Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File:                     8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier:          FBgzKA8PPX07VpbvyA5CNMfhc7OZpd1CvXA0RJoZ1J8=
Subject key identifier:   9D:CA:53:63:4D:14:2A:06:AD:22:77:35:96:F5:F6:29:59:DC:E3:78
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer:       /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial:       01964B21DC665102A68F9A1FE3BC0739423A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number:          0AFE
Signing time:             Fri 18 Apr 2025 23:00:32 +0000
Manifest this update:     Fri 18 Apr 2025 23:00:32 +0000
Manifest next update:     Sat 19 Apr 2025 23:00:32 +0000
Files and hashes:         1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: IXniZIMfbwczthoix/p8giyFfQ2xoxh0UGAGkWM35Jk=)
                          2: rMoZ83VQ7iYFtJcAmlmBDs25c0s.roa (hash: 5UVFXIRMFFdYenUl6z+JEcUUQ5VhSSfJAeVRB/Ej+fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:21:dc:66:51:02:a6:8f:9a:1f:e3:bc:07:39:42:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
        Validity
            Not Before: Apr 18 23:00:32 2025 GMT
            Not After : Apr 19 23:00:32 2025 GMT
        Subject: CN=9dca53634d142a06ad22773596f5f62959dce378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:02:8e:06:5b:9b:e3:c5:0f:1b:4f:5f:8d:
                    eb:b6:2e:e9:5b:69:04:c9:18:59:45:35:d7:e4:bb:
                    51:4f:e2:3d:35:62:ef:f4:f1:c9:f6:fb:7a:ce:07:
                    58:be:d3:2b:f8:6f:8c:57:a7:c0:44:65:45:bc:8a:
                    62:25:05:36:b0:cf:93:20:6d:96:af:44:63:89:96:
                    71:0e:87:b3:82:6e:b5:6b:3b:37:fc:70:66:ea:1d:
                    10:6c:29:96:e4:8b:13:db:36:1c:28:89:3d:3f:d0:
                    84:1b:5e:16:f8:85:32:c4:ad:86:9f:b4:e8:b8:c7:
                    44:bc:8f:e1:62:6a:d2:52:0c:4f:69:6f:35:bf:e2:
                    ed:bb:81:bf:cd:00:f7:75:33:d6:21:25:9f:93:7c:
                    cc:ab:e4:b4:e2:56:fd:39:8c:d2:43:ee:bc:a3:37:
                    e9:ac:27:38:8c:e6:e3:91:ef:64:13:39:76:f4:17:
                    b8:24:ea:d2:2b:ac:7c:46:88:e5:ee:d2:e7:da:a3:
                    52:4d:f3:9c:ea:10:8b:85:f8:03:25:0f:fe:59:ed:
                    be:3c:71:6a:a2:3d:ca:f8:1b:e1:ea:8c:ab:b0:1d:
                    23:ff:41:9b:2c:66:02:34:e1:28:40:0f:6b:a7:af:
                    40:cc:fb:bb:70:99:fc:41:3c:81:29:86:07:0d:7d:
                    f9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CA:53:63:4D:14:2A:06:AD:22:77:35:96:F5:F6:29:59:DC:E3:78
            X509v3 Authority Key Identifier:
                keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2a:72:f2:e0:ef:22:8b:78:7a:59:ee:eb:d9:77:d5:f3:17:
         df:66:c9:c9:c2:4c:a6:8c:75:67:8a:90:00:81:aa:68:3b:f0:
         52:ed:fd:52:f6:3c:e5:bb:7d:84:ad:dc:46:d4:74:c6:93:dc:
         5d:d0:e0:56:59:37:b0:45:ba:b1:2d:f4:98:bb:3a:81:13:5a:
         be:72:1b:5c:3f:52:d4:2e:76:b1:f5:08:5c:05:e6:b1:ae:ef:
         83:e2:b6:68:a2:94:7a:55:cc:99:72:05:ad:e4:f4:92:ef:8b:
         ae:c5:5b:88:71:ba:d3:36:3f:40:02:00:08:51:bd:6e:aa:30:
         61:1b:f4:1e:40:38:ff:c3:8d:45:f7:1b:99:3f:9b:a3:01:d5:
         ce:72:23:d7:d3:76:28:27:70:35:d0:a3:86:5e:aa:9e:7d:6c:
         1d:d0:0a:fd:c1:9d:ea:eb:24:a3:b7:ca:9a:50:fc:0b:cf:86:
         98:e3:13:25:a3:ee:71:aa:b0:e7:0c:ab:01:bc:02:5a:1f:ba:
         60:12:89:45:db:bd:99:59:d1:3e:14:37:c7:be:2d:2c:a5:9d:
         44:17:0b:92:25:c1:0c:ef:0e:c1:2a:0f:fe:c4:51:20:ec:3c:
         39:c6:ad:8e:19:d0:a2:8f:16:e3:1f:92:be:5b:a1:76:bf:8c:
         61:a4:80:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:35:59 2025 by rpki-client