Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
File:                     _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json)
Hash identifier:          FQk5uS9bmf8lRwr8UBkw6fkRjx5opoY/fn4en0rQhAc=
Subject key identifier:   80:11:21:81:05:7E:B3:32:44:D7:1D:FA:61:BF:E4:42:D9:1D:B1:0F
Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93
Certificate issuer:       /CN=fe21510e74a5b611a88366a64ed2fb8e60154293
Certificate serial:       019682EC31C67AD880CC93F81EA9A348C9FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
Manifest number:          1514
Signing time:             Tue 29 Apr 2025 19:00:39 +0000
Manifest this update:     Tue 29 Apr 2025 19:00:39 +0000
Manifest next update:     Wed 30 Apr 2025 19:00:39 +0000
Files and hashes:         1: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: zysvqLc94IqTQd7Im0v6bXr2qxYqgk+ZCvKVSO3WhOs=)
                          2: pA-X0SaB0DP88NQK6S16CRpbIws.roa (hash: /lnCuMiAMJ5HoCTByF87eDA744xmzbWJMwOSkdeAHzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:ec:31:c6:7a:d8:80:cc:93:f8:1e:a9:a3:48:c9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293
        Validity
            Not Before: Apr 29 19:00:39 2025 GMT
            Not After : Apr 30 19:00:39 2025 GMT
        Subject: CN=80112181057eb33244d71dfa61bfe442d91db10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1c:e8:69:de:07:2c:34:c7:0d:4a:d6:f2:da:
                    fa:74:9d:32:11:f5:1b:1a:9c:04:55:2e:88:9b:26:
                    11:e1:d5:92:b3:3d:63:61:8f:a6:6b:34:80:17:b8:
                    0e:b6:dc:ed:c2:24:0e:78:75:91:ac:bd:93:f9:55:
                    29:8d:a3:af:0a:c2:2d:65:ba:98:ca:16:d9:46:fb:
                    f8:37:c5:57:c1:e9:21:63:75:ce:c7:3d:4f:7a:70:
                    52:87:14:b6:c0:30:3a:f8:4c:2a:e3:cd:7e:4c:5a:
                    46:83:46:2f:80:9a:74:dd:70:86:a5:e2:db:06:46:
                    9a:f7:17:aa:9a:02:e2:08:f3:01:ba:6f:b2:92:9c:
                    1e:ef:41:3e:ab:52:f8:f0:69:08:b0:51:95:13:22:
                    65:9f:ff:6b:f0:54:66:37:50:3b:77:39:32:3f:48:
                    f6:85:4d:9a:c9:75:2f:e1:ee:23:d9:67:9a:eb:5d:
                    9d:ba:bd:0f:9d:55:48:ad:b8:89:ab:cf:33:59:24:
                    e3:43:55:e6:1e:32:da:74:b0:20:5f:e7:8b:a6:a5:
                    13:46:d3:ed:cd:16:53:7c:5a:ab:9d:77:a8:c1:75:
                    65:dc:a7:1f:c6:f1:eb:bb:e1:3f:72:00:8f:2f:0e:
                    77:64:b0:8e:d7:1e:a0:9f:38:d4:b1:b0:0c:8b:83:
                    77:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:11:21:81:05:7E:B3:32:44:D7:1D:FA:61:BF:E4:42:D9:1D:B1:0F
            X509v3 Authority Key Identifier:
                keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:14:0e:ec:7d:07:3e:0c:76:1b:34:0a:5a:6e:88:07:d8:5f:
         25:ff:da:f1:77:65:10:00:80:fb:5a:db:cc:18:f5:51:59:6f:
         7a:f1:aa:ab:48:46:9e:0e:39:34:55:a0:9b:1c:d4:4f:e7:f4:
         ce:0d:87:aa:a4:c8:fd:56:b1:b0:ea:12:53:00:80:56:d1:f9:
         08:a8:f7:1e:9e:aa:eb:a5:71:69:88:53:09:69:14:5d:ee:08:
         d3:2d:8c:8d:51:ff:53:bd:aa:30:65:10:e8:85:55:de:a4:58:
         c3:49:5b:e6:c8:a1:b7:df:db:f8:ab:7d:50:03:f3:65:87:b7:
         94:24:de:47:97:41:b1:d7:0f:12:da:eb:d2:6e:bd:9c:03:33:
         87:ec:18:e6:ac:fc:95:2f:68:23:10:9a:ee:a9:6d:da:f1:0b:
         43:71:bd:57:21:31:7c:be:9d:6e:eb:7d:c1:37:71:f3:00:73:
         a8:09:dc:f5:bd:c4:a6:2c:4d:99:7d:3b:36:57:6c:de:36:1b:
         b0:f4:93:12:7f:cc:d7:69:92:f9:85:4d:f2:57:8a:80:b0:12:
         b6:9f:7b:b8:34:b6:6f:6d:0e:dd:92:c8:37:2d:b8:0f:f9:7e:
         9f:de:d4:ab:fe:02:6b:45:bf:c6:d8:6c:7b:18:25:60:3f:a1:
         ae:b2:8c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:45:40 2025 by rpki-client