Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
File:                     rrc9JyyxdKRjjbIVZ44-57kin_o.mft (raw, json)
Hash identifier:          tCZBHV940ezsOlphSZ6gMl+VY/Rr+0s0jZpiHZdDx+Q=
Subject key identifier:   8A:2A:D5:68:BF:B6:95:88:D4:89:24:89:64:06:12:23:9E:07:FE:0F
Authority key identifier: AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA
Certificate issuer:       /CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
Certificate serial:       01968A00AAC41915C13BF3978AF243620CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
Manifest number:          1517
Signing time:             Thu 01 May 2025 04:00:21 +0000
Manifest this update:     Thu 01 May 2025 04:00:21 +0000
Manifest next update:     Fri 02 May 2025 04:00:21 +0000
Files and hashes:         1: rrc9JyyxdKRjjbIVZ44-57kin_o.crl (hash: dFVcQsupn2mSHGFtoadzqmVEfA8s14XMG+c6VRBgPH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 04:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:00:aa:c4:19:15:c1:3b:f3:97:8a:f2:43:62:0c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
        Validity
            Not Before: May  1 04:00:21 2025 GMT
            Not After : May  2 04:00:21 2025 GMT
        Subject: CN=8a2ad568bfb69588d4892489640612239e07fe0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:5d:1c:13:f2:4a:47:2a:44:0f:0c:19:a0:
                    1c:1a:60:eb:3b:35:56:ac:ac:e8:09:e6:77:71:bc:
                    86:5e:75:86:57:1c:0c:f4:e7:3c:a8:92:d5:47:8b:
                    76:01:14:19:16:0d:71:dc:6d:03:e1:4e:c9:fc:d4:
                    73:bc:28:f1:5d:55:1d:ef:6d:29:1f:bb:00:dd:13:
                    f5:81:be:9e:65:fb:1d:20:8b:e7:c0:67:25:e3:4f:
                    d5:7b:ad:30:24:1b:dc:c5:d6:bd:9f:07:80:53:39:
                    79:a6:af:2c:59:85:30:d1:b2:e8:06:24:4b:31:11:
                    5b:11:e3:22:03:ab:40:12:c2:9c:c5:56:6a:cb:9e:
                    2b:95:cf:8a:d0:74:51:95:92:e2:37:bb:8b:04:b9:
                    a1:8a:93:c6:1f:ce:d0:70:e6:58:eb:b3:cb:93:cb:
                    9b:09:fa:43:78:3a:69:c9:26:f4:5e:d6:0c:9d:59:
                    8b:4b:83:d3:f6:03:07:fd:ca:22:e5:9b:d4:70:70:
                    c3:ad:a8:37:86:f3:43:2b:02:af:a3:a4:60:d0:26:
                    14:13:93:a8:ac:95:80:a7:19:de:f3:75:53:f5:14:
                    a4:52:2e:94:33:ba:72:d0:55:6e:f8:c5:a7:12:14:
                    d3:74:55:38:ae:d0:0f:4f:ae:1c:16:df:62:10:6e:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2A:D5:68:BF:B6:95:88:D4:89:24:89:64:06:12:23:9E:07:FE:0F
            X509v3 Authority Key Identifier:
                keyid:AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:42:83:dc:6c:6c:85:1f:c2:8e:42:b6:a1:c9:87:a5:8b:a5:
         4e:59:d4:e3:c8:be:4d:b8:49:ac:dc:f3:cb:b6:65:62:6e:90:
         3c:a8:61:3d:8d:0e:9f:42:b5:80:2b:26:1e:ae:26:04:36:c3:
         68:81:ed:4b:4d:0e:af:94:e9:14:d8:f8:6c:ef:49:54:f5:d1:
         0a:23:d0:cf:62:49:0c:35:f2:80:3a:78:e1:84:f2:09:15:61:
         71:77:ab:dc:be:9f:fa:01:59:88:60:69:79:5f:39:b1:83:20:
         75:ce:09:6d:01:0b:b7:08:2a:4c:b2:42:43:f0:46:fe:02:14:
         63:91:86:48:41:2b:93:00:15:59:aa:91:83:10:7c:f0:9b:69:
         30:8c:40:bd:f3:3e:66:66:8d:76:75:b3:ca:f3:e5:32:36:d0:
         25:f2:1f:fe:cf:08:00:c0:fa:9b:81:8d:72:75:cb:02:60:ce:
         95:cd:ce:07:b3:0a:2b:72:8f:35:a4:01:e7:bd:9d:ab:8f:19:
         bb:23:2b:9c:bf:14:83:aa:83:ed:82:9e:7e:73:de:62:dc:7a:
         ca:47:08:c7:e7:59:c5:f4:2f:e6:18:ca:5b:6a:b9:91:58:b3:
         67:c5:8a:f5:3c:be:bc:d9:e2:f1:27:37:b2:21:0c:d8:1f:cd:
         97:62:3f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:55:01 2025 by rpki-client