Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
File:                     Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft (raw, json)
Hash identifier:          dZE/SYsNXnGi7r8xi3gV47llDxDoRdxp1opEujqRopA=
Subject key identifier:   33:08:74:83:C2:0F:4D:B6:05:4E:E3:54:E8:B6:62:5A:61:28:27:65
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Certificate issuer:       /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial:       0196AF8DA0EF22F2C5DE690B835053F436FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
Manifest number:          1537
Signing time:             Thu 08 May 2025 11:00:16 +0000
Manifest this update:     Thu 08 May 2025 11:00:16 +0000
Manifest next update:     Fri 09 May 2025 11:00:16 +0000
Files and hashes:         1: Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl (hash: lWemQ8j8S3M4QSr8LvAhzIXScilaeKWzlGu3uFjXPWA=)
                          2: GkXcWKv2tiZbmRFso5KDAtIlFEs.roa (hash: qBk0djYI/QNSD8TA0vX6gS28tOn4bjIOUEqnaYwDuO8=)
                          3: MAzNFV2te9n7kjEaFpStK8vBowc.roa (hash: cw6Ks/U2S63sovwgOc3pI9cS6N4rqlfzqVdKZqK6qIU=)
                          4: jmKQUYSEuZIWnZkjgKqeurLJKlA.roa (hash: ubeUqXL5MrFy3GKLg6YblSSTGgynKbrvwUY5fbq4vzw=)
                          5: si63heC5AIvLLejmiH4SUxw44s0.roa (hash: A2b+++OovlxutbnaWL8WBqlzNLX6SyYHAUqNmWE0KKc=)
                          6: tzI-3RvxZseZ0auE1vTr_8vXlHs.roa (hash: CiZ/fhpSU1BnMxFu5Ur8z7I7FFKUZ6D5j7i0HG/zpqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:8d:a0:ef:22:f2:c5:de:69:0b:83:50:53:f4:36:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
        Validity
            Not Before: May  8 11:00:16 2025 GMT
            Not After : May  9 11:00:16 2025 GMT
        Subject: CN=33087483c20f4db6054ee354e8b6625a61282765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:be:65:f6:f5:f9:7a:92:d3:a2:fa:28:ba:
                    56:70:96:55:f6:1c:96:a2:fc:37:ba:f9:b7:c4:d7:
                    1f:60:e6:10:50:ae:4b:02:5d:61:94:9f:62:db:78:
                    f9:e9:dd:6d:7c:b3:c2:70:96:d3:d4:c9:b5:67:78:
                    75:55:32:87:89:fc:c8:fe:06:05:ca:a5:5b:00:cd:
                    de:08:e5:c3:02:a5:8a:0b:26:ba:53:a7:54:be:c8:
                    89:5b:f1:b8:eb:1c:68:c8:55:0a:ea:62:25:a5:cf:
                    3d:6e:0f:6c:f3:b0:ec:ca:c2:25:10:ba:cc:0d:0f:
                    f9:7e:1f:19:09:74:98:66:66:66:11:5a:de:13:31:
                    c3:91:f1:0f:a2:e8:b9:af:e1:1a:6b:38:a5:40:83:
                    e9:db:b3:de:ec:27:72:c6:36:40:73:67:6c:3a:4e:
                    d3:81:8e:67:fd:1f:2b:df:47:3a:b9:07:6b:21:4c:
                    9d:33:cd:b4:c9:76:ef:ee:bc:bb:e7:0e:b7:0e:ae:
                    f2:da:85:16:f3:84:b0:68:6b:6a:19:5c:0a:d3:6b:
                    97:24:34:e0:b1:66:31:23:c2:8d:fc:4e:65:01:8d:
                    d5:75:88:86:e9:f5:b1:ff:6b:c7:91:a5:13:94:eb:
                    7c:d8:f6:68:cf:2a:e5:6c:4f:b6:61:2c:5d:aa:f1:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:74:83:C2:0F:4D:B6:05:4E:E3:54:E8:B6:62:5A:61:28:27:65
            X509v3 Authority Key Identifier:
                keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:07:02:07:14:b4:66:65:36:85:5a:71:90:5b:f6:73:ed:87:
         fb:67:6a:72:93:d0:c9:b7:e8:b9:0b:66:b3:48:28:ac:02:59:
         78:8a:18:d1:34:0d:db:c7:de:f3:03:a0:d1:57:aa:32:5b:c9:
         af:00:03:bb:44:f4:92:10:1e:08:59:7b:f8:e5:b7:03:a3:54:
         35:eb:cd:44:60:d4:fe:29:0d:ca:92:c1:f6:3f:a1:52:5c:df:
         37:4f:be:dd:53:b7:b6:38:c3:c6:fc:5d:66:6b:f8:72:a5:45:
         d8:79:95:da:ce:d9:f8:b9:09:d2:4b:68:3e:eb:0a:04:92:d9:
         0b:0c:92:7e:fa:f5:57:c4:64:14:92:d9:5e:67:7b:28:d2:a3:
         ef:ba:da:a4:be:2e:24:69:3c:cd:b9:b6:50:14:b6:3f:1f:70:
         92:25:c4:59:c0:e4:2d:d0:d2:09:13:01:b0:2d:6a:f7:f2:36:
         4d:8a:36:11:94:40:d9:49:cf:7a:35:b6:a2:44:d5:9c:9a:a1:
         fa:1e:ed:0c:b2:a8:7b:50:a4:a1:e2:9b:2e:2f:e8:2d:f1:9f:
         11:c9:74:e5:1f:83:1b:3a:97:13:81:b0:e3:42:01:d2:fd:0c:
         63:88:8e:75:0a:09:3a:cb:55:d9:d3:b1:df:4b:b6:22:4d:eb:
         61:c8:07:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:12:37 2025 by rpki-client