Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
File:                     oiw84jcbnyHFfgw6V4fZWnNctQA.mft (raw, json)
Hash identifier:          bLxUxolPqri1XM2JYhYgB6FcM5MDUnBlaOmuIUecwf4=
Subject key identifier:   C0:C0:9F:30:45:1B:B2:F0:EB:02:9F:23:D5:00:24:1D:7B:52:6A:C1
Authority key identifier: A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00
Certificate issuer:       /CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
Certificate serial:       01968CCAECF2B420A94231BB68E60454F491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
Manifest number:          0F15
Signing time:             Thu 01 May 2025 17:00:31 +0000
Manifest this update:     Thu 01 May 2025 17:00:31 +0000
Manifest next update:     Fri 02 May 2025 17:00:31 +0000
Files and hashes:         1: U4H4DXiB1R3t2sbazcIxIzp8LJM.roa (hash: d9YRAg9H/qZYSSHmjXFBkp2EkGuj36QH5Z/4fdmKOEA=)
                          2: oiw84jcbnyHFfgw6V4fZWnNctQA.crl (hash: SeDX/lTKM4X8AhONzRjCVxagO3E5C6PUWDs83GIhHNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:ca:ec:f2:b4:20:a9:42:31:bb:68:e6:04:54:f4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22c3ce2371b9f21c57e0c3a5787d95a735cb500
        Validity
            Not Before: May  1 17:00:31 2025 GMT
            Not After : May  2 17:00:31 2025 GMT
        Subject: CN=c0c09f30451bb2f0eb029f23d500241d7b526ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:38:aa:0a:2e:b7:58:28:13:02:de:db:57:84:
                    37:6c:a0:72:08:6c:37:75:ca:42:8d:7c:6b:54:f4:
                    50:1f:30:df:ba:61:c0:d6:d7:24:43:62:2f:35:cc:
                    f0:b5:fb:c3:0b:ec:f3:84:f0:c2:55:dd:3d:ba:3c:
                    01:57:1f:e5:87:d4:70:2c:ad:d4:c1:c6:a8:22:3d:
                    d2:d7:36:10:4a:98:b2:ca:45:0e:ca:37:f2:28:fb:
                    2b:70:3b:b2:86:ce:10:e4:d4:bc:3b:26:68:2a:c5:
                    f7:42:12:01:ea:04:2a:bd:de:51:e5:fd:9c:d8:43:
                    09:ff:ee:fd:ec:96:8f:8f:2b:9d:49:5f:52:21:2e:
                    73:c2:c5:d0:a1:95:3f:21:03:dd:9b:99:d0:e2:2b:
                    ad:a3:35:6f:21:07:85:83:34:70:8f:9a:f1:94:22:
                    5c:68:52:84:77:da:8a:3f:87:0f:f8:0b:9a:4b:ba:
                    05:ff:23:8f:c6:f3:80:62:54:fa:c1:12:2f:8e:1a:
                    5f:f2:8c:85:a5:6f:81:f0:59:1d:06:f8:50:ec:89:
                    26:9d:51:43:13:38:82:00:0e:0f:da:4b:0e:ba:45:
                    14:16:69:65:9e:b2:09:e7:d1:61:fd:4e:2d:7e:0a:
                    8a:ff:93:fd:e8:02:89:6b:8b:6d:fe:37:2d:d5:6e:
                    40:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C0:9F:30:45:1B:B2:F0:EB:02:9F:23:D5:00:24:1D:7B:52:6A:C1
            X509v3 Authority Key Identifier:
                keyid:A2:2C:3C:E2:37:1B:9F:21:C5:7E:0C:3A:57:87:D9:5A:73:5C:B5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiw84jcbnyHFfgw6V4fZWnNctQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/506ec8-150f-4275-ac05-05393f2b3a47/1/oiw84jcbnyHFfgw6V4fZWnNctQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f7:d0:5b:56:e8:34:cc:c4:30:27:3e:74:6c:e4:64:4d:ae:
         cc:6f:8b:94:e0:1c:9d:52:d9:9f:c2:b7:ae:f5:57:1e:99:66:
         44:cf:78:7a:8d:12:9a:98:f0:8f:83:21:e0:9d:a5:7e:22:fe:
         af:18:53:f8:7e:e7:21:8e:fe:98:64:70:63:3e:db:b5:a0:5a:
         e4:a8:97:b8:fe:c5:2a:04:e2:ba:fb:de:62:c4:5d:5d:b0:fb:
         c1:d1:5c:a2:d4:db:d1:7b:5d:b9:06:62:ed:dd:b8:a1:da:c6:
         af:6e:60:55:00:91:2b:a6:d1:50:dc:fe:6b:45:4b:73:3a:57:
         9c:9c:87:7c:e9:71:da:18:42:9c:88:77:60:b2:65:4d:03:81:
         dc:2f:64:5e:4c:fa:37:af:af:1e:94:86:55:9a:7e:0e:dc:fc:
         92:31:25:a9:c7:e8:41:22:0c:f0:fb:dc:cd:91:79:a0:c4:29:
         0b:58:f0:35:da:76:14:72:4c:fd:39:3b:8e:97:01:36:65:fe:
         1c:d7:f3:41:26:08:bc:8d:7b:34:28:d8:87:b6:ed:f9:fc:ea:
         e8:6f:c1:1a:9e:4c:6c:c0:47:a6:3b:d1:9d:36:28:8a:ac:e1:
         15:c7:34:3b:47:c4:dc:19:a1:42:0f:67:9f:cb:c1:08:6e:a7:
         eb:5c:c1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:23:15 2025 by rpki-client