Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
File:                     2rU_myHRPgeOPoRNZF7qhYDxzOE.mft (raw, json)
Hash identifier:          BwM+I7ft4ING7qtk/FcVL2Jbo0gzTsQezB+8rO2Lgo8=
Subject key identifier:   01:AA:BC:17:D7:EB:65:19:B3:E0:8C:E4:1E:09:D0:B8:36:87:8C:A1
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Certificate issuer:       /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial:       019684A3CEF923DF84EAA06C92A5BC84E1BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
Manifest number:          1515
Signing time:             Wed 30 Apr 2025 03:00:49 +0000
Manifest this update:     Wed 30 Apr 2025 03:00:49 +0000
Manifest next update:     Thu 01 May 2025 03:00:49 +0000
Files and hashes:         1: 2rU_myHRPgeOPoRNZF7qhYDxzOE.crl (hash: hM2vEN1r7QKw2R1fQWyAOz+Po3ecvmYzmrVflxJgFzM=)
                          2: gsCygs_SprevwXUwS8ZnM-EYuKU.roa (hash: l1XeBh5SOrL7OGe08dB0VGh4WiJBpNY8AdAQ14ebdBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:a3:ce:f9:23:df:84:ea:a0:6c:92:a5:bc:84:e1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
        Validity
            Not Before: Apr 30 03:00:49 2025 GMT
            Not After : May  1 03:00:49 2025 GMT
        Subject: CN=01aabc17d7eb6519b3e08ce41e09d0b836878ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:7f:b4:d8:4a:67:1f:1c:43:f1:a0:8f:65:
                    99:41:6c:99:df:7b:bd:28:a0:87:5c:29:e6:23:25:
                    62:5a:e0:23:41:27:6b:f2:e6:cb:38:db:9f:46:e9:
                    0e:c9:bf:ec:53:38:89:ea:21:27:01:17:2d:52:eb:
                    f2:5a:08:b7:2c:2a:e9:37:80:dd:9a:5f:bc:85:82:
                    eb:fb:5e:5d:be:b6:05:53:bf:e7:7c:0b:84:61:fd:
                    9a:3f:08:03:65:eb:34:86:62:c0:f9:39:00:a7:78:
                    43:b9:33:2b:ce:b2:86:8b:1d:f1:7b:02:bc:0f:60:
                    03:51:f3:26:27:e1:d7:d7:33:a6:f7:27:f4:8f:51:
                    9f:a6:56:63:cf:8d:39:f7:27:f3:14:1b:14:2e:22:
                    5c:81:54:a8:17:00:59:ca:8a:f5:ad:66:30:2c:a9:
                    e7:a9:83:41:da:84:34:c7:12:ff:10:fe:2c:48:c5:
                    8f:04:ca:8e:cc:03:40:a1:b7:5a:cd:b8:1a:fd:75:
                    77:f8:e5:69:6a:70:41:3e:6b:f4:6d:dc:b8:34:73:
                    8f:5f:dc:62:7f:ea:00:71:7c:c1:1d:17:99:52:25:
                    ed:7a:47:86:4e:15:ad:43:98:8d:ff:12:14:8c:2c:
                    82:68:85:ac:a1:1a:0e:1c:c0:90:9e:dc:49:62:94:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AA:BC:17:D7:EB:65:19:B3:E0:8C:E4:1E:09:D0:B8:36:87:8C:A1
            X509v3 Authority Key Identifier:
                keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a6:67:a1:a7:8e:1f:07:67:52:5d:c8:e3:80:cd:ba:33:e9:
         e9:b0:d7:f2:46:f6:1b:fb:70:f2:29:ad:b1:6e:6b:6b:36:74:
         54:01:fd:e6:4e:d0:b1:d8:50:7e:d3:d6:10:cf:ad:f6:b6:6a:
         ac:ac:92:0a:20:a4:43:b4:6c:4c:9c:ab:31:1b:d6:41:c7:c8:
         cc:54:0f:94:71:43:b3:ea:2c:80:19:23:2b:55:d1:c2:d6:db:
         20:14:ba:2a:ef:3f:8a:cd:a1:a5:24:c3:e9:46:96:f0:51:a1:
         90:c7:7f:35:60:51:9b:91:3e:fb:f2:bf:c5:ba:9e:15:a3:b8:
         46:9c:d5:12:22:36:71:03:f0:84:09:80:92:51:61:39:96:0d:
         77:88:7b:c4:28:62:83:8b:1e:1d:07:e0:f6:f6:44:f0:6f:89:
         6c:e2:57:6d:81:5b:84:cd:43:02:af:a2:8e:5a:9d:9e:8f:b8:
         b4:52:e6:fa:67:b5:b5:4d:0c:22:13:81:fa:15:0e:aa:59:26:
         e3:eb:bd:3f:76:21:fa:c1:e7:69:39:92:68:6c:c5:e9:cf:e2:
         5b:ec:a6:ea:0f:d7:5a:45:6b:ea:72:bc:83:db:d1:55:1d:5c:
         4c:1b:d2:a6:a9:83:dd:9d:31:f1:9f:2c:cb:2f:24:a6:4b:b5:
         13:79:79:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:40:58 2025 by rpki-client