Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File:                     pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier:          qHY3UCmXoKYhmp0XpeH255QIsCa9HZM6JURhEdZL0T8=
Subject key identifier:   CE:28:AE:11:1F:93:8B:17:46:AE:8A:0A:F5:11:EB:7A:EB:68:97:C6
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer:       /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial:       0196B14538C677498CCEDEF1921F21CD62F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number:          04D2
Signing time:             Thu 08 May 2025 19:00:25 +0000
Manifest this update:     Thu 08 May 2025 19:00:25 +0000
Manifest next update:     Fri 09 May 2025 19:00:25 +0000
Files and hashes:         1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: Furmbpbf8qTiOztlZwU/OmNPaU9vI6qPZ8abuSdzHEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:45:38:c6:77:49:8c:ce:de:f1:92:1f:21:cd:62:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
        Validity
            Not Before: May  8 19:00:25 2025 GMT
            Not After : May  9 19:00:25 2025 GMT
        Subject: CN=ce28ae111f938b1746ae8a0af511eb7aeb6897c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ae:c0:c2:70:46:24:71:80:15:97:c4:d0:ea:
                    ff:0f:0d:c3:26:0a:e4:c7:4d:1e:69:f8:fe:dd:da:
                    6b:90:5d:f8:83:b9:e0:dd:74:20:05:4c:cb:2f:bd:
                    19:00:c0:1a:94:8c:0b:8d:28:00:ee:ad:4c:f3:38:
                    21:79:35:72:04:3c:e6:57:48:ae:f2:39:75:fa:e8:
                    52:32:83:e3:14:0f:f6:e0:b5:ff:4e:59:bc:13:84:
                    ea:cd:03:7a:c6:c0:32:bf:c4:93:c5:2a:24:64:0e:
                    7a:61:ed:91:60:34:83:73:26:18:ca:95:f7:29:90:
                    9f:ee:ba:3b:75:f2:1a:fc:64:f7:23:3a:12:06:6c:
                    20:0b:5b:93:3c:24:48:2b:3f:bc:62:e6:ed:01:ec:
                    63:53:b7:90:f1:9a:07:dd:4b:9f:2a:39:e1:bb:f7:
                    e2:a3:65:3a:b9:c4:97:be:db:5e:85:29:2c:b2:0c:
                    89:ac:61:85:cd:0a:c8:f8:46:de:82:64:26:3f:38:
                    a5:7c:b9:4e:f5:d0:79:b6:3d:55:a5:6c:28:d0:88:
                    1b:08:a5:b9:ba:5f:c0:c4:6c:48:68:2c:f8:b9:da:
                    f1:dd:b3:0b:77:36:9c:ed:6c:20:cd:c1:96:d8:d3:
                    8e:14:94:26:25:ec:c9:35:9b:a5:47:6b:76:9f:b3:
                    54:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:28:AE:11:1F:93:8B:17:46:AE:8A:0A:F5:11:EB:7A:EB:68:97:C6
            X509v3 Authority Key Identifier:
                keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d6:1c:bc:f1:6b:27:45:0a:4e:b9:01:dd:02:43:c2:29:dd:
         d0:ff:0f:a6:ed:26:79:1a:ef:fc:28:75:f3:c6:8d:2c:06:5e:
         91:80:2f:d1:df:a1:34:93:a5:78:92:80:58:d0:66:d3:21:66:
         0f:95:1e:f3:d7:d2:d6:f7:74:0d:09:85:99:4f:6e:2b:1f:1b:
         25:b5:eb:da:f1:9b:76:ec:6d:04:27:4b:48:99:2f:92:a4:a3:
         9d:61:fd:7b:79:ed:79:cc:61:87:bc:e0:ac:61:e7:39:db:1c:
         9b:39:4a:c3:80:d1:ea:39:11:df:59:3e:99:13:60:a1:d4:ac:
         92:d3:91:3c:6b:cd:9d:39:ac:56:70:23:81:c8:93:d2:81:7d:
         d4:ad:9c:76:35:09:bd:3d:ef:d4:48:a2:4f:1c:d4:ef:4a:8e:
         33:cb:7b:66:69:e1:22:9c:75:b3:38:d8:f3:6f:f8:09:21:d8:
         90:de:e5:ea:cf:03:fb:75:01:ec:bb:d5:0b:03:b7:21:b3:b7:
         53:f8:99:7c:e1:7a:4a:58:b4:5b:7b:de:9f:63:d4:7f:90:51:
         f5:d7:e7:13:d8:2f:73:4f:12:90:60:fa:5a:cd:e2:67:39:ca:
         e8:76:ac:88:31:e5:68:c9:c5:09:46:15:97:82:ab:6d:94:b9:
         47:56:05:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:58:45 2025 by rpki-client