Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
File:                     V3GDYWiNFi_4AjwSJ81kTa45ocA.mft (raw, json)
Hash identifier:          Y3B4y6nOMrF0ylWe0EWxc2Y11MWeK+nq5EtwJDdRDf4=
Subject key identifier:   C7:30:51:7B:72:B1:2D:30:8F:B5:2C:EF:B3:72:09:0A:21:3C:8A:6A
Authority key identifier: 57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0
Certificate issuer:       /CN=57718361688d162ff8023c1227cd644dae39a1c0
Certificate serial:       0196827EB5B735AE2FAB7C11CEFBAC198B44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
Manifest number:          14A4
Signing time:             Tue 29 Apr 2025 17:01:04 +0000
Manifest this update:     Tue 29 Apr 2025 17:01:04 +0000
Manifest next update:     Wed 30 Apr 2025 17:01:04 +0000
Files and hashes:         1: V3GDYWiNFi_4AjwSJ81kTa45ocA.crl (hash: hIK+vZOBk0KuQ7mx09PcwV93oiKj0PZYCbhkN55yMAY=)
                          2: lgeLoySacO5n6-jqTWkewt--0AI.roa (hash: cHeeK4JCsJJNj8Pz7DQjcNm/axVPSQ0h4TJyF4NqSFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:7e:b5:b7:35:ae:2f:ab:7c:11:ce:fb:ac:19:8b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57718361688d162ff8023c1227cd644dae39a1c0
        Validity
            Not Before: Apr 29 17:01:04 2025 GMT
            Not After : Apr 30 17:01:04 2025 GMT
        Subject: CN=c730517b72b12d308fb52cefb372090a213c8a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:96:91:b0:89:1b:6f:c8:d2:22:ce:f0:fe:
                    24:d7:6e:b5:29:ea:a3:a9:a7:a9:5c:a8:39:ee:2c:
                    e3:16:c7:46:b6:1a:38:05:42:08:a5:9f:22:c8:fd:
                    d7:e0:41:aa:5a:71:3a:74:71:2e:58:23:44:fb:71:
                    cb:6c:ce:96:01:0c:ab:e0:70:cf:b6:b5:75:3f:0f:
                    43:cc:6c:42:d4:52:e2:93:1c:ca:f0:67:76:75:3c:
                    85:4e:68:52:b2:a7:b3:a8:ba:52:f5:57:cc:65:18:
                    56:44:47:c2:95:7d:98:66:34:e8:b6:bd:69:7e:38:
                    7f:29:ed:03:bd:57:fd:27:28:e6:5f:14:c8:83:5b:
                    09:1c:87:b4:36:ac:3e:f8:0c:25:6a:84:e1:84:e0:
                    fb:3a:66:49:78:54:f9:92:44:bf:ee:73:78:bf:22:
                    25:f2:12:10:07:f3:0a:96:bf:ae:f6:cc:8e:a5:d7:
                    45:59:bd:b6:e8:62:49:02:d2:02:b4:20:b7:25:15:
                    50:89:e3:7e:a8:e1:d3:8c:85:cb:f7:5a:6e:9f:99:
                    64:8d:80:6e:3d:c9:83:9d:c9:0a:64:fb:b5:b8:c6:
                    a6:e3:ce:06:c3:f8:99:37:3b:50:8f:60:98:9f:1c:
                    ab:e6:ec:d2:cd:ba:8f:17:1e:18:de:8f:73:67:a2:
                    c4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:30:51:7B:72:B1:2D:30:8F:B5:2C:EF:B3:72:09:0A:21:3C:8A:6A
            X509v3 Authority Key Identifier:
                keyid:57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:58:d7:27:dd:f3:64:21:43:b0:69:c0:ab:50:3a:de:2f:7a:
         2f:e0:c5:cb:80:97:9a:38:cc:bc:9b:f8:a8:1b:08:f7:01:9a:
         29:5f:8d:18:d8:3a:36:71:49:02:ec:79:08:d6:9a:fe:c2:ef:
         7d:43:1f:fa:1f:5f:ab:d3:60:5a:5c:66:73:d9:91:c7:b4:00:
         34:ce:a0:93:1c:d5:f9:fa:0e:92:2c:f4:61:a1:12:f7:01:84:
         e7:5d:11:6d:b2:e0:74:cb:05:b5:1f:e5:b9:f1:a2:b9:00:20:
         44:8d:1b:9d:25:23:dd:98:c4:7d:bb:31:e1:46:a7:1c:dc:7b:
         1e:af:de:95:d4:54:57:ca:40:14:1a:f3:24:10:9f:f1:32:a4:
         21:e6:9b:65:d3:e6:99:60:12:4c:70:34:92:da:53:9a:97:fe:
         a8:d3:85:8e:14:1f:96:f3:23:ec:45:a1:e9:b6:5c:8e:eb:aa:
         63:97:3f:c2:b6:8d:18:99:e9:b5:3b:12:de:ba:76:25:2f:8c:
         64:ba:f4:06:61:63:21:df:08:ab:42:50:6a:f6:b7:64:d3:cb:
         fe:22:e4:f1:56:df:06:83:01:e3:e2:e6:e2:65:20:8a:00:84:
         bd:df:30:3d:95:eb:2c:f2:36:52:37:a5:a7:ca:ce:9f:c0:71:
         66:e3:47:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:24:07 2025 by rpki-client