Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
File:                     aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json)
Hash identifier:          07z+kkYxf33HCyWkYGU94CS6kq0X7dPwDN4r7kpSeEs=
Subject key identifier:   8B:09:CB:3D:68:1D:0C:1F:81:10:18:C8:83:14:33:19:69:9B:0C:92
Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20
Certificate issuer:       /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
Certificate serial:       01967A57647230182D80F7FDEAB76E7E0453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
Manifest number:          071A
Signing time:             Mon 28 Apr 2025 03:01:09 +0000
Manifest this update:     Mon 28 Apr 2025 03:01:09 +0000
Manifest next update:     Tue 29 Apr 2025 03:01:09 +0000
Files and hashes:         1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: cnYWvA614ybvXobrISJIkGQQekhP+78oijycWAacUfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:57:64:72:30:18:2d:80:f7:fd:ea:b7:6e:7e:04:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420
        Validity
            Not Before: Apr 28 03:01:09 2025 GMT
            Not After : Apr 29 03:01:09 2025 GMT
        Subject: CN=8b09cb3d681d0c1f811018c883143319699b0c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3b:da:59:c7:7f:04:c2:27:e7:f8:fb:59:12:
                    05:dd:7c:62:f5:08:56:95:fa:ce:bc:4f:e0:ce:19:
                    9e:a0:6a:4b:67:e2:4a:99:ba:d5:04:82:f2:05:6c:
                    30:23:99:fc:5b:fe:00:b2:d1:26:e6:f0:dd:fa:30:
                    2d:35:36:06:7e:d4:eb:8e:4b:ec:02:eb:4b:10:d6:
                    b9:9b:12:fc:f5:87:3b:64:22:9d:4e:d6:04:01:19:
                    a1:55:94:3e:6b:e3:1f:07:5e:34:72:df:5c:c1:c2:
                    42:1e:5c:5c:c7:7b:66:d0:0a:74:64:65:07:b6:78:
                    0b:48:8d:79:0a:3b:87:84:8a:2e:20:50:7f:06:a2:
                    fc:98:c2:99:a1:4c:30:d5:c0:6e:71:41:8b:1b:83:
                    bf:ca:13:af:e8:8b:11:1a:e4:21:dc:19:ef:06:2d:
                    e6:ec:c2:c5:6f:5e:fa:47:a4:e5:83:df:e9:ca:c0:
                    36:ab:9b:29:dd:8a:ad:42:ca:b4:af:b1:0e:87:68:
                    45:cb:88:34:93:6b:6d:43:f6:80:b4:f4:3d:de:75:
                    20:9d:4d:77:eb:7c:50:66:4c:2f:84:47:de:40:43:
                    03:cc:ad:b0:e6:2b:78:c8:52:84:e6:75:b5:a8:90:
                    7b:02:13:e1:06:38:eb:59:68:1c:18:4e:54:f2:ef:
                    a2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:09:CB:3D:68:1D:0C:1F:81:10:18:C8:83:14:33:19:69:9B:0C:92
            X509v3 Authority Key Identifier:
                keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:00:24:16:fd:30:58:dd:c8:fc:83:9d:47:d6:bf:84:e1:6a:
         c6:9f:63:f9:7c:4c:3b:1b:66:9e:04:c5:86:be:cd:03:20:ae:
         fe:56:29:cb:ee:c9:b4:cd:e7:64:ad:83:d5:a8:92:7b:0d:6a:
         ca:89:0c:16:56:91:ea:e7:84:ab:cb:fe:62:86:1c:38:3f:1b:
         6c:ae:d4:9d:4d:3d:69:ac:ac:9f:63:8f:a9:df:1e:8c:fc:7d:
         66:79:f4:b1:13:2e:25:33:a7:0c:18:67:59:73:74:38:be:24:
         8a:3e:4d:67:40:0c:61:48:e7:a3:c9:7e:84:a0:84:5f:00:18:
         e8:14:eb:d0:b6:10:53:ee:82:a2:78:b8:4e:a3:73:b8:86:e9:
         8c:80:9f:1b:4a:15:8e:f7:61:1e:07:17:5b:d3:ee:d7:b0:c8:
         0c:bb:d8:98:5c:4e:40:b5:14:11:0e:6b:b4:ed:2c:14:6d:90:
         19:07:01:be:c9:f5:85:84:8a:b4:e4:01:d2:79:53:94:53:09:
         da:d3:bf:12:b0:6b:2c:da:8f:88:8c:a1:78:07:4c:31:1c:62:
         a0:a7:a6:88:90:99:88:a9:1d:4c:b8:4f:35:67:d6:88:0d:60:
         e4:49:2a:0c:1b:85:ae:6e:9b:1b:21:bb:23:5a:b4:52:78:ec:
         65:76:ce:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:07:10 2025 by rpki-client