Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
File:                     iXwaiMnImulCVOIkHHiOl8H_Pkg.mft (raw, json)
Hash identifier:          rQ0HxtATDYNM7wJZ+YSEauOzazxlieX2pMiUGw1eSoc=
Subject key identifier:   0A:04:D8:14:29:69:C8:E6:D1:91:A6:93:D4:1F:AE:DC:4F:75:50:B7
Authority key identifier: 89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48
Certificate issuer:       /CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
Certificate serial:       0196C2396EA96C99E540EE1D5874112A7AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
Manifest number:          1536
Signing time:             Mon 12 May 2025 02:01:05 +0000
Manifest this update:     Mon 12 May 2025 02:01:05 +0000
Manifest next update:     Tue 13 May 2025 02:01:05 +0000
Files and hashes:         1: ZHIJTLjmcUW3hsvKL30OKexctZ0.roa (hash: N5O/J+YUvC2PM4XmYzKt8UEzZ7cELw7jbsW94bDC90o=)
                          2: iXwaiMnImulCVOIkHHiOl8H_Pkg.crl (hash: 2CI/rd60HzxftV+ewBkvxYSFVUpYVihQA5UYNhu4XYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:39:6e:a9:6c:99:e5:40:ee:1d:58:74:11:2a:7a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897c1a88c9c89ae94254e2241c788e97c1ff3e48
        Validity
            Not Before: May 12 02:01:05 2025 GMT
            Not After : May 13 02:01:05 2025 GMT
        Subject: CN=0a04d8142969c8e6d191a693d41faedc4f7550b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:b1:00:59:dc:c7:f0:66:fd:d6:32:59:43:
                    bb:f6:5e:e4:9d:40:29:73:52:37:f5:ab:43:c7:b8:
                    62:a4:65:70:f5:3c:53:4d:37:73:b7:6c:3d:fa:42:
                    2c:73:07:71:5a:7f:8c:eb:d6:79:be:72:03:23:2a:
                    93:45:5a:20:1c:27:0b:4a:f4:6f:c8:8a:55:4c:b4:
                    fc:d3:9f:c7:95:b5:26:7e:30:bc:28:4e:79:1c:14:
                    bd:19:90:80:e8:d1:d4:21:37:28:01:ac:ac:bc:f3:
                    87:fb:50:3a:1c:38:aa:86:5a:0a:5e:93:54:b9:09:
                    0c:19:af:23:c4:56:38:f7:6d:0a:95:7f:3a:d8:61:
                    08:7f:6d:2d:b8:b1:55:ba:28:ab:8c:c1:3f:07:03:
                    24:33:2f:d4:91:ea:de:b8:96:cd:88:ab:1f:1d:a6:
                    df:d4:8b:91:6e:89:b7:8b:a8:0b:50:af:3a:7b:a3:
                    6c:91:16:14:40:f7:c8:26:44:92:2b:57:5a:70:91:
                    e0:38:b5:f3:6d:e4:bd:5b:ca:a5:4f:5f:ae:2c:ea:
                    b6:eb:24:ad:8e:d2:8b:ff:b5:50:c1:77:f1:36:3f:
                    a4:86:fb:99:4e:00:87:12:26:9b:5f:17:c0:7c:37:
                    a0:08:66:0c:c7:55:23:65:5e:03:89:25:2c:39:1b:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:04:D8:14:29:69:C8:E6:D1:91:A6:93:D4:1F:AE:DC:4F:75:50:B7
            X509v3 Authority Key Identifier:
                keyid:89:7C:1A:88:C9:C8:9A:E9:42:54:E2:24:1C:78:8E:97:C1:FF:3E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXwaiMnImulCVOIkHHiOl8H_Pkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/eb3e03-3968-4db2-bf80-43f6ae520b1a/1/iXwaiMnImulCVOIkHHiOl8H_Pkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:e4:d0:49:c1:d2:42:4d:e1:d5:76:32:6d:a0:15:a0:3c:
         51:eb:e4:69:91:90:41:a0:2c:4a:03:df:1a:27:67:6b:82:25:
         db:d5:87:75:a2:ab:39:2b:7f:67:a9:ec:a3:0b:fd:ea:d1:bb:
         71:fc:a6:06:22:32:52:d4:93:6c:11:b1:87:ec:85:a2:6d:e0:
         71:19:0f:a4:35:8b:e9:a9:79:4b:24:1f:3e:77:db:aa:ef:23:
         17:60:ca:8c:15:48:9e:16:da:96:29:02:57:a4:cd:ad:42:1d:
         50:2d:c9:ff:0f:4c:8f:a7:e2:f2:66:2d:ef:88:17:15:2b:ca:
         6a:e7:73:65:8d:b7:2d:f3:b0:3d:f5:fa:69:d9:5c:d5:0d:1b:
         88:f7:2d:6b:26:2f:f4:e7:aa:0f:b9:f9:75:b2:e5:4f:7e:d1:
         c8:84:2b:dd:77:e7:4f:6e:e7:e8:bf:9e:be:b7:a9:4d:59:4e:
         30:44:ca:a7:e1:9d:bf:0f:b9:6d:02:d5:3a:c6:23:6a:1f:fc:
         35:e8:30:e2:ff:28:04:44:72:a5:ce:64:14:46:cf:6e:0d:b7:
         30:24:47:0e:58:04:5d:97:78:08:14:65:3f:40:9f:d8:68:aa:
         bc:7f:6c:ae:55:cf:00:04:9e:d9:b4:a0:ff:65:3b:84:fe:47:
         b9:d0:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:15:57 2025 by rpki-client