Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File:                     4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier:          AsBd7Jx/1K8DuTrvhQY1DBWQSRXp09QBODqmEcqUCn0=
Subject key identifier:   EA:A0:26:68:3C:8D:35:C5:A7:3F:50:60:23:0A:79:31:EC:2F:E5:30
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer:       /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial:       019677C3B975292AADAE7AA8CE24624EFD57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number:          053B
Signing time:             Sun 27 Apr 2025 15:00:37 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:37 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:37 +0000
Files and hashes:         1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: mohmJn0s1p1aUHSu+G9DlmnzhJcxFyBKYDdeqAJposk=)
                          2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:b9:75:29:2a:ad:ae:7a:a8:ce:24:62:4e:fd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
        Validity
            Not Before: Apr 27 15:00:37 2025 GMT
            Not After : Apr 28 15:00:37 2025 GMT
        Subject: CN=eaa026683c8d35c5a73f5060230a7931ec2fe530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:c9:b5:9d:54:50:5b:72:3a:72:ee:f7:10:
                    14:96:b6:c3:34:fd:68:ac:cc:db:d0:d2:7e:b0:fa:
                    45:c1:94:99:fd:04:57:6e:fb:c2:fe:2d:c3:0f:63:
                    ce:48:12:04:42:d1:3d:e3:e7:51:64:ad:b8:f9:8e:
                    97:22:99:ac:d0:fb:42:fe:20:f9:61:af:2c:38:7b:
                    8a:66:8f:9c:48:40:2c:61:00:e0:67:d6:c2:72:61:
                    b5:14:d4:1a:d0:7e:8c:0b:89:74:b0:75:26:30:3b:
                    86:fa:35:56:87:a4:67:f3:5d:7d:41:2c:c6:97:15:
                    79:94:11:f4:33:34:57:e3:33:7b:51:03:90:ba:a5:
                    21:33:87:e1:4f:ed:44:c5:66:b0:6f:90:ca:98:c1:
                    8a:4f:0c:01:9a:16:47:f5:01:38:6e:0b:b2:8c:a4:
                    91:5c:27:2e:4b:bd:34:7a:b9:09:89:84:38:a4:6e:
                    80:b9:ce:64:a3:9a:f7:4d:90:90:c0:b7:06:f6:2e:
                    98:04:79:ca:5d:49:e0:45:52:bf:01:bb:51:b7:a7:
                    b0:b5:da:76:6d:02:81:5f:ef:9c:5a:da:c3:9f:b9:
                    3b:38:38:9f:4e:f1:b8:d6:11:5d:cf:f5:ac:36:1e:
                    1d:5b:16:f1:0f:3b:0c:95:d5:ca:1f:13:fb:c8:42:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A0:26:68:3C:8D:35:C5:A7:3F:50:60:23:0A:79:31:EC:2F:E5:30
            X509v3 Authority Key Identifier:
                keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d6:22:e8:70:e6:04:01:df:17:54:b3:77:9d:0e:23:0e:be:
         26:e7:21:64:a4:e9:a8:e9:6c:c1:4d:35:98:c9:fc:c6:3f:04:
         3b:76:93:a9:93:0a:cd:9b:7b:8e:0e:7d:d8:ea:81:a5:cc:8f:
         54:88:c7:0a:3b:21:5d:3b:e6:21:9c:de:41:ec:9b:e9:52:40:
         b1:19:7e:a9:fe:9b:ae:1e:7f:49:2b:d5:2a:a7:67:7d:08:fd:
         39:82:e9:bb:5f:c1:3f:52:93:4b:51:0d:72:4d:1c:64:27:e5:
         58:9e:e3:5d:33:d3:46:30:6d:a1:dc:75:2e:7a:dc:9b:3a:06:
         55:d0:76:77:8b:36:fc:18:f7:d1:e7:ed:75:fa:b4:5f:9f:a4:
         d9:1c:81:88:c6:fb:8f:28:07:49:33:ca:6a:8e:84:f0:1d:ff:
         35:5a:65:7a:08:cd:f7:bd:83:85:69:00:0c:bc:3a:e0:f7:7c:
         3e:04:67:d5:6f:00:c7:fe:74:fe:2c:ea:a1:58:3a:31:af:ad:
         df:99:7f:d3:db:d0:41:06:53:94:5f:50:5c:1f:5d:cc:57:50:
         de:23:22:ad:48:c6:8a:25:c5:0a:06:5f:db:0d:2d:8f:0d:10:
         e7:85:21:b0:90:95:d9:2d:bb:25:8d:cf:06:12:d0:88:45:8b:
         16:8b:69:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:01:37 2025 by rpki-client