Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File:                     A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier:          OGqDg8/ip2bCxo8CuLFa/4r2Iax+Hu/CtGt6WYHN67E=
Subject key identifier:   9C:64:46:6A:EF:4B:C4:EE:FD:46:C0:87:E4:37:D1:7F:C3:53:88:AA
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer:       /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial:       0196ADD689BD8092591577029F42D8A65C55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number:          01AD
Signing time:             Thu 08 May 2025 03:00:40 +0000
Manifest this update:     Thu 08 May 2025 03:00:40 +0000
Manifest next update:     Fri 09 May 2025 03:00:40 +0000
Files and hashes:         1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: CuZalABTKjO6agAW6yAFRhYzQ+YPvHSZfvwuWKfwStA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:d6:89:bd:80:92:59:15:77:02:9f:42:d8:a6:5c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
        Validity
            Not Before: May  8 03:00:40 2025 GMT
            Not After : May  9 03:00:40 2025 GMT
        Subject: CN=9c64466aef4bc4eefd46c087e437d17fc35388aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:93:56:c5:f1:7d:44:38:b0:61:4c:7d:df:5e:
                    1b:6d:e9:8a:c7:95:de:cc:7a:ff:0a:36:41:c6:59:
                    58:ab:0b:2e:22:4c:32:f0:54:85:8d:82:49:37:fb:
                    42:15:e5:cd:e8:5d:40:de:71:13:85:66:c4:df:3c:
                    a4:1c:86:09:c5:ce:30:41:3d:e3:c9:56:5c:db:2a:
                    fd:d8:01:ed:7b:1a:07:b0:b9:b1:ed:40:37:a6:d6:
                    ec:ca:d3:7b:28:77:29:32:a3:68:98:fd:19:ed:25:
                    52:3a:bc:6a:ab:03:f7:69:ef:4e:1d:66:98:29:d4:
                    6d:f5:de:71:2a:a5:87:92:71:ec:9f:85:24:1e:28:
                    06:88:c7:62:e0:b0:36:2d:82:1c:3d:84:51:ed:a1:
                    d9:d2:87:f4:28:6a:1f:63:25:73:81:71:ca:86:58:
                    8e:5f:2f:f9:46:27:59:27:07:f8:ce:43:fb:45:66:
                    c1:f0:6b:11:b7:4e:83:d0:91:cb:c6:53:17:b5:d3:
                    ac:12:a6:de:da:02:ec:d6:ee:93:92:f1:56:8b:a1:
                    51:98:ac:97:99:02:3e:61:ec:d9:83:02:eb:68:b1:
                    2b:95:42:36:8c:80:91:c2:8f:1c:b9:ab:93:b0:db:
                    a3:24:d7:ba:e9:83:ec:22:56:36:13:90:36:ec:13:
                    63:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:64:46:6A:EF:4B:C4:EE:FD:46:C0:87:E4:37:D1:7F:C3:53:88:AA
            X509v3 Authority Key Identifier:
                keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:48:6c:17:72:6b:a6:1e:13:07:a6:c3:3a:b3:02:c3:e3:0d:
         28:6d:c6:7d:e4:15:ea:31:3b:55:e0:ab:cb:40:d7:7e:84:46:
         85:c2:bf:16:de:82:29:c1:3e:78:e3:16:5e:2b:0d:26:ac:33:
         9e:46:c5:77:b6:75:b2:72:36:4f:0a:71:cc:fb:fa:b7:e3:5a:
         c9:42:f4:8c:c7:47:c1:68:a1:21:1f:02:e3:d4:38:78:59:8e:
         5a:19:b0:ec:1a:13:15:11:78:5f:86:10:8f:7b:98:59:c8:16:
         9d:6e:1f:0f:69:a7:ad:b5:09:6c:c4:b4:54:e7:93:25:e9:bd:
         5a:f2:c6:fc:21:40:81:72:81:80:f6:8e:29:42:61:b4:20:64:
         43:45:28:04:92:fc:33:56:d6:98:9b:4a:84:fb:27:7b:bd:92:
         96:28:9e:c0:45:8a:99:40:47:f6:5d:15:60:8d:f3:01:82:a6:
         15:81:6f:ad:81:0f:fe:93:1a:d1:75:76:48:c5:70:f0:eb:c1:
         b2:c0:c9:5f:f6:40:74:32:43:05:b0:3b:da:4d:65:18:0b:c5:
         b7:c2:70:3f:26:1c:ed:8b:f9:49:b8:28:1e:c6:fd:ad:fd:7e:
         b9:50:9a:31:de:d5:70:a4:84:83:84:53:2e:40:90:b5:03:4c:
         fe:81:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:53:30 2025 by rpki-client