Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File:                     ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier:          EhepiAz99d8pOnnlrhyxVLZv+GOAukiCETz7z7A6iQ4=
Subject key identifier:   55:28:C5:61:FC:23:AE:8C:05:B2:9B:E1:0C:73:69:79:AE:99:00:90
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer:       /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial:       01968BB7FFAEEC32FC6F51ADAE6E530B92B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number:          1518
Signing time:             Thu 01 May 2025 12:00:13 +0000
Manifest this update:     Thu 01 May 2025 12:00:13 +0000
Manifest next update:     Fri 02 May 2025 12:00:13 +0000
Files and hashes:         1: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: lQnbwXFcVmyCObaL3VEaTbMgwJS54nheh3rQI/94E9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 12:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:b7:ff:ae:ec:32:fc:6f:51:ad:ae:6e:53:0b:92:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
        Validity
            Not Before: May  1 12:00:13 2025 GMT
            Not After : May  2 12:00:13 2025 GMT
        Subject: CN=5528c561fc23ae8c05b29be10c736979ae990090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:14:76:28:cb:55:72:d2:77:6b:58:26:5f:
                    e2:46:9e:4e:58:98:ea:68:db:34:84:58:4a:41:ec:
                    3a:0c:09:27:87:ba:22:87:cc:54:b7:63:03:95:b3:
                    c1:c3:77:98:b3:66:50:f0:aa:f1:1d:86:c5:89:47:
                    1f:50:e6:5c:3b:b9:81:04:6a:d1:8f:bc:41:a5:79:
                    6b:1e:92:88:76:81:2b:b4:5c:aa:39:2e:5e:42:0b:
                    7e:67:97:c0:c3:22:af:39:bf:3e:fa:f2:b1:e2:cf:
                    91:bd:e4:2e:7a:af:b4:8c:64:c6:7b:ae:21:5c:d6:
                    74:bb:ad:07:48:e4:cc:60:65:bd:a4:83:a8:6c:f1:
                    47:0c:c8:bd:53:f7:f8:35:a3:86:f4:03:19:86:3c:
                    34:b2:19:28:b6:7f:19:ba:26:fa:14:d9:0f:f9:7b:
                    d4:3c:e6:89:ef:91:41:ec:30:3c:54:b8:2e:c5:71:
                    e7:51:c6:88:41:4f:6f:32:e9:b5:6b:27:76:d0:35:
                    4a:3c:28:aa:e5:45:78:09:ae:b6:e4:c6:d7:52:06:
                    90:e7:54:38:d5:c2:62:90:11:fa:0a:32:18:18:1f:
                    25:d1:a9:ef:6d:43:b7:f5:24:d6:e8:ad:32:74:52:
                    35:62:7a:b9:7c:5d:3d:74:64:39:17:7e:97:64:aa:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:28:C5:61:FC:23:AE:8C:05:B2:9B:E1:0C:73:69:79:AE:99:00:90
            X509v3 Authority Key Identifier:
                keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:26:b7:76:f7:b0:b9:33:aa:88:49:e2:d7:6a:96:a3:9d:88:
         d7:db:4f:57:24:1f:94:26:97:61:8e:63:57:c8:54:40:e9:26:
         64:7a:e2:e8:ae:5e:0e:da:b7:c0:67:d4:6d:29:91:56:7d:d5:
         09:fb:5e:d8:34:c2:09:73:a6:f5:35:c6:dd:cb:0f:58:d6:93:
         a0:c1:54:a0:ce:37:48:9f:d8:4d:54:cd:1a:2e:ce:24:95:d1:
         56:e2:bb:00:7e:1b:ca:75:a0:1a:50:96:b5:6f:37:3f:45:bb:
         e7:9c:98:80:e9:e1:b8:29:ba:87:96:4f:10:2f:27:e8:27:e6:
         d0:19:64:cd:fc:c8:d6:aa:bc:b8:32:15:40:34:e6:b4:64:6f:
         32:c2:44:16:ac:ca:2d:91:45:3a:79:c6:4f:8a:e2:3b:fb:05:
         4b:57:f8:d5:3d:b8:17:1f:e9:b1:fd:79:80:9d:9f:89:32:95:
         c7:c3:5d:55:6e:24:d2:03:ad:71:9c:cf:ab:3f:bd:4a:b0:05:
         0f:00:53:fa:0f:72:de:c2:28:a2:d2:cf:9b:e0:f6:0d:75:45:
         8d:4a:bd:3a:3c:69:37:d2:5b:4e:7f:fe:b8:91:7e:30:3b:d1:
         ed:0b:37:50:ff:75:00:7d:19:02:7c:8d:8a:b6:6c:05:43:4d:
         3d:48:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:10:31 2025 by rpki-client