Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File:                     B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier:          u9a67nq7yuE3x307dwmI5HdJDkCwMkZ37nKfXEHIJaQ=
Subject key identifier:   C3:C8:D2:CB:C9:32:A4:87:A7:F3:01:8F:88:18:70:45:08:46:D6:76
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer:       /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial:       01968BB875F90D58F90AB20AE28507E41300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number:          0A73
Signing time:             Thu 01 May 2025 12:00:43 +0000
Manifest this update:     Thu 01 May 2025 12:00:43 +0000
Manifest next update:     Fri 02 May 2025 12:00:43 +0000
Files and hashes:         1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: O3Yg0mlsQTKXPUflg70s+e3R0hA+MefR/r2ILTGDm04=)
                          2: o0m8fWeQnLg_XbqIRRPxINGkNnk.roa (hash: hFBwillrrnPw4RwjJ9B6leCvzXkiINuH8WcY9jtsCtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:b8:75:f9:0d:58:f9:0a:b2:0a:e2:85:07:e4:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
        Validity
            Not Before: May  1 12:00:43 2025 GMT
            Not After : May  2 12:00:43 2025 GMT
        Subject: CN=c3c8d2cbc932a487a7f3018f881870450846d676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:f9:2b:d0:27:69:26:2c:de:f8:b4:d1:7b:
                    08:f3:e4:fd:29:f2:90:c6:06:2c:af:2d:ae:80:7e:
                    44:0a:ac:45:8e:f8:c9:c5:5b:80:81:4f:86:ec:31:
                    10:b4:e4:78:8e:67:af:fa:c2:69:c5:50:10:6e:54:
                    00:0d:89:7c:2e:ec:39:2f:5a:6b:7b:f8:54:fd:89:
                    9c:bd:be:fd:f2:ad:1c:60:c2:ac:b8:03:ce:db:f5:
                    7f:39:08:de:65:a2:0c:26:8f:dc:0c:ba:1c:86:cd:
                    ce:b7:41:86:36:5c:33:a2:6e:c0:5a:90:46:88:12:
                    23:5e:ff:51:f8:78:75:b1:9f:01:e4:6b:a3:c6:3c:
                    28:bb:d8:92:7b:01:e2:ea:a4:d7:9f:6d:20:e9:5a:
                    8e:3c:38:b7:7f:ff:7f:5a:da:9d:b4:c4:79:b5:6f:
                    b2:b9:96:19:fd:6c:7d:d7:fd:30:9c:02:c7:58:1d:
                    2c:f6:0b:c5:5d:9b:3b:0a:32:e9:6a:2c:32:07:20:
                    fe:db:6b:33:cf:02:cc:dc:67:2c:00:98:71:63:29:
                    32:7c:5f:cc:32:fb:15:4b:e6:fe:9f:4c:cd:13:f0:
                    8a:df:1a:a4:dd:f8:f6:6f:9d:43:3f:e3:02:a8:b5:
                    ab:94:d3:69:bc:d2:96:c1:e6:41:74:3e:e2:33:c3:
                    8d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C8:D2:CB:C9:32:A4:87:A7:F3:01:8F:88:18:70:45:08:46:D6:76
            X509v3 Authority Key Identifier:
                keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:db:45:3a:33:d2:a3:8c:e9:70:35:35:36:1c:f7:43:69:de:
         b6:c2:62:38:c3:03:3f:2d:12:eb:78:86:7a:45:9a:80:22:f3:
         67:1b:c5:8a:ef:05:ad:b6:4d:5d:54:53:69:3f:cd:85:bf:e7:
         d2:6a:47:1a:e9:db:0d:a4:d5:4e:94:0c:dc:60:29:94:6f:57:
         5b:18:d9:ff:c0:8d:09:79:aa:7d:ef:a2:04:4b:72:cd:f5:ab:
         2e:8e:33:6e:9f:ab:65:1f:e2:0f:99:7a:b5:29:1e:dd:d2:0f:
         8b:36:9b:49:90:0e:cf:68:9d:77:02:cd:3c:52:89:0e:88:3e:
         2d:7a:c8:4a:b4:84:cc:5c:f5:65:f7:d6:52:87:01:81:04:e2:
         81:6c:54:1e:5d:75:3f:29:94:be:c6:b4:0f:3e:df:54:38:e0:
         e1:80:c2:43:27:e0:8f:eb:24:5d:c0:30:60:f6:3c:e5:a0:8e:
         9a:85:a2:d0:2f:84:de:b0:c3:32:ba:5e:4f:12:98:82:fa:d5:
         3a:0c:81:c0:f2:af:6e:b3:3f:7c:7e:f4:70:98:02:bd:cb:80:
         0d:67:eb:91:a9:ad:0f:c4:c5:c4:9a:0d:34:bc:a2:3e:b5:cd:
         2b:13:42:25:3d:21:1b:25:f7:1b:b6:e6:a0:50:7c:89:17:4e:
         da:1a:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:45:21 2025 by rpki-client