Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
File:                     YnswW6G6vvS_7GhYHkA51BtfcfI.mft (raw, json)
Hash identifier:          4X/mvcF3ZvZM9bT2W+elyV6VlyktC1JGQ2Dgolh/W94=
Subject key identifier:   A0:8B:50:D9:03:EC:D0:A5:D4:33:F1:E9:C0:07:14:46:7C:E0:59:7A
Authority key identifier: 62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2
Certificate issuer:       /CN=627b305ba1babef4bfec68581e4039d41b5f71f2
Certificate serial:       01968992CA14DB7E2EAD2C6D5B79CF70203F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
Manifest number:          0C2C
Signing time:             Thu 01 May 2025 02:00:20 +0000
Manifest this update:     Thu 01 May 2025 02:00:20 +0000
Manifest next update:     Fri 02 May 2025 02:00:20 +0000
Files and hashes:         1: YnswW6G6vvS_7GhYHkA51BtfcfI.crl (hash: 1G6D5tNxO7xnTN3HR976pspLEEDsE2a9yslar+VpmjA=)
                          2: qe5ykFg2X3b3t6MuR-AZugNF4JA.roa (hash: lYA0LiGE3mwxqKf8EcIyljYtenHVRof/hSBwfSS+hr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:92:ca:14:db:7e:2e:ad:2c:6d:5b:79:cf:70:20:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627b305ba1babef4bfec68581e4039d41b5f71f2
        Validity
            Not Before: May  1 02:00:20 2025 GMT
            Not After : May  2 02:00:20 2025 GMT
        Subject: CN=a08b50d903ecd0a5d433f1e9c00714467ce0597a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:93:78:92:18:91:d3:d7:67:87:d6:44:3c:ea:
                    98:f1:b8:53:3c:9c:fb:e4:96:a9:68:80:83:3a:25:
                    8d:e1:9d:0c:e8:3c:31:fe:63:5d:69:34:c3:e5:03:
                    52:cf:06:d3:2e:35:14:14:5b:9a:89:49:4f:95:ed:
                    b4:14:62:e6:3b:ee:aa:5b:c4:4e:f4:ce:13:41:35:
                    41:7d:6c:7e:7c:26:71:a5:29:33:8e:ae:cd:6f:91:
                    5a:d9:df:14:86:bf:90:73:20:08:d6:8d:29:8f:df:
                    10:59:0f:7a:a9:87:3a:5f:99:62:40:56:10:65:f9:
                    c4:f5:f3:bf:1f:8a:67:e9:c7:6d:78:a4:86:c6:ea:
                    07:cb:06:fa:14:81:45:bd:8d:f5:f9:92:7d:02:72:
                    37:22:21:7b:66:2f:a5:b6:2e:36:c9:89:a4:26:37:
                    95:94:9e:85:fa:b9:f5:a5:54:17:d9:07:08:51:8f:
                    09:e1:33:e9:3f:be:be:5e:7f:db:31:30:25:dc:64:
                    40:15:22:9a:c9:33:84:89:b0:9b:1a:59:47:a8:a1:
                    7f:24:2c:48:74:98:64:59:01:c5:b8:5a:06:36:9d:
                    5a:c6:0d:58:37:99:27:71:ae:fc:65:a8:6a:60:3e:
                    24:bb:ab:12:a7:21:7e:bb:34:75:66:29:24:6b:89:
                    4d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8B:50:D9:03:EC:D0:A5:D4:33:F1:E9:C0:07:14:46:7C:E0:59:7A
            X509v3 Authority Key Identifier:
                keyid:62:7B:30:5B:A1:BA:BE:F4:BF:EC:68:58:1E:40:39:D4:1B:5F:71:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnswW6G6vvS_7GhYHkA51BtfcfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0602d4-55a5-4f49-8cfe-bee7a1839710/1/YnswW6G6vvS_7GhYHkA51BtfcfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:cf:c0:30:cc:08:f1:0c:05:3b:53:bd:50:ea:71:28:cc:8d:
         cc:2e:97:73:63:d8:8d:05:31:07:fe:56:79:aa:7e:db:cf:8d:
         39:87:ef:7f:8d:22:30:96:c2:00:a9:3f:51:0f:31:aa:96:4d:
         2b:06:eb:ae:24:ee:48:f9:55:9c:f8:ce:e3:d8:86:7e:1b:74:
         e2:bc:59:8c:5b:55:6c:4c:5e:b1:cf:1f:c4:f7:6f:b8:f6:10:
         fe:d7:d2:3a:3b:ff:2e:35:7b:e6:de:15:7d:a0:b0:e8:17:c7:
         3b:0b:ea:c5:03:64:a0:fa:0e:18:bd:8c:14:42:98:8c:ff:51:
         7b:56:97:d9:19:2a:3b:a3:5c:fa:ab:17:79:c8:6d:2c:1d:ca:
         50:7e:2e:b3:79:01:95:cd:4f:60:a1:fd:b4:bd:07:70:c3:94:
         a7:f3:98:1f:c3:04:cd:ca:cc:4d:f3:76:0a:1f:9c:02:fb:d8:
         c3:ab:df:8c:23:70:a9:a8:4b:40:01:01:4e:79:bd:9b:e3:86:
         ff:06:4a:ce:da:3c:de:da:7d:c3:22:7e:9e:c9:64:6c:3c:36:
         6a:e5:bb:cb:49:19:46:9d:96:5a:83:3b:0e:db:ff:c3:21:ff:
         11:71:71:68:c8:27:f6:6c:d2:79:8d:7d:5e:a7:9b:60:6d:23:
         48:4a:ac:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:55 2025 by rpki-client