Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
File:                     FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft (raw, json)
Hash identifier:          U3CedtLVuYDFuAnqazQWbv91Y3v0rOQ+XMXxj7G3Vfc=
Subject key identifier:   F2:C5:AE:BB:52:B9:CA:EC:F4:58:9B:AF:ED:86:16:BD:EE:A0:76:56
Authority key identifier: 14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1
Certificate issuer:       /CN=14a9d3c7406e276005488871d5218c05a07166d1
Certificate serial:       01968F27919639479C54492313F2FFBFD93F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
Manifest number:          0ACD
Signing time:             Fri 02 May 2025 04:00:56 +0000
Manifest this update:     Fri 02 May 2025 04:00:56 +0000
Manifest next update:     Sat 03 May 2025 04:00:56 +0000
Files and hashes:         1: FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl (hash: pdr6CkRuJzFTttug8uUHNZFTcKYOWdpiPJIb1XwdZQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:27:91:96:39:47:9c:54:49:23:13:f2:ff:bf:d9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a9d3c7406e276005488871d5218c05a07166d1
        Validity
            Not Before: May  2 04:00:56 2025 GMT
            Not After : May  3 04:00:56 2025 GMT
        Subject: CN=f2c5aebb52b9caecf4589bafed8616bdeea07656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:d5:9c:fa:df:02:b7:91:ef:67:6b:6c:1c:
                    aa:2b:2c:77:06:d3:16:0e:71:0f:f5:83:f2:9a:d2:
                    01:9a:56:42:a8:f0:c7:34:46:c8:be:95:eb:e1:30:
                    88:74:40:bd:69:91:03:fa:ee:86:63:14:de:94:ea:
                    71:82:3f:26:c7:97:f4:7a:3e:aa:85:8c:98:31:a7:
                    3e:8a:01:be:77:b2:e7:0f:75:20:76:1d:59:90:7f:
                    64:45:51:ba:2c:91:69:f5:38:84:df:8a:90:a6:64:
                    1b:51:b6:7d:0a:d9:95:4a:bd:eb:30:15:ee:e8:a0:
                    83:12:a6:f2:81:ba:e2:7d:4a:a5:6b:6d:6a:a4:59:
                    f4:71:ba:ee:29:59:5f:d9:41:ce:d2:33:1c:e9:b4:
                    e8:1f:58:61:42:e6:28:06:6f:4c:91:99:cb:5b:18:
                    41:d7:cb:30:75:4a:c3:ef:5c:a9:5f:97:a0:1e:2f:
                    07:ec:2f:5e:a6:52:df:b1:0f:27:fe:d0:1b:8b:be:
                    08:e3:a1:ae:d3:ab:a7:d5:f4:5f:c9:ae:43:0e:3d:
                    2d:b5:5d:53:95:44:61:13:ec:01:a6:61:31:20:da:
                    bc:29:26:56:4c:13:a4:9e:bf:c0:38:c0:ed:35:3d:
                    08:42:6a:45:b1:d6:eb:d9:c6:a5:c1:04:7b:eb:bf:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C5:AE:BB:52:B9:CA:EC:F4:58:9B:AF:ED:86:16:BD:EE:A0:76:56
            X509v3 Authority Key Identifier:
                keyid:14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:dc:65:b4:c1:8c:d0:9d:b7:d8:3e:ae:5a:34:63:4f:12:77:
         e4:7d:43:8f:81:2d:5d:10:00:e1:e0:9d:10:cd:55:86:f1:b2:
         c1:9f:25:dd:d9:85:0d:a1:f6:49:2b:04:86:f9:f9:6c:f2:fe:
         09:69:b7:7e:86:49:e5:6c:5e:45:06:28:15:86:84:d6:61:4f:
         04:e5:dd:f5:bc:17:bb:c3:a3:7e:17:97:21:1d:16:05:64:9e:
         a0:74:2a:01:2d:e6:a9:f5:73:49:c4:07:66:af:7f:74:98:78:
         0c:da:9a:f9:89:b3:da:42:af:9b:1f:2e:92:25:d5:f1:e9:1f:
         62:89:cf:4a:9b:23:67:9b:62:45:de:5c:a7:d0:a2:14:8b:39:
         df:7d:f4:af:13:54:f7:16:c4:03:cf:87:a8:a6:aa:5f:08:2b:
         c5:10:2e:ec:ff:0f:bb:5c:db:7f:e2:65:55:9a:f0:6e:ca:41:
         c3:9b:77:a1:1b:e3:88:16:c4:5b:7a:e2:81:9a:a4:53:63:b7:
         45:14:4c:22:50:50:98:d2:d2:f0:d8:3b:a4:3b:fd:03:64:71:
         64:51:c2:c4:b5:dd:ed:d5:8c:f0:e7:8d:8e:69:89:4f:32:36:
         ed:f8:58:ac:46:21:b6:dd:c6:c0:84:19:fd:91:11:5c:d0:25:
         c9:b5:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:40:05 2025 by rpki-client