Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
File:                     uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft (raw, json)
Hash identifier:          JPXZZYrRv+yTFDjgg7ks5z0b73BT6FqYLYAC4ZOhsXc=
Subject key identifier:   8B:13:CE:DC:2F:DC:F6:29:84:B2:F8:4E:B4:B1:AB:87:B7:F1:B1:92
Authority key identifier: BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6
Certificate issuer:       /CN=bb24311c1ec0673c50497924c202a13d212659b6
Certificate serial:       0196A19B171C07C981BC2E88236E9553FC24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
Manifest number:          045D
Signing time:             Mon 05 May 2025 18:00:17 +0000
Manifest this update:     Mon 05 May 2025 18:00:17 +0000
Manifest next update:     Tue 06 May 2025 18:00:17 +0000
Files and hashes:         1: uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl (hash: vV5Q9Qqi6VmHtjrA+r+3bK9iegtsiWNHjUSquOEZ5lM=)
                          2: v258OvpTjeTGa9nj7XVSV8d0bA0.roa (hash: zeqjbwUFGVgiPWTdMolQ6HqxRrkUBi59wIsSlb2gw2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:9b:17:1c:07:c9:81:bc:2e:88:23:6e:95:53:fc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb24311c1ec0673c50497924c202a13d212659b6
        Validity
            Not Before: May  5 18:00:17 2025 GMT
            Not After : May  6 18:00:17 2025 GMT
        Subject: CN=8b13cedc2fdcf62984b2f84eb4b1ab87b7f1b192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:a9:75:8d:84:ca:b8:2d:0b:fd:5a:82:47:
                    89:70:91:ad:7e:80:87:f3:a0:da:ae:8e:74:02:d8:
                    fc:35:f9:7b:54:f6:f8:86:22:b3:09:05:16:6d:5a:
                    b9:32:b2:66:d6:91:b2:ca:bd:e9:31:5f:c6:b4:c8:
                    a1:43:f9:a9:30:66:66:e7:3b:20:cc:29:b3:04:68:
                    30:e5:f5:7f:df:ca:ba:83:4b:e1:de:5e:67:46:97:
                    50:2f:45:2b:cf:2e:6c:56:f5:94:d8:12:dd:54:62:
                    2f:c7:6b:b0:09:be:83:3e:bb:69:41:1c:53:6f:80:
                    6e:37:47:86:21:21:3e:37:79:32:44:c6:23:43:db:
                    6f:d1:7e:87:3a:58:88:cf:a3:5a:a7:6f:72:e9:51:
                    0c:d1:19:57:49:38:ee:a9:2f:73:dc:f6:32:95:48:
                    a0:1d:38:99:32:9e:ed:f0:5d:90:17:65:c4:10:eb:
                    e6:4b:0b:47:36:b0:6d:d3:6f:77:a1:ee:ac:85:f3:
                    06:12:1d:6f:9b:5d:26:5a:d5:a8:e2:d1:94:b5:5a:
                    de:98:18:b8:fd:e8:2b:25:ab:7e:b1:39:14:31:f0:
                    ac:65:60:3a:53:93:fd:f2:ca:4e:ad:bf:ad:cd:c0:
                    10:42:ac:5a:29:52:b2:3f:27:9b:08:64:63:f6:8e:
                    92:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:13:CE:DC:2F:DC:F6:29:84:B2:F8:4E:B4:B1:AB:87:B7:F1:B1:92
            X509v3 Authority Key Identifier:
                keyid:BB:24:31:1C:1E:C0:67:3C:50:49:79:24:C2:02:A1:3D:21:26:59:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyQxHB7AZzxQSXkkwgKhPSEmWbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b4c085-9b8b-430f-a377-0a7f6cca6bea/1/uyQxHB7AZzxQSXkkwgKhPSEmWbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:26:5a:1e:58:9f:33:02:c6:30:e8:47:88:32:2f:85:d7:ac:
         ee:b1:23:45:cb:f0:2d:25:e6:fb:02:34:2c:58:fe:a1:64:03:
         62:e2:ce:ab:9a:24:00:2c:86:b3:80:96:d5:34:d1:a2:5d:41:
         e2:19:ca:f6:c5:1b:64:4e:e1:26:23:64:46:3f:cb:f3:65:d6:
         b1:b0:70:ce:f3:b1:4a:91:5f:dc:7f:15:92:cf:22:b2:55:a4:
         a8:22:d1:b2:63:a7:26:2b:2f:a1:0f:30:e9:c0:c3:62:6b:85:
         22:37:06:eb:43:c5:76:b9:25:c8:25:a4:63:28:04:d4:7c:49:
         1d:f8:3c:ed:d0:96:2f:cd:fe:52:51:99:cf:8e:5f:20:9b:55:
         91:20:77:fe:c9:9e:d0:74:4d:04:92:94:90:03:05:25:3e:8d:
         b1:a1:e2:ee:51:bc:80:87:6a:37:77:03:45:79:02:0f:05:fe:
         f7:3c:f1:99:37:88:2d:7e:a1:11:e8:d7:42:4f:80:42:a2:5a:
         6f:4d:55:f6:52:a1:c8:a7:31:b4:1d:cb:93:0d:44:38:c4:72:
         04:cd:a8:11:d2:79:c9:2b:19:26:2d:6a:e4:8d:ad:10:a5:8a:
         7e:46:f9:0d:cb:ae:9d:b4:04:4b:fe:a0:e7:66:61:6e:01:1f:
         4a:79:01:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:33:41 2025 by rpki-client