Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
File:                     70eAIfcqIbdxQqRNgV3envJoTLw.mft (raw, json)
Hash identifier:          GTxHOaCUkZjicdSxiW9VEZsDrFuaK16jc5SxWc9p9IM=
Subject key identifier:   0D:07:59:ED:B2:40:02:A3:A1:42:FB:44:E1:A3:63:FD:17:3D:6E:FC
Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC
Certificate issuer:       /CN=ef478021f72a21b77142a44d815dde9ef2684cbc
Certificate serial:       0196CCF41352531DDD6AA07F4E3583C4CBB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
Manifest number:          153A
Signing time:             Wed 14 May 2025 04:01:09 +0000
Manifest this update:     Wed 14 May 2025 04:01:09 +0000
Manifest next update:     Thu 15 May 2025 04:01:09 +0000
Files and hashes:         1: 70eAIfcqIbdxQqRNgV3envJoTLw.crl (hash: 8Ragzot9ghcZWdql2kUVCy7nTQ726iZSVzYEY0KCJa4=)
                          2: uPPSCEPI-zYe8c4juKISlbYTsmI.roa (hash: ItdA3QN2L+hecSiCaaiQJ/fE6U5Bp5eLGhZQrMhDtVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:f4:13:52:53:1d:dd:6a:a0:7f:4e:35:83:c4:cb:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc
        Validity
            Not Before: May 14 04:01:09 2025 GMT
            Not After : May 15 04:01:09 2025 GMT
        Subject: CN=0d0759edb24002a3a142fb44e1a363fd173d6efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fe:fb:f4:be:6a:2b:38:4f:c7:e0:1d:71:85:
                    d1:88:50:ef:c6:58:61:74:e2:15:ff:4b:3b:0c:3b:
                    74:df:a1:3f:ba:8a:d8:73:b2:24:9e:9d:43:8f:a9:
                    b2:ea:62:88:eb:b4:2f:94:f0:64:13:66:b8:32:16:
                    57:05:fb:b8:e4:37:d2:69:c8:3c:46:ab:22:44:c8:
                    07:4f:55:e6:25:b7:8a:fd:b7:24:48:37:52:62:8d:
                    b2:1e:1a:85:8d:e8:26:f7:3c:2c:25:f9:20:bd:4e:
                    2a:27:50:26:36:56:3d:59:cf:41:31:b1:6d:bf:6b:
                    9e:5d:1f:38:3c:b9:bc:e1:b5:8a:e2:f5:b5:47:df:
                    15:5e:23:c5:90:a3:81:02:c9:59:29:fb:0b:82:69:
                    3a:8f:25:aa:b1:42:7c:75:ff:27:0c:80:2c:49:8f:
                    cc:35:41:f1:8c:1a:07:22:bd:26:65:fd:a8:cd:d9:
                    d7:d2:ae:bf:c6:2e:3d:18:8d:52:8d:12:5c:bf:94:
                    0b:67:54:bc:68:ab:97:d1:ee:57:53:b9:79:17:48:
                    08:cb:2e:76:d5:d3:71:2d:5e:69:46:91:6f:09:64:
                    95:20:ef:5b:79:7a:1d:af:12:00:fa:0a:19:2c:72:
                    3e:3f:e8:68:77:c1:ee:8e:96:f5:58:f4:b1:62:99:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:07:59:ED:B2:40:02:A3:A1:42:FB:44:E1:A3:63:FD:17:3D:6E:FC
            X509v3 Authority Key Identifier:
                keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e7:53:f2:ff:26:ed:8f:b4:b8:cd:2a:b5:80:94:8a:9a:58:
         15:9f:5d:45:96:72:23:34:fb:cb:0c:89:48:49:06:af:77:e1:
         74:31:e8:c2:9c:40:5e:5c:ad:a9:e9:7a:0d:fd:99:b3:6d:8e:
         a4:6f:0e:94:bf:4b:3b:7f:b0:d5:cc:f3:2b:eb:5d:38:fc:59:
         13:06:7b:da:e2:7e:31:de:78:d0:f8:d3:cf:09:1c:bd:75:25:
         fa:e5:3c:15:87:18:3a:19:fa:7f:c3:36:41:13:20:4a:f4:a8:
         96:e5:68:ed:97:32:dd:4a:ad:4b:f1:b4:5d:86:cc:8c:d4:ff:
         d1:bc:b9:f5:30:9b:4a:49:a5:9a:43:82:37:5f:d2:72:96:06:
         4b:25:b9:af:ee:58:33:d2:9a:d4:54:85:7e:f0:27:a6:b2:99:
         e5:43:8c:0a:18:35:d1:0e:67:25:ae:83:60:d9:85:33:ac:61:
         04:db:44:c3:8a:21:8d:75:d7:50:94:fb:96:24:50:c4:1d:19:
         f2:71:7c:b4:a1:40:8f:42:fe:31:8c:ad:ad:ea:f6:31:39:4b:
         09:b6:c8:1e:98:b8:a0:0f:09:c3:32:07:68:c3:7c:11:30:8b:
         86:56:61:96:ab:00:83:85:74:3b:82:8f:cf:97:81:f8:cc:62:
         78:3b:06:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:39:29 2025 by rpki-client