Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
File:                     VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft (raw, json)
Hash identifier:          3rgL90Uk7UedhBQlI6HATE8KWMTwUnLEjAKdW6EqrbI=
Subject key identifier:   23:B1:53:4F:12:E6:9A:BE:F5:05:78:D0:B9:66:E1:17:AF:07:AC:60
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Certificate issuer:       /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial:       01967E6AC0D91212104B52D635EF52C7AFC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
Manifest number:          1513
Signing time:             Mon 28 Apr 2025 22:00:47 +0000
Manifest this update:     Mon 28 Apr 2025 22:00:47 +0000
Manifest next update:     Tue 29 Apr 2025 22:00:47 +0000
Files and hashes:         1: VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl (hash: 67WwnBy1wAfHg4M56fOu0uw5+o+SX41iinNbjZfJun8=)
                          2: bOIrh8o4MvR1wd4C84En4JCn0L4.roa (hash: DG81fv6EP9+XjNFDQGRmy+cQGfBXw0VPtgzqJ5IZAq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:6a:c0:d9:12:12:10:4b:52:d6:35:ef:52:c7:af:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
        Validity
            Not Before: Apr 28 22:00:47 2025 GMT
            Not After : Apr 29 22:00:47 2025 GMT
        Subject: CN=23b1534f12e69abef50578d0b966e117af07ac60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:18:98:e6:ae:e6:02:db:84:68:bf:45:51:
                    98:38:f7:7c:0d:66:13:c8:e2:fd:da:41:50:66:e3:
                    fa:ba:15:1e:3c:e5:70:5e:97:9c:af:ba:05:88:cd:
                    2b:95:cd:1e:9d:b2:5d:d6:b1:4b:0f:1d:51:67:a3:
                    69:d1:fc:8a:6e:fb:d0:18:5f:62:6a:4f:d3:5f:3d:
                    fa:e7:46:1d:cd:d9:07:d8:6b:df:5e:5e:79:98:a8:
                    60:98:e6:8e:06:24:55:fc:95:f5:86:ba:a7:a3:89:
                    e8:29:79:3f:d1:db:7f:d9:d1:ff:43:58:26:51:d6:
                    89:3b:54:72:8f:fa:50:87:3d:aa:c4:56:0e:d4:9f:
                    11:fd:fe:ea:a0:d2:5d:94:32:9b:df:e5:a0:fb:00:
                    45:57:aa:14:b3:87:d3:ab:b8:d7:43:05:52:4e:da:
                    20:7c:03:21:22:86:6c:ad:b9:cd:f7:a8:1e:82:e3:
                    e4:e3:aa:14:dc:53:55:fc:78:4c:16:b3:e6:43:94:
                    62:65:e8:28:fc:a4:bc:21:c4:f4:b8:b5:1e:a8:bd:
                    2c:27:a8:bd:c5:2a:f9:13:e7:b6:08:a7:c3:e8:3a:
                    22:25:4c:10:22:d3:c6:9a:6f:bf:ab:cb:df:4a:69:
                    84:95:5c:e2:1e:17:04:08:9a:8f:94:89:e3:8f:22:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B1:53:4F:12:E6:9A:BE:F5:05:78:D0:B9:66:E1:17:AF:07:AC:60
            X509v3 Authority Key Identifier:
                keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:01:d8:04:6f:b1:05:54:ec:b0:b1:31:2f:4a:74:f3:c8:7a:
         8b:35:7a:85:61:1a:db:ec:38:d0:9b:fb:d4:d7:eb:94:6c:ea:
         d0:1a:f3:14:81:19:c6:cf:ae:1c:4f:89:da:af:80:7a:cc:b1:
         8b:9e:9f:bd:73:c2:da:6a:09:f2:64:eb:65:8e:48:80:04:a2:
         26:96:cd:47:1c:34:6f:d3:1f:6d:f6:e1:d4:06:cf:32:88:0c:
         bc:7c:0b:20:a7:da:e6:93:a7:77:79:15:a8:5e:b0:69:73:6b:
         a4:a7:1b:6f:29:6b:80:bb:6e:85:27:8f:50:42:55:5f:5c:21:
         24:18:0b:c4:6d:28:9c:c3:52:56:4a:ac:2a:0d:b6:30:94:b6:
         0b:97:64:ce:40:5c:8b:27:0c:a0:4b:12:93:c6:86:51:61:18:
         1d:6a:46:d1:ab:81:c6:68:ad:41:54:17:96:35:2c:06:ad:8f:
         83:f3:2c:77:81:0c:4b:1d:aa:a7:f3:73:75:b1:d7:eb:eb:09:
         05:c7:cc:60:90:c8:b3:1b:2b:f2:49:23:b8:7d:f3:96:49:a5:
         90:58:dd:0c:b5:03:14:27:23:91:ec:56:a0:31:d8:5f:a0:d4:
         6a:e8:89:f2:2a:49:d0:83:21:f0:e5:0e:f2:2b:d8:19:e4:6c:
         f8:70:e3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:32:10 2025 by rpki-client