Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File:                     MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier:          CYQTBHeH8G0mhEa6gLXLMmaZ0W/CrP2+qrdboL0Fq+M=
Subject key identifier:   1C:FD:6F:B5:31:D5:1B:B4:C6:7E:BF:D0:BF:D2:6C:4D:31:01:C7:CA
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer:       /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial:       019674F99F924CC12465CD530B21E85C5FE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number:          1074
Signing time:             Sun 27 Apr 2025 02:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:38 +0000
Files and hashes:         1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: HEfeG63XTCkUQFFxDeD5SZBtTTdR3HkY/2eW6jXWsZE=)
                          2: VGm3ErGKm6tUo4YFp6q8zAkxW-A.roa (hash: mTwbwPysXWi/fjDRR83nehRSSzlqjgrfxfjlnGiXO3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:9f:92:4c:c1:24:65:cd:53:0b:21:e8:5c:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
        Validity
            Not Before: Apr 27 02:00:38 2025 GMT
            Not After : Apr 28 02:00:38 2025 GMT
        Subject: CN=1cfd6fb531d51bb4c67ebfd0bfd26c4d3101c7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:2e:2c:a7:f7:9e:ce:cc:a3:d3:d0:21:3c:
                    2c:74:1d:09:79:f5:38:63:98:70:1a:4c:58:ad:00:
                    16:92:ae:c3:05:81:4c:e0:ac:50:a8:52:02:c1:08:
                    ed:9a:e5:f2:5e:7b:b6:1d:1a:bf:3d:e7:e5:61:2f:
                    97:bb:f2:f2:50:44:26:8b:83:0f:8b:2e:84:39:d2:
                    64:e3:01:86:f3:3c:e5:b9:66:99:b9:fc:4c:9f:d9:
                    63:89:11:6b:52:73:d6:34:78:e9:29:1e:cf:b5:65:
                    f9:30:84:4f:0e:6e:04:18:30:bf:95:b5:d7:ed:1c:
                    84:8b:ac:2f:a2:0a:50:77:82:fe:42:47:cd:09:4a:
                    03:95:0d:2e:95:a5:56:65:c2:7f:e6:6c:0b:50:08:
                    84:aa:0d:b0:0a:b8:6f:b8:4e:04:fe:17:83:eb:d9:
                    82:3d:3b:5c:56:e6:fb:73:f6:9a:44:25:79:24:47:
                    75:34:9e:2c:f4:f9:f3:94:6c:dd:63:73:2f:76:1c:
                    c4:01:22:44:5e:84:b7:0b:c1:dd:78:fc:98:db:c2:
                    b8:6b:89:c8:28:7d:f8:50:f4:ea:97:f6:08:77:d9:
                    af:f3:bc:b0:ff:19:8a:3c:38:cb:11:07:af:8a:2d:
                    d3:c6:df:b1:61:cd:8d:ec:51:94:cd:7f:80:6b:ff:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FD:6F:B5:31:D5:1B:B4:C6:7E:BF:D0:BF:D2:6C:4D:31:01:C7:CA
            X509v3 Authority Key Identifier:
                keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2d:49:30:71:17:af:2b:e5:59:3a:95:2f:30:68:67:7c:01:
         0e:42:a3:13:ee:c6:ee:5f:f7:fb:36:c9:1b:85:52:dc:5a:cc:
         d5:4f:39:e8:d8:ee:3c:93:4e:5b:32:40:7f:41:06:c6:43:e9:
         76:fd:06:ec:58:b7:f7:a5:27:12:60:32:0c:f9:c9:1a:c5:3d:
         ca:66:d6:50:e4:fd:bb:9b:e6:2b:00:d5:33:c0:e9:59:cb:63:
         14:cd:06:f2:52:8d:ce:38:e8:8f:7d:74:71:46:28:29:f8:ce:
         31:c5:93:07:b7:f9:6a:b3:fd:41:2c:6c:fa:c1:cc:33:15:7e:
         2b:3b:ca:83:7b:01:37:84:e1:6c:9c:1c:55:b8:6a:0a:71:8d:
         96:0d:4e:f0:63:05:79:e0:22:5f:9d:53:8f:2f:f8:5c:ef:6b:
         63:ef:c7:aa:a7:d7:fd:2c:a7:b8:5b:a2:a5:5f:ef:7b:c9:cb:
         9d:11:a9:fb:a7:1b:c4:a6:0b:ef:1f:85:e8:0f:b0:98:ba:47:
         04:66:e4:c2:e1:e5:e4:bc:cb:ff:11:ad:82:03:d2:ae:45:49:
         06:d1:d1:11:d5:33:e5:88:d5:33:05:62:87:81:b9:2d:dd:51:
         bb:36:28:df:0c:d8:f6:70:d2:c0:a8:c9:5b:85:f3:90:c1:c9:
         e6:ff:ed:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:31 2025 by rpki-client