Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
File:                     6_uNO-4VJTdjsHaqMuLium-eBcM.mft (raw, json)
Hash identifier:          kgUtSz0gd/W0Zy498lP8NqRGXtZrh1jTlVeVuouxHpU=
Subject key identifier:   34:85:76:AA:6C:2F:DD:5B:EB:2C:39:BB:24:3A:25:24:A3:10:63:FB
Authority key identifier: EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3
Certificate issuer:       /CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
Certificate serial:       01968210E9536393AF3C8038BA2A3D0AB77F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
Manifest number:          0BF2
Signing time:             Tue 29 Apr 2025 15:01:08 +0000
Manifest this update:     Tue 29 Apr 2025 15:01:08 +0000
Manifest next update:     Wed 30 Apr 2025 15:01:08 +0000
Files and hashes:         1: 6_uNO-4VJTdjsHaqMuLium-eBcM.crl (hash: 041e5FmmFaHcoPVAl3zQSjOb83Rc3GcA1/kdwPNhwSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:10:e9:53:63:93:af:3c:80:38:ba:2a:3d:0a:b7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
        Validity
            Not Before: Apr 29 15:01:08 2025 GMT
            Not After : Apr 30 15:01:08 2025 GMT
        Subject: CN=348576aa6c2fdd5beb2c39bb243a2524a31063fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:58:1f:4c:97:b9:38:16:a3:f0:af:dd:cf:
                    11:11:96:e8:fe:19:46:76:64:a4:b5:e2:2a:1a:0a:
                    75:52:fb:c2:3b:bd:6c:e6:0f:0e:cd:b1:7a:74:bd:
                    70:f4:3f:f9:7c:e0:49:68:4c:08:ab:fc:1a:00:70:
                    c2:f1:ce:8c:c2:f5:14:19:ec:c8:d4:d8:ed:cd:22:
                    82:07:37:d1:b6:9b:16:b1:ec:4c:95:0c:a2:ca:54:
                    82:8d:8e:2c:be:60:f7:8b:98:cf:fc:b3:fd:6e:1c:
                    d2:f7:95:94:bd:e9:fe:fb:32:ea:1b:5a:3f:c1:a1:
                    dd:42:06:e8:5d:7c:f4:50:ec:f1:9a:c6:5f:2b:ff:
                    03:e0:69:19:ff:c5:12:07:3c:98:d1:97:ad:73:49:
                    f2:2e:a8:32:89:db:c3:de:a9:00:d4:f8:1b:36:14:
                    dc:15:51:23:8b:77:35:85:78:cc:dc:53:24:bb:1b:
                    85:68:b7:75:67:66:65:47:3d:c7:0d:5b:7f:6c:f6:
                    0a:87:4e:79:d4:f9:b5:10:de:0e:ce:1d:57:41:3f:
                    9b:a5:8a:c1:2f:64:25:ca:61:91:a7:9d:fd:17:cc:
                    3a:66:51:71:48:5f:38:6b:cb:ea:1c:dd:a5:87:7b:
                    cf:89:7d:78:26:34:a5:bd:5c:e5:20:d9:92:da:cf:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:85:76:AA:6C:2F:DD:5B:EB:2C:39:BB:24:3A:25:24:A3:10:63:FB
            X509v3 Authority Key Identifier:
                keyid:EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:18:82:e7:7e:1f:5e:0e:b1:24:5a:72:fd:7b:02:fc:de:c0:
         da:05:78:78:f1:57:84:18:87:e3:6f:3e:24:cd:ab:9b:cb:82:
         0e:29:d6:76:fa:b3:7e:72:df:48:78:cd:7b:b4:fe:50:8e:c2:
         74:0f:05:5d:32:20:fe:b0:ed:dc:c7:64:46:86:a1:db:62:2b:
         77:89:1c:6e:5e:8c:57:02:15:d0:0e:ff:33:8e:74:24:31:9a:
         47:35:ad:ab:1c:b1:52:4a:b0:19:0f:c0:5c:e9:73:a5:ed:b4:
         70:a5:10:43:b2:92:48:b1:64:b2:dd:69:75:19:e2:77:d1:cd:
         9b:88:53:3e:bd:50:03:e8:ed:53:ae:2d:cd:5e:2a:b1:70:27:
         bb:a4:22:36:2a:24:1c:20:0e:ca:c6:e1:2e:e3:4d:2c:05:9c:
         41:42:e3:02:fa:09:9f:ee:5b:85:36:62:58:ac:18:ce:1f:b3:
         a9:af:0d:18:cc:02:0f:2a:7a:33:d4:42:41:c2:0c:63:9f:74:
         7a:5a:31:56:78:85:90:99:b2:3a:d5:96:4c:fe:c6:e5:75:c7:
         2c:4f:55:1f:74:d9:27:5c:46:bb:44:fa:c8:89:c1:61:02:ce:
         53:4c:f2:9e:89:1f:e5:21:f3:85:f5:c5:7e:78:06:39:db:45:
         3d:66:38:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:38:10 2025 by rpki-client