Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
File:                     RxG7s-u50tFww3xioQzNwikVVEs.mft (raw, json)
Hash identifier:          ZnNIo3xeVPcAvcmwhd2EleEhH3K+Vs7c8pRtkYu+bz0=
Subject key identifier:   45:AC:94:59:C1:FB:9C:EF:75:30:2A:83:4F:FD:28:D9:BD:01:49:14
Authority key identifier: 47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B
Certificate issuer:       /CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
Certificate serial:       0196865B3987559B23CBFD1D3B7CBE88A9D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
Manifest number:          05FC
Signing time:             Wed 30 Apr 2025 11:00:47 +0000
Manifest this update:     Wed 30 Apr 2025 11:00:47 +0000
Manifest next update:     Thu 01 May 2025 11:00:47 +0000
Files and hashes:         1: RxG7s-u50tFww3xioQzNwikVVEs.crl (hash: 5Xpskj5SAkYcejQv7NXYV0V13E/7zGIC/q6C0MwsNIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:5b:39:87:55:9b:23:cb:fd:1d:3b:7c:be:88:a9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4711bbb3ebb9d2d170c37c62a10ccdc22915544b
        Validity
            Not Before: Apr 30 11:00:47 2025 GMT
            Not After : May  1 11:00:47 2025 GMT
        Subject: CN=45ac9459c1fb9cef75302a834ffd28d9bd014914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:ec:56:3c:dc:ff:53:c8:e4:eb:dd:05:cb:
                    58:eb:ec:52:63:52:af:0f:39:7e:f6:9d:86:f6:b1:
                    53:58:28:5c:a6:9a:49:27:88:4b:40:4f:99:79:e9:
                    8d:4d:d1:75:b7:0f:27:a9:05:12:78:c1:b5:1c:c1:
                    35:a7:be:7f:65:7f:1e:a1:2e:ae:09:f6:3f:54:15:
                    50:bc:29:f7:75:87:3b:fa:20:8f:d4:9c:3d:39:65:
                    5b:7b:95:88:9b:fe:fb:bf:aa:64:8f:80:43:b8:b1:
                    1d:83:df:6d:6d:65:d8:65:e1:61:73:be:b8:d4:9c:
                    da:ed:a0:14:36:1c:04:95:5f:d6:4d:9f:6f:ff:3f:
                    bd:ce:b4:02:15:53:37:2e:b2:82:ce:1d:d3:7a:56:
                    90:5c:9d:81:44:ca:f0:40:bf:3a:4a:34:71:9c:da:
                    f0:48:fb:db:8c:cf:29:57:24:3b:b4:c4:35:63:9b:
                    48:bc:dc:69:d8:0e:52:30:cc:e8:49:cc:b1:92:ee:
                    a9:f6:e0:62:22:f4:0a:1c:90:bb:97:31:ee:65:22:
                    f0:80:d3:ba:23:0f:5b:0f:19:bb:75:51:e1:ea:52:
                    39:41:ed:70:c1:e3:93:6d:c2:76:76:ef:b3:a2:c0:
                    b1:c0:a6:8f:25:4a:27:f8:8d:28:d2:65:95:80:05:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AC:94:59:C1:FB:9C:EF:75:30:2A:83:4F:FD:28:D9:BD:01:49:14
            X509v3 Authority Key Identifier:
                keyid:47:11:BB:B3:EB:B9:D2:D1:70:C3:7C:62:A1:0C:CD:C2:29:15:54:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxG7s-u50tFww3xioQzNwikVVEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/48eb57-9fd4-4586-bfe9-da1e3cb2defa/1/RxG7s-u50tFww3xioQzNwikVVEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:a7:3c:36:cb:7b:21:78:00:69:bb:b5:6a:4e:aa:cc:9d:5c:
         03:f1:61:e6:a9:fb:f0:c3:97:00:86:9f:0a:61:ee:e5:f6:da:
         0e:79:24:e8:40:37:0a:49:0a:06:48:47:fd:01:f2:e4:74:4f:
         ad:9e:bb:db:94:66:69:43:0e:62:52:a9:26:8b:35:47:14:1c:
         2a:26:57:3d:cd:f9:0a:6b:7c:b4:8a:54:88:b3:9a:0a:69:02:
         ee:69:ea:12:28:b5:e6:9f:b0:b2:3a:50:5b:6f:10:4a:27:31:
         30:75:c0:2c:f2:48:c6:b6:25:99:23:77:72:8e:4d:df:20:6a:
         19:b6:1b:ed:6a:c8:c9:d4:12:ee:66:6c:69:25:e1:29:ee:d3:
         d8:14:3a:6b:4c:0b:c7:02:1d:22:41:10:fe:86:94:c4:6f:6a:
         23:86:85:29:39:fc:d7:a1:4b:46:d3:82:85:45:95:33:3f:4e:
         c4:05:78:0b:df:7f:ae:0e:0b:0c:c5:c2:14:44:3d:f9:5b:31:
         d0:d9:ee:8c:b1:4f:0c:b5:6f:62:fe:57:cf:b3:53:74:4b:cd:
         b7:23:d4:a5:66:ad:53:9c:05:68:06:99:af:51:79:45:2c:d2:
         a9:55:6a:e5:8f:24:5c:ad:9a:81:78:70:98:6a:d9:47:cb:46:
         b9:0d:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:07:08 2025 by rpki-client