Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
File:                     O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft (raw, json)
Hash identifier:          GW5pIkvyiY4I1EFAC4fr8j5lXax24L68r9yP4mwjBck=
Subject key identifier:   F5:60:45:51:EB:63:EC:FC:EA:25:2A:48:D4:30:72:0F:33:AB:10:0C
Authority key identifier: 3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
Certificate issuer:       /CN=3b778c7e0e59832527347c2e211fc48c547108cf
Certificate serial:       0196BC36E89B430152C7ADC1BE6CEAA70604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
Manifest number:          0515
Signing time:             Sat 10 May 2025 22:00:37 +0000
Manifest this update:     Sat 10 May 2025 22:00:37 +0000
Manifest next update:     Sun 11 May 2025 22:00:37 +0000
Files and hashes:         1: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl (hash: B4U0Es7jxktt+cG2ZbeCDHwBWft3hdNz9DqJpn8imgI=)
                          2: o2x3XOFjpyXp0a8ZF3YUMEZhNmk.roa (hash: EInA3F+cdzhiSEh4Cbcxk6l2zqAf00tJgnQUKeSBqLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:36:e8:9b:43:01:52:c7:ad:c1:be:6c:ea:a7:06:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b778c7e0e59832527347c2e211fc48c547108cf
        Validity
            Not Before: May 10 22:00:37 2025 GMT
            Not After : May 11 22:00:37 2025 GMT
        Subject: CN=f5604551eb63ecfcea252a48d430720f33ab100c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:cb:37:53:fa:21:d8:9e:a1:32:e4:d2:d5:
                    a4:da:b0:56:74:9e:f8:01:6b:1f:4e:ac:bb:07:08:
                    e2:74:47:55:00:0e:ba:b9:1f:f1:83:9a:ce:26:f1:
                    ae:38:ef:23:15:6d:be:be:fb:99:57:58:d2:6f:78:
                    90:03:a2:8f:0e:cb:f3:2f:8e:89:2b:84:a4:7a:8a:
                    78:c3:61:89:67:1c:c1:ba:8e:f8:94:25:74:96:29:
                    f5:32:ef:34:34:f7:7a:b8:85:51:cf:d9:78:a5:cd:
                    fa:be:e9:bb:4a:08:28:65:34:3f:8f:76:52:10:c4:
                    12:0d:20:a5:ea:7d:a9:38:f2:45:50:d1:59:37:3e:
                    08:b1:50:40:b2:7e:ff:7f:d1:67:5f:90:59:e8:e3:
                    82:8c:71:89:04:1c:a9:8b:ed:9e:d8:6f:98:ee:b1:
                    e5:3f:44:26:ad:48:52:52:22:5f:3f:dc:0c:a7:fc:
                    c2:69:61:83:0d:b7:54:30:ef:37:b7:94:d9:48:58:
                    88:c3:00:39:ef:59:ee:b8:f7:95:0e:b1:8a:e7:16:
                    f9:6f:ca:e3:d9:92:9d:0c:14:b0:26:89:9c:a7:dc:
                    52:20:9e:6f:5f:6d:dc:fe:31:43:41:ab:c4:b1:61:
                    57:43:e9:85:0c:49:8c:da:18:89:5b:d6:f2:14:13:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:60:45:51:EB:63:EC:FC:EA:25:2A:48:D4:30:72:0F:33:AB:10:0C
            X509v3 Authority Key Identifier:
                keyid:3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:31:06:f1:02:cf:b8:7f:0c:bd:a3:d7:00:7a:72:47:9e:e2:
         0a:d2:74:b1:05:0a:cd:5e:95:dc:10:52:78:a1:b8:03:07:37:
         f9:99:c2:bc:85:b9:73:0c:07:0c:91:3c:18:b1:44:99:60:e2:
         de:74:d8:e0:49:f1:7f:55:60:b8:52:4e:22:8a:9d:65:0b:95:
         77:88:83:6c:30:9e:77:fb:c1:4a:76:da:ed:10:52:b4:22:30:
         fb:27:5a:07:ba:c8:0f:dc:c9:dc:22:db:1f:e5:11:6a:8b:42:
         9a:cf:f9:6a:27:f1:71:6b:c1:b3:95:88:e8:4a:b4:e3:33:8e:
         a4:dd:cc:97:dd:4d:c3:68:be:2a:af:3b:05:bb:0d:4d:f6:b6:
         5b:44:fe:82:8c:8c:d3:0b:f2:26:09:82:43:21:11:7a:e7:78:
         17:95:e3:8d:01:a0:92:2d:46:db:f3:a7:26:d2:95:70:39:68:
         6a:0d:bf:0b:49:4b:15:3c:99:ac:b1:fd:42:85:ee:70:de:4f:
         ab:04:9d:4d:41:78:69:65:49:0b:f3:04:e1:01:17:2c:a2:4f:
         5b:ec:6c:e9:8b:88:7f:ea:d4:56:2d:21:8e:45:a9:1a:f2:95:
         84:d4:55:64:dd:8d:87:b0:64:6c:fa:c1:f1:e1:92:7c:b9:92:
         df:fa:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:19:05 2025 by rpki-client