Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File:                     4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier:          9gzJcyzrnkestc99zkk21d77nDcVi1KUAs0j1iVB87k=
Subject key identifier:   46:55:4E:C2:A5:EC:21:AB:CC:38:84:5B:34:B7:D7:A0:F0:01:77:5D
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer:       /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial:       019679E9552CDD20C694441AE8F82B235982
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number:          1511
Signing time:             Mon 28 Apr 2025 01:00:56 +0000
Manifest this update:     Mon 28 Apr 2025 01:00:56 +0000
Manifest next update:     Tue 29 Apr 2025 01:00:56 +0000
Files and hashes:         1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: VsJp3B6Qwhz5X1gzo18LA4A2juJuCCuwrD82E9wFdGY=)
                          2: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (hash: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:e9:55:2c:dd:20:c6:94:44:1a:e8:f8:2b:23:59:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
        Validity
            Not Before: Apr 28 01:00:56 2025 GMT
            Not After : Apr 29 01:00:56 2025 GMT
        Subject: CN=46554ec2a5ec21abcc38845b34b7d7a0f001775d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:f3:c9:a3:d2:d5:a6:89:6e:01:0b:57:91:
                    67:fb:7b:51:81:1b:8f:3b:f7:88:46:30:89:f3:b1:
                    e6:05:82:bb:91:1f:bd:ba:b4:7e:1c:39:c8:a3:92:
                    e0:53:47:07:a7:ce:bb:55:21:61:2e:d7:07:6a:62:
                    4d:0e:2a:54:43:cd:5d:35:65:41:90:1a:0b:da:2f:
                    b2:5d:5d:93:2b:59:4b:c4:5d:1b:0d:17:70:21:53:
                    d2:62:a6:29:72:0f:2f:37:0e:bf:a7:0c:7f:d8:1d:
                    78:6e:27:75:70:46:70:9a:70:13:7e:0a:cc:3b:74:
                    3c:85:2c:8b:d7:0b:f6:1e:4e:84:ae:44:f4:58:e3:
                    7f:34:f5:87:64:49:ea:9b:f3:b0:45:4b:ff:c0:75:
                    47:bc:cb:c0:83:8f:9f:4e:a2:d2:f3:b8:47:1f:19:
                    f0:74:7b:dc:ee:38:7b:bc:c9:df:5c:02:c9:09:66:
                    64:ed:7a:a5:b5:ab:b9:b7:c6:27:6b:2d:f9:49:13:
                    cc:f3:a8:25:6d:77:61:05:0e:4d:cf:15:4a:23:74:
                    c8:e0:52:a3:47:59:01:76:48:8a:f2:0a:02:55:da:
                    e4:20:7c:64:ca:b1:8e:2f:cb:40:07:92:04:f2:d5:
                    de:21:8f:6b:2a:c1:89:ea:ca:31:ec:2c:1a:e2:a9:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:55:4E:C2:A5:EC:21:AB:CC:38:84:5B:34:B7:D7:A0:F0:01:77:5D
            X509v3 Authority Key Identifier:
                keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:58:ca:13:81:ac:d7:61:bd:cb:16:28:ce:f5:f5:73:c3:c0:
         58:ed:54:24:ea:e4:02:98:c6:4e:38:ea:5c:b0:b6:ee:35:d5:
         e9:8d:2c:50:c5:4e:60:c7:d1:fe:da:d9:78:78:f7:57:27:d4:
         10:64:6d:f5:87:66:06:64:17:ad:a8:7c:23:a1:d3:76:68:51:
         53:8d:44:a3:c3:e1:4b:59:36:81:49:ba:b8:c5:ec:3a:c0:66:
         34:f4:dd:17:a6:48:75:39:7c:86:af:17:b6:20:b9:23:26:69:
         9c:1b:2f:d4:45:75:e7:0c:2d:40:52:89:a1:34:2f:d0:5d:d5:
         84:b2:bc:74:40:12:d2:c1:51:24:f3:8f:fb:ef:5a:ac:e0:c2:
         c6:06:f4:df:3a:d1:92:9e:c0:73:30:33:30:65:87:82:5b:37:
         c3:9b:ef:e9:dc:eb:be:62:4b:30:ca:e7:90:f7:9f:8d:a6:ee:
         cb:8d:22:bd:4a:24:d8:2a:e2:51:8f:62:00:e7:5c:a4:3a:a2:
         2b:a2:7e:0e:c4:47:71:35:f7:b0:c7:de:50:d8:3f:97:a6:3c:
         36:c9:ee:fd:93:1b:4a:de:44:76:5b:56:a5:7b:bf:8f:57:e5:
         a5:92:6a:26:d1:64:7a:f0:9c:db:cc:46:ec:06:ff:64:d8:e7:
         72:4c:5d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:26:04 2025 by rpki-client