Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
File:                     iSWuMjSiyXwn9171HT_zJr4GDiw.mft (raw, json)
Hash identifier:          Wdwzmyd9TrtB+s8qBPL0kdFNBuaPywpIYWCryKkyKQU=
Subject key identifier:   AE:BD:33:5E:D2:B4:07:E1:2C:A8:A8:1A:52:61:63:54:D5:E8:1E:57
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Certificate issuer:       /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial:       0196B0A0E31AAF66677BC870DC1C7FA6EC1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
Manifest number:          1529
Signing time:             Thu 08 May 2025 16:00:55 +0000
Manifest this update:     Thu 08 May 2025 16:00:55 +0000
Manifest next update:     Fri 09 May 2025 16:00:55 +0000
Files and hashes:         1: iSWuMjSiyXwn9171HT_zJr4GDiw.crl (hash: w9gRnwILqjAbe6Q/qZiQS01NHiVaKos0aIfWcy1owac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:a0:e3:1a:af:66:67:7b:c8:70:dc:1c:7f:a6:ec:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
        Validity
            Not Before: May  8 16:00:55 2025 GMT
            Not After : May  9 16:00:55 2025 GMT
        Subject: CN=aebd335ed2b407e12ca8a81a52616354d5e81e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:14:5f:84:77:86:a8:01:f6:13:eb:ce:eb:
                    84:0e:12:86:a0:2b:21:05:34:5a:7a:8d:44:e9:86:
                    a9:5b:a3:3f:c4:95:96:47:47:0f:12:46:d4:b1:e7:
                    f2:10:b6:a9:04:cf:58:51:09:fb:ca:83:5f:c7:fb:
                    99:50:83:0c:bc:aa:70:f7:56:0c:b1:0a:48:28:28:
                    28:61:e2:57:97:d0:ea:54:a0:8a:59:e3:07:71:c5:
                    64:5f:b5:7c:2b:ad:97:2c:40:1f:c2:07:13:47:2b:
                    1d:a4:3d:73:0f:20:de:d6:a7:1b:86:0e:6a:7d:1c:
                    4f:f4:ae:96:fb:e4:51:65:88:03:24:f3:22:be:f4:
                    c8:4b:fa:3e:a9:11:bd:72:54:d1:0b:d5:e4:1b:2e:
                    c0:f0:f0:e6:aa:94:17:5b:20:42:81:48:ab:e9:a3:
                    5f:08:51:b9:e3:e4:d2:fc:0f:d1:aa:89:71:72:11:
                    85:e9:93:d5:d7:f0:e8:09:30:34:16:ed:4a:e5:76:
                    c5:e0:07:16:f7:7d:d5:6c:ac:d0:0d:b9:4a:5a:d6:
                    dc:1b:7a:4d:98:a1:d0:42:e7:4c:b1:9f:3b:ed:b6:
                    88:61:8f:f1:de:01:d4:e5:7a:df:7d:d0:01:b9:2c:
                    16:f9:96:72:4b:dd:36:55:a3:da:82:c6:17:52:45:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BD:33:5E:D2:B4:07:E1:2C:A8:A8:1A:52:61:63:54:D5:E8:1E:57
            X509v3 Authority Key Identifier:
                keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:87:b0:cc:f2:f6:e6:ce:db:59:f5:c5:e9:1b:ad:21:32:df:
         59:99:96:9b:5b:a1:01:a1:c3:76:27:b5:83:d4:fb:e3:ce:7e:
         7f:e3:39:ea:4a:61:a8:68:00:b0:c1:bc:34:91:69:d4:ce:76:
         30:c2:fb:b7:a8:c5:5c:53:44:c0:cb:a0:95:02:17:18:ed:89:
         d9:da:60:0e:21:7d:55:6c:ae:cd:d5:07:22:fb:56:44:3b:dc:
         15:be:df:55:06:74:00:e6:e0:b8:95:f8:ca:5e:85:1c:ef:2d:
         76:1a:a9:17:0b:fa:d9:df:68:23:03:ce:49:0a:22:92:f0:99:
         99:9f:16:e5:66:a4:45:6b:56:76:58:09:d5:59:57:56:99:c0:
         f7:79:d3:d8:90:d2:39:0b:4f:9f:f1:3d:37:23:4b:d4:f3:04:
         b8:8a:d2:52:ed:ce:63:d5:aa:0b:6f:c5:bf:32:aa:b5:5d:a5:
         21:cd:5c:f3:ee:5e:23:47:70:4e:1f:6b:b9:d3:aa:8d:a6:5e:
         1d:0f:07:05:74:35:21:71:6e:20:b3:41:e8:ca:16:fa:37:32:
         02:0f:5a:33:f1:0f:26:a6:94:d8:d2:75:ba:ca:8d:db:b4:bb:
         b7:40:50:9c:40:bb:df:e5:df:dc:5c:f6:ba:fc:2a:bc:38:b9:
         27:a3:86:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:22:02 2025 by rpki-client