Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File:                     rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier:          4kBqiLqW2uhNMYzd1vbvrXXnv0H1mKysg7FAO5YRsf0=
Subject key identifier:   6B:12:74:D3:C1:F3:BF:34:CA:3E:BB:32:DA:8D:5D:1E:B5:2F:9F:81
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer:       /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial:       01969DF58584B80D7D1B0807AC08EA1FF254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number:          0CE5
Signing time:             Mon 05 May 2025 01:00:35 +0000
Manifest this update:     Mon 05 May 2025 01:00:35 +0000
Manifest next update:     Tue 06 May 2025 01:00:35 +0000
Files and hashes:         1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: UOwEw3ti2K4Ud307VdTHTQHKklCLZyw92/dREq00trA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f5:85:84:b8:0d:7d:1b:08:07:ac:08:ea:1f:f2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
        Validity
            Not Before: May  5 01:00:35 2025 GMT
            Not After : May  6 01:00:35 2025 GMT
        Subject: CN=6b1274d3c1f3bf34ca3ebb32da8d5d1eb52f9f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:6d:b9:c1:2f:b2:84:c5:a0:41:b9:a6:7e:
                    3e:78:09:78:87:4c:43:5d:f2:fb:83:87:d2:ab:28:
                    bc:0b:7d:12:74:86:ac:8e:ea:5a:1a:0f:5e:45:68:
                    bf:2c:ef:0d:d8:73:31:e2:d6:53:04:c8:1c:42:2c:
                    e2:e3:7e:4d:ef:18:8e:41:a8:f1:92:2e:d9:ff:bc:
                    bb:e7:10:c9:9a:52:c0:2b:cf:0f:e8:1e:2c:cf:21:
                    03:77:c8:a4:ed:fb:c6:48:b5:21:c1:db:62:ff:6d:
                    6d:df:04:15:bd:48:17:e5:0e:89:2b:0c:38:56:e5:
                    d3:03:65:a3:67:fe:ed:29:b4:af:5e:47:70:88:dc:
                    10:3b:6e:2a:25:ee:15:dd:d5:ce:c7:a0:a1:60:c5:
                    da:52:17:c9:98:71:1a:02:e8:86:0f:5b:8a:d4:28:
                    95:3c:5c:10:b7:1f:32:10:87:3b:71:9f:50:c0:53:
                    6e:c1:23:be:11:50:e5:48:a4:3a:3c:83:04:e0:f5:
                    88:8e:9b:94:bd:49:5c:ef:e5:78:d7:4a:7c:56:98:
                    f0:b5:70:80:24:50:dd:b3:19:34:17:e1:40:65:41:
                    5d:2f:78:fb:cd:dd:72:25:19:e4:d0:c6:5c:6b:33:
                    d5:ae:98:d0:6b:96:2b:ef:0d:55:fb:cd:95:33:6a:
                    92:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:12:74:D3:C1:F3:BF:34:CA:3E:BB:32:DA:8D:5D:1E:B5:2F:9F:81
            X509v3 Authority Key Identifier:
                keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:bc:63:a5:57:d1:a4:66:99:2c:91:b3:29:79:e1:f6:df:11:
         11:28:dc:50:c6:e9:f0:f4:25:7d:53:7a:18:41:30:6e:2e:9d:
         9c:25:3f:6b:34:c3:56:68:7a:eb:88:a0:4a:41:53:49:a2:e9:
         ba:2d:58:df:24:f7:87:ef:2d:97:d6:20:15:14:cc:7f:07:4b:
         94:f6:88:d2:e2:0c:a2:db:81:9c:0c:5e:5f:f4:c7:a9:50:ae:
         1d:dc:3e:29:fc:e4:69:20:10:27:2e:37:7d:c9:90:d8:39:a0:
         94:51:bb:69:1b:77:10:f0:1a:ff:e2:fa:1d:27:bc:fd:2d:7a:
         a3:f7:c0:a1:38:72:a6:97:9f:80:c5:b1:7e:f9:b4:1b:40:c5:
         59:6c:47:a7:cb:c4:6a:bc:b1:60:08:01:85:80:cf:b1:4a:29:
         e7:92:3c:3c:fa:20:e8:53:78:52:6d:fd:e0:f8:f3:3e:c7:78:
         d2:bc:76:32:4f:66:d4:45:62:38:0d:25:5c:42:c0:83:63:f2:
         ce:ea:61:7e:2c:79:88:5b:a2:4b:e4:ed:89:85:03:8a:66:c3:
         cf:4e:40:4f:97:21:de:f2:10:fb:72:d3:21:74:e7:40:71:f3:
         5e:12:b5:87:18:f8:d2:b1:2c:36:5f:41:4b:60:9d:6a:d4:38:
         80:00:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:34 2025 by rpki-client