Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File:                     NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier:          TEAZHCVfP1HeSf2nWKms+HBFZqmxOSrUYZapPYh0D/0=
Subject key identifier:   27:8D:75:90:58:77:FC:FA:2A:C2:22:32:92:4F:53:86:03:32:DE:8D
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer:       /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial:       01969560D15B866AD00E4277EA1A2A5992CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number:          151E
Signing time:             Sat 03 May 2025 09:01:12 +0000
Manifest this update:     Sat 03 May 2025 09:01:12 +0000
Manifest next update:     Sun 04 May 2025 09:01:12 +0000
Files and hashes:         1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: z51OhLxdIpM5dWLCbCEjeDB3eiPTRErUdR8m1h0bTIw=)
                          2: jyQjff39PkjIcb2c4y6sicxo6PU.roa (hash: NTGQ8Vsi7SBxb0wiOjPR2Eb0JAGTh/a1kL30gt2n6ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:95:60:d1:5b:86:6a:d0:0e:42:77:ea:1a:2a:59:92:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
        Validity
            Not Before: May  3 09:01:12 2025 GMT
            Not After : May  4 09:01:12 2025 GMT
        Subject: CN=278d75905877fcfa2ac22232924f53860332de8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:16:8b:91:5e:37:c4:e4:ac:fe:1b:3d:ea:
                    74:a8:64:7b:ca:e1:d5:1a:13:c7:32:5f:bf:d1:e8:
                    0e:38:61:1a:0a:46:92:bb:f9:a2:70:d3:27:41:51:
                    02:6d:a8:82:60:60:40:83:b2:c6:df:2e:75:7a:59:
                    df:0a:fd:2d:01:bc:aa:cf:2f:11:af:b7:24:1e:60:
                    c8:38:3b:83:94:e6:35:f5:5b:18:44:8f:28:9b:f6:
                    13:9a:6a:35:4d:bb:16:a8:68:36:cc:90:8d:c8:d5:
                    bf:a0:03:13:7e:ff:f2:54:47:02:ee:65:6f:ea:ef:
                    ec:94:df:3d:91:7d:10:fd:fc:b2:27:f2:9a:e3:c5:
                    69:4b:c7:2f:8e:f6:8b:48:73:3c:49:a7:16:fc:61:
                    1f:fd:2d:d2:13:b5:00:9e:1a:bc:9c:b9:d0:9a:84:
                    20:29:01:3a:30:7d:88:cc:9e:c6:dc:db:c4:a9:2b:
                    42:80:9d:a3:56:bd:38:6c:7e:aa:22:a1:de:b5:24:
                    e1:c5:a6:e7:b2:07:f6:72:00:49:7d:1b:4c:53:9a:
                    1b:27:b3:7a:4e:31:a9:d0:ec:d9:20:0b:9a:4c:fb:
                    02:ee:4a:44:d0:d6:35:34:f3:7f:aa:2e:6c:ad:89:
                    7a:d2:7c:fd:cc:39:f3:db:f7:07:00:17:9b:37:8a:
                    1a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8D:75:90:58:77:FC:FA:2A:C2:22:32:92:4F:53:86:03:32:DE:8D
            X509v3 Authority Key Identifier:
                keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e6:b0:04:53:77:36:db:94:c7:ee:01:5a:eb:85:08:42:32:
         aa:04:2b:15:45:a7:6e:aa:96:fa:92:dc:ff:55:02:4b:bc:1e:
         d1:aa:5d:a9:31:12:37:8f:fe:3c:54:af:2f:a5:50:ac:da:d1:
         fb:05:31:49:b3:ab:01:ca:c6:df:16:e2:4f:91:e7:f7:94:bb:
         18:4c:12:d1:88:b7:ba:90:c0:7e:c9:56:54:d4:c7:10:e6:6b:
         d7:39:93:41:25:1d:91:c7:76:50:d2:06:9f:9e:5e:04:12:b0:
         34:de:05:fd:5f:ec:77:67:ca:ee:54:67:94:5d:cc:5a:10:7e:
         c2:ad:d9:34:a9:ec:ad:11:6d:f6:e2:10:5e:f7:0c:4c:b5:26:
         9e:e1:ba:61:e7:91:ef:0b:c7:85:78:40:10:b6:c3:6f:f4:87:
         c8:b7:72:df:00:5d:00:f5:99:11:f4:cd:da:21:03:47:67:9b:
         79:b8:9e:a1:4e:11:87:47:c7:73:2f:7e:08:d2:87:64:12:59:
         0b:c8:d5:ea:97:e4:c1:51:35:b2:69:11:39:ba:c3:52:b7:e0:
         4c:db:fb:ee:5c:0c:d4:20:38:6a:5a:1b:52:f8:60:eb:b5:a8:
         96:74:4f:9d:7a:f2:b0:fb:e4:7c:2a:45:69:48:39:0e:d1:17:
         ca:66:41:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:19:47 2025 by rpki-client