Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File:                     hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier:          RAejGlPWiQro9/TmHwAiCyTDavSltfKNLHBsfNV45Ec=
Subject key identifier:   55:B9:45:34:A5:D5:7C:6B:7E:16:42:E5:32:3E:73:F8:D0:A8:F4:D7
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer:       /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial:       0196BE5CBD070931362DEFDC3F13B4B161D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number:          0368
Signing time:             Sun 11 May 2025 08:01:10 +0000
Manifest this update:     Sun 11 May 2025 08:01:10 +0000
Manifest next update:     Mon 12 May 2025 08:01:10 +0000
Files and hashes:         1: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: dmRKKLNHIa6/PJZ9Hr1AFSJCFmVcFNNWM4V8wy/gj4I=)
                          2: j3mlArIrCrvoTStpcqF9EPTMJII.roa (hash: zagzdTS3IOA1uItKGwOJz9trfPNv/LGCzKt9YV1P5Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:bd:07:09:31:36:2d:ef:dc:3f:13:b4:b1:61:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
        Validity
            Not Before: May 11 08:01:10 2025 GMT
            Not After : May 12 08:01:10 2025 GMT
        Subject: CN=55b94534a5d57c6b7e1642e5323e73f8d0a8f4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:5a:79:f6:16:ff:47:3a:c7:3f:3a:3f:20:
                    df:4d:9c:5f:5a:de:4b:79:25:84:8f:b5:c2:a7:1d:
                    f2:50:4b:8d:26:60:ee:17:4b:9e:f4:d4:d7:18:e9:
                    08:21:22:1d:e6:80:d5:1f:a6:e5:26:ed:e7:26:b4:
                    8b:83:06:7c:06:6f:3e:e3:b5:e2:f6:d9:72:3d:44:
                    d1:49:e1:0b:bd:e4:d8:09:c7:6d:ec:e9:52:ae:64:
                    0f:1b:c8:39:21:c5:1c:48:4c:86:56:f6:eb:93:3f:
                    c8:76:69:46:02:8a:51:d8:bd:ec:01:eb:16:16:ae:
                    34:a6:5d:20:32:0f:db:4b:61:1e:3f:c1:b5:78:b5:
                    bb:5d:92:10:29:95:17:a5:38:bc:1a:8b:14:fe:45:
                    b2:92:ff:fc:99:b8:7c:63:ff:5e:71:b0:9f:c5:69:
                    18:c4:7f:78:a1:9f:2a:f4:ed:57:b2:36:0e:f0:44:
                    25:49:41:f6:53:ad:24:48:30:63:00:36:ad:d2:f2:
                    74:2a:40:02:a1:ca:19:a4:46:d6:f1:01:cc:d6:eb:
                    7b:dc:0d:24:79:e0:e2:2b:12:7d:70:33:5e:6b:06:
                    11:e0:23:21:ce:21:b9:d6:4e:f0:05:2c:8b:a6:22:
                    cd:10:c2:8b:bf:6f:fd:ef:a8:da:87:f1:90:8a:83:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B9:45:34:A5:D5:7C:6B:7E:16:42:E5:32:3E:73:F8:D0:A8:F4:D7
            X509v3 Authority Key Identifier:
                keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:96:e8:59:d5:ed:2a:15:86:c2:7f:0e:81:16:7a:a5:b0:53:
         fc:2b:8f:9f:27:b6:99:26:b9:41:f7:72:db:2f:e6:2c:ae:c1:
         94:b4:95:21:b6:52:03:2c:db:11:6f:2d:d7:af:62:7b:9f:87:
         d3:89:52:37:4e:cc:d5:f5:ee:c4:21:b5:07:86:c0:30:09:5c:
         19:17:a8:b0:67:9b:2d:de:66:2f:a9:30:6d:e1:35:c0:6d:5a:
         5f:86:8d:a8:48:7a:33:3c:bc:55:ed:86:7c:5e:be:bf:ac:78:
         f5:dc:88:bf:75:88:0c:7f:db:34:f3:75:4d:80:a7:27:07:c9:
         5a:7a:2b:c3:28:f9:d3:2f:5b:df:77:c1:f5:cf:0b:a9:ab:a9:
         69:8d:0f:f0:3c:2f:3f:68:84:c0:22:41:56:35:e1:c5:e8:69:
         e5:21:6c:79:b7:c2:37:8a:da:9e:f4:cd:1a:63:0e:40:a6:4e:
         58:2b:64:cd:71:44:80:2f:5e:ec:bf:72:de:65:1c:45:8b:ad:
         9e:c7:dc:e0:f4:9a:61:2c:d9:0a:d6:bf:51:95:28:ba:0f:c6:
         c4:c4:5b:3f:b7:15:e4:fb:05:d0:9f:22:b7:05:f0:9d:47:dd:
         0e:93:14:65:ee:3e:83:4d:58:81:80:cb:45:91:80:ae:81:5c:
         f0:77:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:14:14 2025 by rpki-client