Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File:                     AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier:          ChSCMdH942jG4DlInfFBcRWJPMzupPyKuXLSoS8TYf4=
Subject key identifier:   DC:C7:DF:A0:9B:75:B2:FB:A6:CC:8D:8A:22:E8:6D:F8:CE:0E:27:F1
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer:       /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial:       0196CC17711642B36B3F0951C967AC80E180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number:          0BDC
Signing time:             Wed 14 May 2025 00:00:10 +0000
Manifest this update:     Wed 14 May 2025 00:00:10 +0000
Manifest next update:     Thu 15 May 2025 00:00:10 +0000
Files and hashes:         1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: aijKY9xfc/FnsKjVNDBM0DvqmzxLPlOT6y+QeXDVMWE=)
                          2: ttoTW1mb5ILG0PA-_tc15H39Bu4.roa (hash: NuP48I/0CSAZd0tA3+gwMRRMyGbGny18PxWX5GZCZw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:17:71:16:42:b3:6b:3f:09:51:c9:67:ac:80:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
        Validity
            Not Before: May 14 00:00:10 2025 GMT
            Not After : May 15 00:00:10 2025 GMT
        Subject: CN=dcc7dfa09b75b2fba6cc8d8a22e86df8ce0e27f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:7e:0c:15:0a:aa:74:4e:94:e1:65:c3:83:
                    2e:08:02:70:1a:e6:3c:45:77:d4:57:12:2d:15:4c:
                    34:4c:cf:7f:bc:1d:c9:15:64:64:cf:be:3a:e0:24:
                    8a:e9:3e:7d:2f:58:58:73:78:07:e0:72:17:b0:36:
                    1c:2b:db:67:02:37:a4:0f:c2:4b:b0:da:52:79:1b:
                    f2:12:1d:d2:84:84:56:05:1b:09:0e:7b:2a:82:e0:
                    6e:8a:e7:81:3a:6f:c2:e9:84:1f:4b:25:ff:2f:cc:
                    f1:e8:fe:2c:9d:04:5f:e1:a0:24:45:ee:cb:cf:d6:
                    80:3a:4c:76:87:e6:b9:84:cc:47:1d:22:8e:bd:8e:
                    ca:33:b6:e9:6a:dc:36:ea:db:10:6c:e0:f9:b6:18:
                    ab:36:98:eb:a6:3b:91:cb:8e:a8:0f:a6:24:48:a3:
                    18:cc:e1:1f:1a:09:f3:f1:65:9c:ac:75:70:74:cf:
                    4e:6d:dd:9b:29:97:a3:14:29:55:1a:34:32:d0:24:
                    5c:0b:a1:78:ff:d8:25:80:a5:28:e8:55:c9:1b:ec:
                    2d:51:45:92:54:7a:a9:32:96:49:48:72:a1:6d:b7:
                    da:e8:e9:5c:7e:13:91:3b:c9:3c:cc:93:27:9f:0d:
                    80:1d:32:1d:79:59:de:43:58:05:b8:10:28:7a:ef:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C7:DF:A0:9B:75:B2:FB:A6:CC:8D:8A:22:E8:6D:F8:CE:0E:27:F1
            X509v3 Authority Key Identifier:
                keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7a:d6:e0:0f:a9:4c:ae:38:04:ae:d6:c5:ca:a4:61:27:f5:
         57:c7:4c:e8:21:d0:23:d4:84:40:88:f7:85:f6:9e:45:14:29:
         60:7c:a0:d1:66:e3:2e:f3:2b:19:06:6f:29:68:84:d2:2c:c1:
         d6:00:1a:f3:60:65:90:b4:ff:2f:d1:7d:f6:06:1e:2c:11:15:
         6e:95:d0:c3:25:3f:62:ef:9a:b7:0b:f5:66:08:50:88:6d:51:
         12:26:b1:09:e4:1c:a3:be:6d:43:ae:79:5b:76:d2:24:fb:f8:
         98:51:9a:e1:00:7f:82:59:18:c3:dc:87:dd:54:f7:e7:c2:d6:
         5b:63:eb:bc:34:ee:3f:48:63:f1:ad:4b:a6:61:c1:e1:15:e7:
         63:dd:00:40:28:c2:4a:4f:be:6d:fc:06:01:05:cd:37:4c:76:
         25:77:67:b1:6d:00:54:f2:3c:77:72:91:23:5c:c1:f3:2c:99:
         0e:c7:48:9c:57:46:cb:0c:e8:ce:c5:45:0f:42:0a:75:fb:c8:
         80:b4:6a:20:0f:44:87:5c:ce:8a:33:cc:da:82:96:70:4a:c0:
         ef:e8:74:f1:b8:27:3f:93:0c:26:64:e4:45:5e:dd:87:dd:53:
         6f:90:1b:a4:d6:4f:1e:19:5d:b9:59:e8:8a:f6:b2:3b:ad:61:
         b5:33:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:40:19 2025 by rpki-client