Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
File:                     FLcYAN3cSX9g-e23gzyUlzq33Bw.mft (raw, json)
Hash identifier:          kQ1q7iqA+/ivJKNCnfl5w7G21tpghkrEr1eqT82XbcE=
Subject key identifier:   56:75:44:FD:AA:95:3A:42:1F:18:F6:8B:EF:B9:E4:0A:BE:4C:CD:D5
Authority key identifier: 14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
Certificate issuer:       /CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Certificate serial:       019681D975CB0B2372000D3D07E9D965D5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
Manifest number:          1401
Signing time:             Tue 29 Apr 2025 14:00:34 +0000
Manifest this update:     Tue 29 Apr 2025 14:00:34 +0000
Manifest next update:     Wed 30 Apr 2025 14:00:34 +0000
Files and hashes:         1: FLcYAN3cSX9g-e23gzyUlzq33Bw.crl (hash: N6MVJymsQCePKCDdXyDzXhvkxXsUYnWlBt2XmJ7QRFo=)
                          2: jh-TOxpxIUBWeRHqyE_TsQ3xZPw.roa (hash: h4140lmsN13+jNtLubDuYn8kTL6T4/sAQ4MD0yMdaVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:d9:75:cb:0b:23:72:00:0d:3d:07:e9:d9:65:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
        Validity
            Not Before: Apr 29 14:00:34 2025 GMT
            Not After : Apr 30 14:00:34 2025 GMT
        Subject: CN=567544fdaa953a421f18f68befb9e40abe4ccdd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:69:64:83:50:c5:63:77:e6:3a:be:3d:2d:
                    76:72:43:20:47:f2:96:72:10:85:e8:ae:9e:18:10:
                    b0:fb:39:87:be:56:38:65:a8:f7:54:b4:eb:e3:3f:
                    66:92:92:c5:ba:aa:a8:28:61:7e:ab:a5:0f:a6:8b:
                    ba:b3:db:ba:cf:73:7f:b5:6e:39:95:44:71:8d:d2:
                    b3:b4:7f:e3:0c:17:55:e8:b1:e0:1c:21:1e:38:6c:
                    19:72:c8:60:1a:ab:84:6a:c3:7e:f8:1d:c3:3e:03:
                    c4:67:b4:40:b6:e0:db:f8:8a:6e:04:1a:24:84:c0:
                    4a:a1:15:dd:96:2c:7e:d2:03:19:f1:3c:82:5f:c2:
                    e5:79:ad:b0:d0:2f:91:c0:c9:40:98:46:d8:5e:ed:
                    5f:68:f9:bd:52:0b:4d:55:69:dd:d9:b8:2b:a1:ca:
                    85:85:52:f2:44:21:d2:db:b3:5b:bb:1a:44:a3:18:
                    49:d3:6d:8e:68:dc:cd:11:5b:09:79:98:1b:94:42:
                    53:93:24:25:13:2b:95:de:e9:f9:22:0f:d7:d7:4c:
                    8c:9a:f2:2f:c6:b6:b9:f4:06:44:b2:b3:05:3c:77:
                    be:6e:fa:e5:8c:5e:27:c7:8f:26:88:5c:59:f3:ac:
                    4b:2c:37:63:5d:69:2b:0b:99:a3:94:4d:8c:dc:6d:
                    76:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:75:44:FD:AA:95:3A:42:1F:18:F6:8B:EF:B9:E4:0A:BE:4C:CD:D5
            X509v3 Authority Key Identifier:
                keyid:14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:65:e6:f8:54:c5:e0:57:89:4d:9e:02:c3:df:86:dd:2c:08:
         fd:27:45:b5:68:4d:b7:58:e7:70:28:82:00:8b:8f:0b:1d:9f:
         93:2b:69:c8:16:c9:2d:6c:62:21:b2:df:ef:d1:a7:b2:b1:0b:
         87:b1:ad:45:4c:1f:db:16:25:34:0d:46:40:dd:ff:11:d7:cd:
         57:23:f6:97:1c:1b:d5:86:de:cf:35:6b:66:02:0a:c2:cf:a9:
         51:f5:7c:b8:69:37:c8:e1:f9:ba:f9:8c:ad:48:75:c1:6b:39:
         e7:c2:e8:33:51:46:fe:77:32:0f:c7:7d:4f:4c:1f:86:40:43:
         e1:50:f2:08:7a:19:d1:eb:83:48:90:4b:c3:52:f0:bf:6f:e4:
         90:4d:b6:1a:b5:28:11:da:7e:80:ed:2c:ea:80:4b:1f:69:c7:
         6c:0d:33:82:7c:d7:5a:ff:9d:2e:fa:49:4e:08:f4:67:c0:31:
         c5:ea:51:df:2b:8a:eb:b7:ae:fb:72:5e:b1:97:46:01:21:b5:
         7b:b8:9a:cd:3c:7c:ce:2e:9f:e4:68:01:fb:d6:20:7b:47:a3:
         11:8d:68:65:fc:1d:f8:af:37:34:da:a4:2e:9a:2f:ea:6e:e0:
         e9:5f:f8:3c:5f:19:44:38:c3:2f:31:83:f8:c7:8f:82:1c:99:
         75:1a:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:28:48 2025 by rpki-client