Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
File:                     0ow4hsbvUifCRiJMyJSoSlO89Ro.mft (raw, json)
Hash identifier:          ENs5OruLpbD6w2pNWsu3EAYb4XzjJm8Nv7KYAg+stj4=
Subject key identifier:   73:1F:64:27:B0:2A:1F:4E:97:BA:54:3F:08:E1:37:C8:97:0E:BD:43
Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
Certificate issuer:       /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Certificate serial:       019674C2A14BDE583FF01AD937C7AFD281D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
Manifest number:          0444
Signing time:             Sun 27 Apr 2025 01:00:34 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:34 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:34 +0000
Files and hashes:         1: 0ow4hsbvUifCRiJMyJSoSlO89Ro.crl (hash: mTCJUi9lqEmrS7ka4xjZBtYZJ3Gzlr1fx4lrYErHKi0=)
                          2: 3Wo1i0AtNLKktf0Fsv7r4f0TK5c.roa (hash: TuUCEIehwsxsHM+kSQ6AOE1w0z+0lDBW+yhlCQiJ8u0=)
                          3: 5MPTrLSfLX6fRObwynHPfSAAM0o.roa (hash: adOAZtbI6TpJQzuqE4yqnUFKX9EAaJkaZ7TpRSqv1kc=)
                          4: jZVM5c5Inmzx4Oemkx6R9iw1k_8.roa (hash: rjEJpSgCWwFovtBLax9fmGlzA4/RiwDw0hJijdvo6KI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:a1:4b:de:58:3f:f0:1a:d9:37:c7:af:d2:81:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
        Validity
            Not Before: Apr 27 01:00:34 2025 GMT
            Not After : Apr 28 01:00:34 2025 GMT
        Subject: CN=731f6427b02a1f4e97ba543f08e137c8970ebd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:38:86:08:8c:db:37:38:1c:71:a2:09:92:
                    f1:e1:95:de:b1:1c:8d:e0:92:56:52:1c:57:b3:c7:
                    36:4f:a3:d3:b1:56:91:a8:d2:b1:07:8d:31:cc:54:
                    89:67:31:52:fb:e2:8f:be:42:d4:6b:75:0a:63:b4:
                    fd:8a:48:79:8a:a0:05:fa:4a:4d:4c:09:ed:82:c4:
                    73:0a:d4:e6:41:7e:aa:b0:88:8d:73:88:21:4f:91:
                    3e:7f:d6:40:e7:45:a4:c6:9d:8f:65:33:b0:b8:37:
                    51:8b:99:07:ac:06:e0:97:3e:c9:e9:15:16:b3:db:
                    e7:47:a8:b6:a7:34:da:52:d3:52:bf:eb:85:53:db:
                    6f:8d:98:2c:e1:98:a9:bf:7b:8e:eb:89:d8:70:20:
                    c1:2c:e1:10:26:8b:5e:a4:fc:0a:55:c7:c1:b6:42:
                    91:af:79:4c:23:22:29:16:a7:52:06:60:1d:6f:ba:
                    28:3e:17:16:d0:73:83:25:22:67:2d:a0:09:c4:f0:
                    c8:7a:1f:bb:19:44:6a:62:57:9a:9d:91:fd:6c:10:
                    f2:90:45:a9:3d:cf:71:90:4a:e9:21:1f:b8:72:c2:
                    7f:1b:ab:b1:e1:9e:43:ad:33:b8:40:bd:86:d9:ff:
                    a7:22:cb:4f:6f:1e:53:57:c9:64:a6:1d:51:9d:41:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1F:64:27:B0:2A:1F:4E:97:BA:54:3F:08:E1:37:C8:97:0E:BD:43
            X509v3 Authority Key Identifier:
                keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:11:c8:32:d9:2e:fb:5b:a2:02:43:da:c1:d2:e1:03:94:b6:
         7c:a8:33:60:3b:3c:83:df:60:37:9e:49:9f:a8:ba:ba:4d:88:
         2a:ce:18:df:9b:f9:56:a6:17:43:98:dc:27:41:58:80:5a:4c:
         10:fe:e7:7f:4d:58:bd:cc:61:c0:1c:85:8c:09:f9:0f:52:63:
         22:16:b4:64:fa:58:84:b5:0b:58:2d:a8:d0:7e:25:81:04:37:
         c6:66:b5:9a:44:1f:c0:7b:c8:e2:72:e0:a4:5e:9a:77:5c:8a:
         c6:21:db:ab:ba:eb:2b:00:7c:f4:2a:80:a7:2a:d6:6d:d3:11:
         80:b2:0f:fb:ae:63:86:87:28:54:1f:4d:12:07:c8:3d:8e:85:
         03:fe:ea:50:da:dc:31:95:d7:bf:51:48:30:b9:c6:22:de:f1:
         77:6e:ee:1d:d1:cf:9a:c4:be:b5:9a:75:ae:07:68:7a:b9:50:
         8c:75:45:ee:f2:e8:29:be:2a:a2:6b:2b:7a:d8:58:48:fd:80:
         1b:1c:f4:21:d4:29:bd:b3:88:d0:20:06:69:8e:b6:25:e9:22:
         54:b8:bd:59:64:a1:ba:26:6a:92:84:2c:c6:c7:b3:fd:d5:ee:
         4c:6a:30:af:fd:be:04:02:01:dd:19:98:c2:88:1e:3f:6b:ff:
         24:15:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:22:05 2025 by rpki-client