Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File:                     o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier:          uidcRD1nyg3KkAFI41G2Ibgtp8+/pOB+Z0vAJO0NC8U=
Subject key identifier:   E7:EE:D5:D1:7A:17:92:41:DE:03:66:F3:71:19:62:55:34:18:92:A3
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer:       /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial:       01968B813529A70014751D913C8710CDC181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number:          145C
Signing time:             Thu 01 May 2025 11:00:22 +0000
Manifest this update:     Thu 01 May 2025 11:00:22 +0000
Manifest next update:     Fri 02 May 2025 11:00:22 +0000
Files and hashes:         1: 8M6EvOOueKa7PM6SUMWysNV1P1E.roa (hash: tXy3k1V6q4E+Xjy/ypSFyuA9ZzVHmCAzqLsaHasRW9o=)
                          2: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: 8NJ49eZIUofMBuGV6fe0T/ctg1knWNJ2KPNVNxCC76E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:81:35:29:a7:00:14:75:1d:91:3c:87:10:cd:c1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
        Validity
            Not Before: May  1 11:00:22 2025 GMT
            Not After : May  2 11:00:22 2025 GMT
        Subject: CN=e7eed5d17a179241de0366f371196255341892a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6c:e2:0d:26:0d:e2:14:df:7b:a8:b9:97:90:
                    2f:e4:bf:fd:6e:d5:63:09:ac:c3:dd:1d:fd:c6:1a:
                    60:0c:d9:bf:93:cf:a1:b4:11:34:bd:cb:61:18:cd:
                    e1:75:dc:17:1e:05:22:7c:71:90:03:c0:e0:75:42:
                    19:26:52:46:ad:7e:d6:c3:55:99:6a:5a:32:77:00:
                    8c:97:e9:9e:87:0b:85:ef:28:09:d8:28:a8:40:78:
                    4f:09:b6:70:99:47:40:c1:7f:cb:ff:8a:88:22:e4:
                    04:53:96:5c:d8:82:a1:ac:1c:e9:3b:13:0b:c9:78:
                    7e:0d:2b:42:0b:e5:02:33:4f:b5:f2:ed:38:b0:08:
                    e1:6e:51:8b:2d:50:24:8c:0e:9e:1c:6b:ab:a1:ad:
                    f6:20:0f:a1:32:27:15:8f:f8:a7:0e:a5:a7:3c:03:
                    a8:85:f5:0b:ab:ea:19:62:c7:fd:26:16:8c:59:0b:
                    f3:a6:f1:fb:cb:72:06:27:51:1d:a4:5e:21:fc:dd:
                    44:d9:ce:6b:6a:4c:d4:4c:90:f6:16:15:67:42:2d:
                    0d:6a:4c:ac:dc:ca:e7:c5:04:74:59:9e:4b:26:3e:
                    62:b9:e3:a8:10:73:74:27:3e:3b:3b:21:5e:c3:1e:
                    17:f0:31:ad:d7:40:71:ea:e8:f2:dc:5e:07:56:8a:
                    25:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EE:D5:D1:7A:17:92:41:DE:03:66:F3:71:19:62:55:34:18:92:A3
            X509v3 Authority Key Identifier:
                keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f8:9f:7a:74:7a:df:25:df:24:c0:26:ae:69:8f:a6:ac:f4:
         fa:f3:09:17:9b:d7:26:e5:bd:a8:f2:c4:54:50:40:98:f4:ce:
         10:f7:2b:f5:4b:13:b3:a7:41:a8:cc:55:23:03:a6:c3:7c:27:
         4c:3b:fb:34:71:19:ea:14:62:a9:18:e3:11:e0:68:80:3e:af:
         06:b2:4c:92:ac:b7:52:b9:d0:c7:16:4e:51:03:b0:98:bc:53:
         68:c1:97:ac:54:72:1c:02:eb:d4:76:cb:55:74:3b:3e:ee:84:
         ba:28:47:ad:0d:85:1c:af:e8:49:3b:39:dd:c2:69:c3:4a:05:
         89:9d:39:0b:d0:18:3e:f3:c2:49:77:5b:f2:74:ce:b2:d2:76:
         83:9b:35:9c:d5:8a:27:6a:8f:ca:0f:be:e8:3b:f8:53:77:85:
         39:1e:c9:d7:18:13:f2:64:04:ab:ed:78:a4:46:31:61:42:f5:
         ee:68:ed:e4:4d:aa:fc:7b:61:ad:5c:4a:a8:c9:8d:a9:90:e7:
         4a:9d:88:da:a2:3d:ef:b2:56:5d:53:9e:36:d1:a8:45:12:a3:
         d3:13:2c:15:32:8e:94:43:76:7a:9d:04:cc:4c:4b:e6:17:db:
         7a:58:07:45:82:59:cb:c4:2f:61:ee:b3:75:dd:5d:d9:af:9d:
         3a:15:9a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:02:31 2025 by rpki-client