Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File:                     BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier:          0E+Ey30SaeGRVW4j8QCCpprWSMoEFUs5w+PFsYe5oJs=
Subject key identifier:   4E:5F:3B:D0:51:0A:51:AD:FB:C8:F0:81:99:DD:F2:B2:70:6C:49:FB
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer:       /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial:       0196B1EADEE2271C86C5B40ECE0588410D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number:          0A35
Signing time:             Thu 08 May 2025 22:01:21 +0000
Manifest this update:     Thu 08 May 2025 22:01:21 +0000
Manifest next update:     Fri 09 May 2025 22:01:21 +0000
Files and hashes:         1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: XCX3+80ecCLEHl2aXAqsZkOigxVlaycAqIvjZYBCXjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:ea:de:e2:27:1c:86:c5:b4:0e:ce:05:88:41:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
        Validity
            Not Before: May  8 22:01:21 2025 GMT
            Not After : May  9 22:01:21 2025 GMT
        Subject: CN=4e5f3bd0510a51adfbc8f08199ddf2b2706c49fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:5f:80:55:3c:3a:bc:f9:c0:8e:41:2b:9d:
                    03:e3:6c:97:98:cc:a0:a9:4f:c2:63:22:74:67:57:
                    21:cc:67:04:e1:f7:0f:22:3f:ca:5c:48:59:03:d1:
                    cd:0f:56:fe:55:ba:c8:c5:3c:0f:32:a7:e9:96:fe:
                    dd:4e:03:c6:15:19:16:1f:d6:e3:cc:23:c6:b2:d8:
                    12:16:6e:44:5b:79:fb:78:44:ae:4b:9d:1f:f6:2c:
                    fb:98:35:2e:62:f8:c9:e8:de:54:4c:37:51:c5:03:
                    89:36:50:75:17:2e:7c:9f:bc:a4:ae:ba:c7:e3:ab:
                    c7:72:46:75:32:e3:49:21:1d:1f:da:a4:c6:98:5f:
                    0f:00:e7:cb:8d:32:20:cd:6a:b0:44:70:d9:06:a8:
                    c5:e1:ad:10:82:63:be:1f:3d:93:57:b5:22:f5:4a:
                    a3:da:9e:61:03:24:00:c3:90:df:97:a2:3e:fc:76:
                    75:84:e0:c0:65:ab:24:d6:28:50:87:7c:20:44:92:
                    6e:e4:06:23:88:3a:1a:d6:a7:d1:94:21:b4:ca:14:
                    e7:59:5e:5e:92:89:1b:03:18:7d:08:c3:a8:58:b8:
                    57:4e:4f:2e:ff:f3:7b:a0:3f:6f:fd:d1:21:8e:82:
                    50:f1:c6:cf:06:36:a4:08:55:08:97:38:2a:0f:80:
                    4c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5F:3B:D0:51:0A:51:AD:FB:C8:F0:81:99:DD:F2:B2:70:6C:49:FB
            X509v3 Authority Key Identifier:
                keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:46:73:8f:52:41:24:cb:a1:04:c2:2d:a3:0f:77:db:83:96:
         13:77:3d:22:92:60:62:ca:47:1b:a8:4c:9d:1f:13:56:ee:48:
         b5:31:88:26:b6:ef:f8:ab:ec:10:92:ff:30:0c:4c:6c:df:b8:
         f9:e0:46:17:1b:66:00:94:09:c8:40:82:cb:d1:59:b0:d0:d3:
         15:f8:e9:d9:aa:54:2f:70:59:77:d2:5a:6e:a0:eb:de:74:54:
         e8:09:6f:59:c6:d8:0f:e3:1d:6d:4b:ec:1d:3b:ab:8a:4e:fe:
         ba:a4:5a:ff:4c:75:f7:cf:19:c4:b1:49:83:87:64:55:32:c8:
         bd:60:11:0f:5c:7d:3f:7f:b0:d2:fd:b5:ca:ac:fd:91:2b:b4:
         ce:13:50:7f:e8:9d:5b:d0:da:4d:da:54:be:c6:d1:d5:2b:bd:
         73:13:ab:6a:76:8d:94:e4:1c:89:57:3a:88:78:df:f9:94:88:
         f4:df:7c:49:35:a5:0e:4b:56:4a:c3:7f:0d:3e:e2:0f:16:58:
         7b:f0:99:3b:a3:6a:24:11:9e:f7:39:81:9c:68:12:36:2f:69:
         4c:bf:fd:b9:a5:c9:a3:20:36:46:53:ce:49:21:cd:67:15:93:
         c4:30:bf:06:5c:2e:49:ba:fb:59:73:a7:e5:0a:1a:3e:bc:d4:
         27:36:21:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:59:12 2025 by rpki-client