Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File:                     DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier:          Mji9FN6cwusWtOuCol7taMjbFv715cGqtN9edznPaME=
Subject key identifier:   0E:D2:69:CD:AB:5C:8B:5F:C3:B3:18:82:70:C4:B9:3F:E9:95:70:6A
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer:       /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial:       0196436801E899F3A4E7A56790172ACF6FC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number:          12C7
Signing time:             Thu 17 Apr 2025 11:00:11 +0000
Manifest this update:     Thu 17 Apr 2025 11:00:11 +0000
Manifest next update:     Fri 18 Apr 2025 11:00:11 +0000
Files and hashes:         1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: tkDnJsBne6iVoOMgaCpW581xMKvxO10hR3sCWwu98HY=)
                          2: xjZ1XJhW_cFPR3oT-Y__-eT7BLU.roa (hash: iqLiaW6nsbh481RYQHU8cc/w97YkMP9DpENBWhWu8os=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:68:01:e8:99:f3:a4:e7:a5:67:90:17:2a:cf:6f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
        Validity
            Not Before: Apr 17 11:00:11 2025 GMT
            Not After : Apr 18 11:00:11 2025 GMT
        Subject: CN=0ed269cdab5c8b5fc3b3188270c4b93fe995706a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ed:34:1b:23:67:d4:64:e9:b9:c6:a8:fa:20:
                    a0:9a:d6:26:1d:81:8e:0e:ac:6c:09:16:ba:e7:55:
                    44:98:18:0b:9c:ea:0b:bd:75:c9:45:82:b3:84:53:
                    4b:29:81:ba:95:70:21:73:de:d8:31:88:47:0d:05:
                    5d:0f:7d:34:bd:40:a2:fe:bd:72:98:15:9c:90:10:
                    1b:a2:0f:be:a3:38:a3:46:2d:1b:f1:e4:96:a1:7d:
                    f1:91:df:2e:05:78:62:d8:02:f1:f5:0b:81:50:ce:
                    49:b2:d8:30:51:be:b5:7c:b0:f6:72:93:b2:61:2e:
                    20:c0:ad:8b:5b:0d:27:91:f6:5f:77:13:2d:1e:12:
                    d0:a1:68:6d:f9:76:67:c4:74:a1:6d:53:80:92:80:
                    8f:a9:16:3b:e9:cd:a4:51:4c:c2:7b:83:80:75:99:
                    f1:9c:a8:e9:b7:65:a9:87:6b:03:ef:d6:70:39:5f:
                    0f:f7:0a:21:b7:55:3e:2d:50:39:05:0f:e2:4f:b8:
                    88:9a:25:3b:23:4b:7f:26:d3:74:3f:57:b5:92:20:
                    42:6b:17:1c:88:69:2f:06:8c:3f:37:50:58:73:69:
                    ae:0e:aa:42:68:04:a5:3e:ee:15:b0:d7:25:1c:99:
                    4e:d4:8b:58:6b:61:5b:48:4e:fa:66:92:a0:f0:e7:
                    0e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D2:69:CD:AB:5C:8B:5F:C3:B3:18:82:70:C4:B9:3F:E9:95:70:6A
            X509v3 Authority Key Identifier:
                keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a2:0f:14:27:e6:89:d3:5c:fa:d0:cd:2c:1b:76:8c:aa:ff:
         4e:4d:e5:df:26:c7:4e:7e:31:e6:07:1b:2f:a2:a1:a2:4e:47:
         e1:10:e0:1f:1c:21:aa:d3:2f:b9:ad:13:cc:94:5a:75:74:ff:
         57:d6:6a:4a:3c:60:34:71:14:91:83:a8:03:99:30:8e:44:2b:
         0d:e8:06:26:9e:10:13:26:83:c7:07:bd:d2:8d:3c:1e:d6:e0:
         3e:01:80:e4:7d:b8:fd:e5:18:d9:24:e9:b9:03:6b:3e:d5:b9:
         12:1d:a0:3e:78:23:be:a3:8e:58:23:3d:a3:8c:b5:3e:60:97:
         31:44:cc:45:56:1c:76:c7:9b:83:9c:d2:14:ff:f3:f3:8b:a6:
         96:b1:78:69:77:f0:0e:63:84:af:e9:7a:fb:fe:fc:3f:e3:f5:
         55:44:b9:e0:b5:fd:27:a5:05:c7:6a:88:d4:10:e7:22:56:a9:
         24:e9:c4:2c:9b:ff:8f:d2:12:ea:c7:15:a5:31:35:a8:bf:08:
         97:ea:07:af:3b:4a:eb:f4:3a:54:ba:bd:e9:9e:66:fa:10:db:
         ab:16:a0:1b:ed:92:ac:9e:54:01:b1:7c:e3:b2:ac:95:dd:fa:
         31:66:db:f2:3c:f4:1b:17:43:ca:9c:f4:62:82:9c:da:b1:53:
         3a:41:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:59:59 2025 by rpki-client