Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
File:                     zwL19I4SLlVvm1mK2aYtPD4UQZo.mft (raw, json)
Hash identifier:          o1fiICnsOqXSG8/u5ABbKeDw+KOwqsRvHFE2Imo5zno=
Subject key identifier:   E0:34:A3:4F:82:41:99:59:FB:DE:1A:6A:13:7F:3F:8B:39:C2:AC:41
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Certificate issuer:       /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial:       01967EA1C787C48BFB25FEAF2F5F8B575AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
Manifest number:          14A4
Signing time:             Mon 28 Apr 2025 23:00:53 +0000
Manifest this update:     Mon 28 Apr 2025 23:00:53 +0000
Manifest next update:     Tue 29 Apr 2025 23:00:53 +0000
Files and hashes:         1: 748a2LHN88wONpwbpFWq4xMldnY.roa (hash: eDoYazA4tm3EizecQjyxeeqDwWD+d/nhbBUj2RIPHuc=)
                          2: zwL19I4SLlVvm1mK2aYtPD4UQZo.crl (hash: Cj9b4fh2Voa2Q7y0EV0YQn9hdS7tlgHQFtLb3F6J5LA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:a1:c7:87:c4:8b:fb:25:fe:af:2f:5f:8b:57:5a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
        Validity
            Not Before: Apr 28 23:00:53 2025 GMT
            Not After : Apr 29 23:00:53 2025 GMT
        Subject: CN=e034a34f82419959fbde1a6a137f3f8b39c2ac41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:cd:35:d5:39:7a:92:46:7f:50:cc:34:3b:
                    eb:55:9c:6f:64:25:06:2b:4a:b7:ed:79:c6:0f:3d:
                    11:8f:13:bd:ab:12:82:aa:66:98:fb:14:1d:c5:3b:
                    ac:c0:da:13:76:6e:6a:ce:a8:24:cb:36:dc:f7:2c:
                    00:3e:9f:cc:62:94:cb:27:59:1d:ae:b8:73:84:2e:
                    bb:98:1d:48:dc:7f:f0:36:9e:fb:c6:c9:6d:45:f3:
                    9c:4a:8b:44:73:60:c3:de:df:57:79:74:4a:1d:a3:
                    7c:c7:8d:c6:c4:36:ab:30:a2:92:dc:a6:27:6f:28:
                    83:77:dc:1e:09:5e:73:83:53:2c:25:0d:68:45:1a:
                    06:bc:04:91:60:f1:f7:a3:a3:16:2b:d7:8e:a1:7c:
                    fd:2d:c2:92:79:5a:b9:1e:b1:63:58:96:0e:70:bc:
                    17:e2:9e:2e:b1:c9:e6:c2:28:b6:5b:c5:23:ad:fa:
                    a5:3e:45:d1:0d:84:0a:5a:5c:3c:65:15:4e:b7:a5:
                    f5:55:ae:07:9c:db:f9:c4:50:30:0f:5d:18:98:3f:
                    38:a6:89:8f:15:54:64:b1:53:d8:83:0d:e0:e4:83:
                    c8:2b:ff:98:09:ac:c5:a3:df:4f:4a:2b:ec:8f:b3:
                    f8:0a:a0:fb:86:65:49:58:ee:49:45:1e:ea:7f:b0:
                    46:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:34:A3:4F:82:41:99:59:FB:DE:1A:6A:13:7F:3F:8B:39:C2:AC:41
            X509v3 Authority Key Identifier:
                keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:a6:0d:d3:48:3e:5e:8e:1a:4d:6b:8f:4e:7c:8d:e7:eb:6c:
         cc:2b:be:f5:82:d9:1a:8e:f0:72:a2:68:dd:48:ca:11:b6:52:
         32:bd:f5:96:77:1b:40:d1:d7:51:be:a5:b0:f8:f5:1c:d1:ec:
         ff:d9:a2:a7:17:5a:8f:e8:61:aa:bb:c3:e5:59:e6:2c:36:c7:
         3a:1e:bd:16:d4:9b:ff:1b:ff:49:f1:62:1e:30:a1:dd:4f:ca:
         99:36:a9:b2:0c:3c:18:19:db:c3:32:67:27:a7:5e:ef:17:d1:
         58:02:c8:40:c8:26:e7:9b:0a:4f:ef:de:d2:3d:fe:9c:01:64:
         40:dc:64:c5:63:a3:ad:71:a2:44:f3:02:1b:4c:1f:a8:68:eb:
         f1:2f:eb:e6:a0:12:83:5d:09:02:12:e0:34:27:94:83:c4:be:
         f7:3a:b3:a6:84:c8:2e:a5:8e:53:f0:56:0f:7e:d9:4a:eb:3c:
         67:33:e8:d3:f6:48:35:3f:0d:48:ac:ed:9c:4c:84:98:8b:12:
         3e:39:43:74:4a:f9:fd:dd:21:15:67:f6:49:2a:6e:cd:57:03:
         a9:c9:a3:10:8b:51:1e:91:ee:1f:9a:c6:1c:2b:72:c4:79:ce:
         93:eb:03:a9:e3:8f:44:8b:82:cd:2b:92:cf:a8:8a:a2:e6:16:
         b7:a8:ae:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:39 2025 by rpki-client