Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
File:                     p7ZLX1AsUfocwRSIHLpStansHsg.mft (raw, json)
Hash identifier:          wMKuJ+yas1KS5hNRFT33BZMLJceBfPs5+UBojPvvbZE=
Subject key identifier:   0D:8D:FF:5D:FB:82:41:90:FA:70:AA:70:32:1E:56:22:74:47:36:3E
Authority key identifier: A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8
Certificate issuer:       /CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
Certificate serial:       0196756774E69F4E45A2CFE12A62C14B10CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
Manifest number:          087F
Signing time:             Sun 27 Apr 2025 04:00:36 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:36 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:36 +0000
Files and hashes:         1: p7ZLX1AsUfocwRSIHLpStansHsg.crl (hash: gaj8yTvSQ17lbasD4P4IJcmUBv8UzCXGiYFE3uP4UBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:74:e6:9f:4e:45:a2:cf:e1:2a:62:c1:4b:10:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7b64b5f502c51fa1cc114881cba52b5a9ec1ec8
        Validity
            Not Before: Apr 27 04:00:36 2025 GMT
            Not After : Apr 28 04:00:36 2025 GMT
        Subject: CN=0d8dff5dfb824190fa70aa70321e56227447363e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:db:21:52:aa:62:bf:e0:24:47:8c:ab:f9:60:
                    51:d4:3a:ab:de:02:22:4c:28:15:ac:63:88:4e:6f:
                    1e:4b:be:c2:04:5e:2e:db:61:bf:da:08:6d:e8:ae:
                    3c:55:e2:2e:fb:a5:b4:86:aa:60:e2:15:b3:35:2c:
                    0e:4b:da:88:17:f4:ea:d6:a1:76:0c:da:55:85:fb:
                    e8:23:b7:39:11:6d:65:15:5d:b5:8c:4c:8c:0d:b3:
                    37:31:cf:1e:db:9a:33:c1:45:01:8c:c1:fd:fc:b3:
                    09:46:50:6f:9b:1e:cc:6b:24:3e:8a:5d:d4:95:92:
                    9b:a6:a6:32:32:ef:fa:68:f3:54:76:09:3b:fc:0e:
                    e9:c7:7f:80:16:0c:e3:28:e9:18:69:90:0b:97:6d:
                    7d:d6:b9:16:4b:ea:20:d4:59:6e:e4:a8:1d:c4:53:
                    35:c9:11:ac:ab:c9:ec:c3:11:27:f6:56:6f:19:c7:
                    fc:30:50:0f:3c:d8:21:f2:a2:4b:2b:84:48:d6:64:
                    7c:21:ef:e5:8c:58:a2:12:8e:a2:60:0e:44:f1:41:
                    32:53:3f:db:16:c7:06:de:90:ef:88:55:34:65:5f:
                    7e:dd:c1:d4:13:3c:01:e4:7c:af:78:89:45:fb:e1:
                    5c:67:fa:f2:eb:30:3e:03:87:c2:f2:a2:cd:ed:55:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8D:FF:5D:FB:82:41:90:FA:70:AA:70:32:1E:56:22:74:47:36:3E
            X509v3 Authority Key Identifier:
                keyid:A7:B6:4B:5F:50:2C:51:FA:1C:C1:14:88:1C:BA:52:B5:A9:EC:1E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7ZLX1AsUfocwRSIHLpStansHsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/a87e6b-a003-453c-bc0d-42df31974d68/1/p7ZLX1AsUfocwRSIHLpStansHsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f8:f2:d5:a4:32:84:fa:fd:91:2b:11:9c:68:96:e6:8c:a9:
         1d:fb:01:d0:ea:c5:70:55:6f:78:2c:e1:0f:6b:e1:36:f6:59:
         f0:9a:1a:7a:0c:63:05:d7:62:8e:28:ed:e8:4d:83:9b:c6:df:
         40:25:47:eb:1f:0f:48:f5:ce:9d:4d:9b:2a:a7:09:7b:0e:e5:
         ce:a0:79:b3:61:21:56:13:89:67:da:61:99:07:2a:1f:37:80:
         f5:22:ac:0f:c2:6f:55:fa:97:f1:2e:38:be:af:63:2c:2d:04:
         89:9a:6a:93:44:78:3e:97:37:50:bf:a9:86:36:ab:a4:7c:ef:
         70:f6:67:a6:4f:3e:29:51:1d:fb:9f:73:d6:e4:15:22:06:43:
         d6:d2:80:fb:09:6c:96:45:dd:4a:56:2b:b1:04:48:df:fc:d9:
         78:19:9d:0d:9b:ee:8d:fc:43:ab:24:a5:25:8f:4c:d5:f3:5e:
         ac:6d:23:f3:77:ff:94:dd:55:06:52:c3:1e:62:c1:ed:8a:20:
         75:c8:7a:67:25:28:6b:2d:1d:ed:3a:0f:e9:d8:75:6a:73:cb:
         47:96:c2:20:4d:1e:e2:94:93:8e:1f:65:f3:9d:f7:21:ab:cb:
         94:ca:06:b7:ca:f2:bc:3a:51:4e:f7:ba:af:d0:17:52:44:8a:
         fc:39:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:08 2025 by rpki-client