Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
File:                     RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft (raw, json)
Hash identifier:          dn15nBx2yIE7g/vWryY4wVHYYIjOdwQqFSqFuQKLo44=
Subject key identifier:   69:88:55:EF:80:55:C9:41:53:F8:6C:A5:8C:F5:52:13:7E:6D:45:3E
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Certificate issuer:       /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial:       019683FF0078DE855E6B60B6BEE0E98F142A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
Manifest number:          0404
Signing time:             Wed 30 Apr 2025 00:00:49 +0000
Manifest this update:     Wed 30 Apr 2025 00:00:49 +0000
Manifest next update:     Thu 01 May 2025 00:00:49 +0000
Files and hashes:         1: RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl (hash: 4oF/oczlHYeEdSZvAXX+94kTrgO6cbfL72xDySkc/No=)
                          2: vUZm6nnQuTxWv0zwrqYoRNaKsTM.roa (hash: Jd8FHgIjElXB18MWjUn4lp0g7hpzNeZ3zr50jxllMWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:ff:00:78:de:85:5e:6b:60:b6:be:e0:e9:8f:14:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
        Validity
            Not Before: Apr 30 00:00:49 2025 GMT
            Not After : May  1 00:00:49 2025 GMT
        Subject: CN=698855ef8055c94153f86ca58cf552137e6d453e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:82:3e:ca:9a:bd:f0:0f:a3:b4:13:b2:32:b5:
                    47:73:e1:7e:12:e7:9b:d0:08:76:d0:87:e0:e8:2b:
                    f3:ae:6f:12:ec:7e:1b:11:ec:b7:ff:20:39:b8:f2:
                    0d:af:f4:2c:c3:10:10:c1:f1:ba:a7:0f:3c:ac:db:
                    d6:84:9d:c0:28:f2:9d:95:58:3e:59:a8:6b:19:92:
                    35:eb:3f:01:d1:f3:30:95:00:4e:26:ed:79:5a:96:
                    aa:6d:ae:69:da:d8:ca:68:eb:ab:eb:07:59:cc:84:
                    c3:c8:b6:92:e8:e0:8d:d1:1a:9f:e5:e3:96:ad:83:
                    f3:b4:c9:a5:9a:f4:dc:4d:0a:89:e8:be:1a:43:cd:
                    58:71:50:b9:da:30:0b:9d:36:cd:14:51:30:ae:2c:
                    5d:d7:75:76:55:84:2b:af:47:cc:84:8a:06:82:14:
                    04:d8:70:66:7a:e5:33:71:1c:5b:0c:6f:17:6d:09:
                    da:07:3b:3b:a9:bc:62:f9:90:cf:79:bc:d8:a9:f7:
                    c1:3d:60:47:53:43:2a:d8:c2:7d:6e:7a:c9:94:f8:
                    8a:00:5d:26:5a:50:31:8f:dc:95:0e:0f:e1:c4:8d:
                    82:a2:5f:1f:2a:1b:c6:fc:a7:29:4b:e8:51:e0:a2:
                    32:c2:1c:42:1f:ff:07:23:6b:10:83:76:a5:ce:78:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:88:55:EF:80:55:C9:41:53:F8:6C:A5:8C:F5:52:13:7E:6D:45:3E
            X509v3 Authority Key Identifier:
                keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1a:73:db:34:e8:92:44:3c:a7:22:fa:db:84:a6:54:89:ce:
         a9:ed:f0:4e:3e:99:9f:1f:0a:b3:61:79:8e:cb:fa:f7:2a:30:
         8a:23:ea:3d:2a:3a:e6:89:69:13:05:3e:2b:f8:e9:a2:05:61:
         aa:f9:55:5c:0e:1f:01:5c:9a:50:85:f0:94:22:e8:a6:06:41:
         d8:cc:08:cf:f6:c8:78:16:71:65:6f:c8:0d:8a:f1:a1:95:97:
         38:eb:e1:36:1c:8e:92:f9:b2:f1:69:5b:29:d5:9f:f3:5d:20:
         94:fb:f4:bf:1a:7b:37:ad:ff:44:7c:b0:eb:2c:1a:9a:7f:df:
         13:b2:d9:52:b6:9d:69:d1:77:0a:bb:92:4e:bc:34:04:c4:c4:
         02:53:d9:d2:14:52:06:fe:91:ad:d9:9e:1b:63:7a:8e:ff:6b:
         c1:29:d0:e2:cc:d9:cd:8a:06:5a:68:7d:8f:85:44:90:b1:92:
         26:7a:7e:cf:67:ba:40:8c:a3:21:5a:27:95:92:41:52:1c:8a:
         d0:bb:30:54:fb:72:14:77:ac:98:d4:a2:9f:0a:99:66:9d:85:
         f8:35:98:06:75:b3:ca:55:f9:f8:f2:21:a4:44:78:16:fa:21:
         a7:9d:1c:43:e4:00:ad:0d:49:96:2f:49:f8:06:c7:a8:a4:b9:
         d7:d8:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:27:50 2025 by rpki-client