Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
File:                     0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft (raw, json)
Hash identifier:          2x2jezKCZq6eTW0UBR3XiQL84Vx4nd+Cz5frigphvj8=
Subject key identifier:   6F:24:77:34:1E:22:86:40:68:3D:D9:23:F8:39:A0:00:5A:1A:9B:53
Authority key identifier: D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
Certificate issuer:       /CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Certificate serial:       01968A00C23496E58D3E4AE50A3DD17DE5D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
Manifest number:          1455
Signing time:             Thu 01 May 2025 04:00:27 +0000
Manifest this update:     Thu 01 May 2025 04:00:27 +0000
Manifest next update:     Fri 02 May 2025 04:00:27 +0000
Files and hashes:         1: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl (hash: GltePT9OsyxlZTTaty0YC6cfi4A68VWKBmQpSzjChSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:00:c2:34:96:e5:8d:3e:4a:e5:0a:3d:d1:7d:e5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
        Validity
            Not Before: May  1 04:00:27 2025 GMT
            Not After : May  2 04:00:27 2025 GMT
        Subject: CN=6f2477341e228640683dd923f839a0005a1a9b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:0a:d7:98:c0:fd:40:f9:7e:9c:e8:fd:f0:
                    25:20:89:3b:c9:46:c3:83:3c:2c:5a:75:f5:05:e8:
                    2f:b6:43:ea:49:c5:d5:87:a0:4a:9e:0e:9a:a3:b7:
                    dc:80:3d:3f:69:89:2d:07:d8:ca:e3:f5:40:92:af:
                    bb:cb:eb:56:7c:dd:85:ea:6c:05:27:42:13:12:ba:
                    39:68:4f:d4:2b:09:90:88:14:ae:1d:bf:17:70:40:
                    58:47:a3:16:2a:ad:36:b6:45:f3:cf:b4:9b:be:bd:
                    c9:9b:fc:77:a8:4d:dc:d5:e6:80:c6:bd:f2:e7:2d:
                    79:3a:f5:8c:df:ac:8a:37:ce:68:19:14:cb:a0:22:
                    2a:36:bc:29:e3:92:e1:04:fb:4d:83:f6:3a:61:50:
                    69:6d:59:c4:40:a0:9c:f9:b7:94:9b:81:d6:18:bf:
                    09:29:ef:0c:47:ce:46:26:c7:1b:f5:36:7d:6d:b0:
                    3b:ca:cb:52:57:12:30:25:68:4c:c6:86:e1:57:31:
                    69:9c:dc:36:18:d5:c4:3f:da:d8:4c:45:c3:45:06:
                    93:7e:84:59:29:df:2d:82:fb:6c:f5:aa:31:01:a8:
                    3d:94:ad:d6:aa:7a:5a:00:c5:de:91:7c:66:11:9b:
                    67:3e:a5:ec:37:be:f0:ff:a6:c7:61:27:dd:f8:c7:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:24:77:34:1E:22:86:40:68:3D:D9:23:F8:39:A0:00:5A:1A:9B:53
            X509v3 Authority Key Identifier:
                keyid:D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:03:bc:81:b2:f3:45:e4:c4:b2:0b:72:80:f9:32:ef:db:
         31:6e:fa:c5:5f:c0:2a:17:29:a7:14:b6:79:6f:a9:5c:b6:6c:
         8e:c9:ad:f1:ef:a8:68:1c:e5:37:cc:93:7c:58:b1:9a:dd:40:
         19:cd:33:b7:e7:b5:62:3b:a3:f9:0d:bc:0e:fb:a5:0f:4b:8b:
         58:0e:a1:95:7b:30:9f:70:40:0f:bf:78:d5:bd:c1:8a:79:25:
         2a:69:9c:6b:fd:85:fa:ea:b9:a7:d5:08:36:71:67:20:30:a8:
         cf:20:58:ed:39:23:4a:08:51:de:eb:0c:ba:2a:d7:0c:c0:c6:
         aa:a2:5f:70:3a:45:51:dd:f9:35:57:de:d3:43:ba:91:85:88:
         3f:48:5c:b5:a7:47:17:02:42:d6:25:09:b6:76:7a:0b:d1:35:
         3b:73:cf:2c:80:41:5f:cd:8d:66:a3:dc:d4:2f:a3:9f:89:87:
         ae:10:bd:80:85:46:59:5a:83:15:dd:65:d4:ba:5e:b4:9b:9a:
         2b:cc:3e:da:c5:af:ee:be:8e:59:4a:cf:b5:9f:4a:2c:0b:10:
         dd:a2:19:ff:99:26:bc:2e:49:54:25:75:d9:68:3d:22:97:01:
         a4:75:45:c6:19:e7:67:07:78:7a:73:78:c9:b5:ec:d6:ef:92:
         f0:47:49:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:27:45 2025 by rpki-client