Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File:                     IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier:          zrTWL1mcBluvU4YiNsYkv0OSRVmjny2vQ7i0ZrlwSPU=
Subject key identifier:   62:67:1B:47:2B:4E:4B:B4:75:7C:6D:97:F3:2D:86:1F:51:52:DE:58
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer:       /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial:       0196AC1FA5C2E76C9AE7BF00C4CDB05D8E94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number:          0375
Signing time:             Wed 07 May 2025 19:01:17 +0000
Manifest this update:     Wed 07 May 2025 19:01:17 +0000
Manifest next update:     Thu 08 May 2025 19:01:17 +0000
Files and hashes:         1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: M/sI2wj+VZCRg9a0d9eaDeblHLAmS9iEXoCmqmYDheg=)
                          2: NaamLFW_oKTnWlrMvBxG2icERPo.roa (hash: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=)
                          3: liwLvjN0YzoFo1ERy-bzjz4VsTg.roa (hash: GDU7sYUZLvs8qPvsE64PL0ZAdRZi5E+mt7+6WSUX+BU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:1f:a5:c2:e7:6c:9a:e7:bf:00:c4:cd:b0:5d:8e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
        Validity
            Not Before: May  7 19:01:17 2025 GMT
            Not After : May  8 19:01:17 2025 GMT
        Subject: CN=62671b472b4e4bb4757c6d97f32d861f5152de58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:2c:a6:0a:79:26:13:07:d3:57:b2:a9:f6:
                    a9:08:0b:b9:f2:4d:75:07:11:b1:ef:f1:06:b9:3b:
                    4e:4a:29:3c:f3:97:b8:08:ae:d5:21:d9:83:37:50:
                    e8:f2:60:78:be:d1:b2:f6:3d:07:5b:eb:8c:57:d9:
                    4c:1a:51:cf:1c:18:eb:1b:28:ca:c7:31:75:53:c0:
                    95:40:82:bf:33:f3:06:f8:ee:c6:de:b0:76:e5:c9:
                    6c:13:24:5c:e6:e2:61:61:8b:ba:82:d3:7b:7f:c6:
                    dc:de:83:7e:b2:5e:44:ba:19:79:1d:5d:2a:9f:6f:
                    d0:f6:68:0e:0a:d1:b1:44:e7:be:7d:e7:c1:6c:cc:
                    ea:ed:a6:35:6a:33:74:a5:e2:f2:12:27:0a:7f:9f:
                    f6:6c:2a:ac:30:3b:39:de:bd:b6:67:82:ea:cc:e1:
                    40:03:e7:ba:d9:e0:f2:69:4a:48:ea:87:e1:c4:51:
                    1d:ad:f0:af:92:77:44:b8:24:8f:f0:42:c9:92:a6:
                    b5:d2:b7:09:82:a5:6f:97:f6:f8:d8:a7:01:cc:cb:
                    cf:36:3d:22:fc:82:26:14:fa:9c:14:a5:1a:a9:38:
                    e5:8f:20:1e:9a:f4:31:e9:cf:39:76:ae:82:97:c4:
                    d2:c3:60:21:64:8a:ee:bb:53:d2:35:dd:f0:ba:04:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:67:1B:47:2B:4E:4B:B4:75:7C:6D:97:F3:2D:86:1F:51:52:DE:58
            X509v3 Authority Key Identifier:
                keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:19:59:e3:a2:28:c1:0b:35:6a:e7:32:0f:3a:d3:3e:68:59:
         5f:c2:08:07:f7:ac:1c:1c:8d:b8:53:4c:4a:4c:38:00:93:63:
         39:28:d5:a5:83:fb:5e:26:ed:5c:92:5d:f2:a6:54:a0:5f:26:
         c6:ce:73:65:05:98:0f:29:23:42:06:c0:4c:70:a9:a0:ee:b1:
         b5:0e:a6:8e:8a:a3:85:29:bf:8b:c2:6e:4f:ca:8a:51:9d:80:
         e5:fa:5d:96:eb:6a:ce:a1:55:90:3d:a4:30:77:a9:e7:7f:ae:
         b7:0f:f2:49:11:ce:2f:7b:25:11:e3:a0:60:2e:d2:4a:2e:65:
         e8:87:e8:ca:d9:6c:af:b3:68:bd:a4:2c:d1:a3:b9:55:f1:ee:
         81:5f:a7:f6:7b:82:df:e3:a0:80:4b:57:a1:2d:1b:37:96:3e:
         ff:f1:ae:89:18:ab:57:52:54:a6:bd:e8:3f:f2:6c:cd:e5:5f:
         62:26:b8:4e:5c:14:50:c5:3f:26:60:dd:1b:b0:1e:85:bc:15:
         e2:72:b4:d7:55:46:0a:7c:4a:8c:30:51:45:45:90:1b:d9:75:
         f2:a8:b0:40:b0:d6:29:00:0e:a1:ac:86:cd:d8:f1:cf:80:60:
         8a:37:0c:75:ec:b9:e3:16:86:43:2a:51:9a:1f:97:35:3e:d4:
         9a:95:4e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:11:58 2025 by rpki-client