Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
File:                     RRZvo3x2TNxioAvKKyssh5_2mdk.mft (raw, json)
Hash identifier:          0mLrSJpclHk79VQFqH1a9pCLmBJ4M6tI/jP0bHNAlMo=
Subject key identifier:   57:0A:03:47:73:5A:66:F1:3F:62:4C:67:25:3D:91:57:7A:D8:A9:13
Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Certificate issuer:       /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Certificate serial:       019688B72E8A11833798334B6C0D62B24628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
Manifest number:          0BEF
Signing time:             Wed 30 Apr 2025 22:00:28 +0000
Manifest this update:     Wed 30 Apr 2025 22:00:28 +0000
Manifest next update:     Thu 01 May 2025 22:00:28 +0000
Files and hashes:         1: RRZvo3x2TNxioAvKKyssh5_2mdk.crl (hash: zQBw5xzccwJnuDQL6zlVQ21PIrFLPdl3YVTQxLo3ZZ8=)
                          2: wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa (hash: eIaYl/XQCMrWCrG41jkzzFId5xb3CG5cunZSp8FL+Ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:b7:2e:8a:11:83:37:98:33:4b:6c:0d:62:b2:46:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
        Validity
            Not Before: Apr 30 22:00:28 2025 GMT
            Not After : May  1 22:00:28 2025 GMT
        Subject: CN=570a0347735a66f13f624c67253d91577ad8a913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:07:49:30:b4:16:8d:89:d7:3c:e4:28:f2:
                    48:55:7b:a9:1b:cc:3c:80:3e:23:fa:8d:ab:72:50:
                    0d:40:03:da:07:9c:7b:d2:75:20:f2:32:88:93:36:
                    c2:99:a7:54:04:3b:4f:02:4e:a2:87:23:3e:e3:47:
                    4c:27:4c:8b:9e:25:28:1b:56:61:37:e9:c4:7b:e5:
                    e6:97:e2:df:20:5a:82:2c:03:ef:8a:e7:0e:0a:37:
                    c7:2c:a7:ac:65:4d:ef:32:66:1e:3b:92:bc:d2:16:
                    11:9b:c1:2c:c4:54:30:cd:a6:53:25:81:a4:af:55:
                    41:c3:a6:f4:a2:07:68:6f:b4:01:64:6b:c5:b3:34:
                    70:67:6b:70:86:bc:10:ce:9f:f3:b7:fd:75:9a:55:
                    5e:20:ad:1a:cb:71:12:32:70:19:25:7c:98:84:a5:
                    13:2a:c4:54:52:1c:aa:d7:90:ec:58:e5:9d:b2:5a:
                    21:b3:67:21:28:50:60:17:79:e2:83:ef:f8:1c:88:
                    3a:e9:08:ae:22:c6:34:ea:66:a3:53:e6:d2:71:22:
                    e3:84:fd:57:1e:5f:ea:2f:ed:f5:3a:99:31:75:6c:
                    bf:7c:c3:01:14:a5:9e:9f:bd:fb:d6:a1:23:40:32:
                    83:ea:03:a3:9a:10:6e:8f:83:bf:dc:36:f6:52:fc:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0A:03:47:73:5A:66:F1:3F:62:4C:67:25:3D:91:57:7A:D8:A9:13
            X509v3 Authority Key Identifier:
                keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:97:3f:b9:a4:26:6d:2b:78:56:4f:17:c6:b3:d7:35:df:88:
         41:f2:69:ac:d3:16:d5:f0:50:e5:9a:b0:ab:97:c2:b9:a9:8f:
         dd:72:61:b3:a8:53:f7:6c:7b:9d:e1:d3:30:1a:51:d6:e0:5a:
         7b:72:76:9a:c1:84:6e:38:75:00:b8:57:03:c4:f2:1e:00:7a:
         9a:bb:f1:e2:4d:66:55:19:c8:7b:ee:91:5d:39:ae:cd:70:f6:
         1a:82:a7:9f:2f:25:8e:63:c0:b3:45:24:e2:82:92:ec:a2:e9:
         4c:1b:ce:2f:67:7a:3e:26:39:c2:e9:be:fe:77:cc:4e:5b:44:
         56:8c:d6:e9:fb:aa:a0:ad:ed:74:e9:08:e7:c3:60:f9:b3:54:
         77:34:e7:aa:d4:3c:dc:e4:ee:67:18:95:01:72:2a:8b:8c:fc:
         8c:34:48:95:29:a1:fa:5c:26:24:37:02:69:6e:b0:74:3a:3d:
         80:1c:59:70:c4:07:1e:1a:49:e5:c1:2c:49:e9:ec:bd:52:a9:
         32:59:3d:55:c5:4d:bc:33:cc:af:1e:23:d6:ba:11:63:86:44:
         36:da:6d:83:59:6d:55:55:5a:3d:3d:ee:05:4a:25:63:b3:8f:
         de:33:5c:a6:13:7f:33:0d:b5:b8:e9:d9:8c:04:e5:b7:c4:bc:
         d2:e1:ff:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:14:32 2025 by rpki-client