjGWw=
Subject key identifier:   62:F5:AF:58:B0:2E:A3:95:16:87:06:B3:FE:A3:1F:29:67:F4:65:28
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer:       /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial:       01964BC6C93D76097EB018E9F26E4E490C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number:          14FA
Signing time:             Sat 19 Apr 2025 02:00:40 +0000
Manifest this update:     Sat 19 Apr 2025 02:00:40 +0000
Manifest next update:     Sun 20 Apr 2025 02:00:40 +0000
Files and hashes:         1: deCTZwf8Lo4tPBt2V0GwD8QTdjQ.roa (hash: FyKYzrCJB3LXbVhWQRcS/ZI/wI5zOqLIDpvmKLMGaw0=)
                          2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: YJ8GFdmIwdz5BDk2rOTgMPPYjoV9Hu5E3UtpYVax6II=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:c6:c9:3d:76:09:7e:b0:18:e9:f2:6e:4e:49:0c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
        Validity
            Not Before: Apr 19 02:00:40 2025 GMT
            Not After : Apr 20 02:00:40 2025 GMT
        Subject: CN=62f5af58b02ea395168706b3fea31f2967f46528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:84:f8:d8:54:9f:2f:d9:c7:f7:d6:00:f2:b5:
                    88:e0:72:5d:24:48:c5:3b:5f:05:f4:09:15:3b:45:
                    d3:13:b7:c2:c3:20:95:88:7b:b9:0e:f2:07:71:96:
                    b0:35:b7:32:6c:53:dc:07:92:6b:9f:2f:95:5a:4a:
                    bf:dd:cb:cc:a3:e0:3f:e5:74:e6:7e:79:cc:86:ac:
                    f5:25:37:f2:bf:f3:fd:ab:e8:4f:34:59:0d:f6:15:
                    a3:c4:01:41:fb:1d:38:49:ba:3c:19:69:3e:c3:a5:
                    fc:d4:05:bc:42:09:15:5f:a7:bc:c8:d2:f1:00:bf:
                    f6:65:50:ec:e3:0e:9e:11:00:3e:a8:1c:6b:fa:59:
                    36:ba:cd:93:ea:c8:62:af:5a:a8:bf:dc:46:84:41:
                    27:8b:bb:2c:1b:63:9b:14:2e:4f:73:e3:b6:c1:b2:
                    71:60:96:83:01:36:6f:6b:eb:a6:cd:c7:34:ea:0a:
                    1e:c0:19:6e:d2:7a:09:5f:0a:66:02:0f:70:da:79:
                    54:40:da:66:bf:2d:24:44:1f:f0:c0:7f:2d:c0:f4:
                    7b:4a:cd:5d:62:76:6f:90:4a:b8:ef:a7:c7:99:17:
                    f7:a9:18:4b:60:49:cd:f8:ba:1a:3f:f0:6c:28:f4:
                    0f:28:37:57:6c:aa:f0:5f:a7:72:99:ec:44:0b:26:
                    f1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F5:AF:58:B0:2E:A3:95:16:87:06:B3:FE:A3:1F:29:67:F4:65:28
            X509v3 Authority Key Identifier:
                keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9a:eb:cd:d3:25:74:07:50:2c:b6:69:d1:71:4f:ed:fe:56:
         a4:d3:dc:08:1f:8a:9f:39:e5:67:e3:2a:01:6f:f5:3d:27:b2:
         29:34:1c:1f:c1:22:f5:94:d9:0b:fd:07:92:90:f2:7e:9b:f5:
         39:14:c8:d4:bb:c1:12:94:42:cb:db:53:0a:1c:83:71:55:f0:
         4a:ef:88:ad:ec:a0:76:0f:af:09:81:c4:bb:b1:cf:29:48:ad:
         3a:0c:20:fc:e6:33:2e:3d:3a:92:c6:0f:6d:85:39:5e:1d:fe:
         c7:90:01:59:2e:13:10:41:15:91:aa:49:28:d8:bb:19:57:28:
         45:29:d3:f3:02:cf:fe:d8:b6:a1:28:4b:a9:52:18:bb:f7:03:
         8e:35:b6:18:a1:dc:5a:5f:10:85:81:aa:3f:78:75:15:e6:b3:
         b8:59:b6:11:e1:d2:9d:c5:0c:d0:70:09:39:2f:53:73:76:93:
         21:71:3f:f1:fe:23:8c:eb:ed:e3:58:9d:bb:ef:ca:0f:ba:78:
         f9:1b:78:39:c1:84:96:e0:bc:86:95:13:72:4e:ec:fb:8e:cd:
         9d:1d:65:85:8f:29:dc:d3:31:9c:e0:3d:55:79:83:a6:09:32:
         99:ca:34:0a:16:9e:77:2f:19:18:55:df:50:2c:0c:e8:27:a9:
         1b:e7:b4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:30 2025 by rpki-client