Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
File:                     hiGwt9-gp4iPde_yDzIUWgs_DdU.mft (raw, json)
Hash identifier:          CzzvOpQX1QdVRpT1pkfrnaZ4l976f19NhpXGk7+/MuU=
Subject key identifier:   CE:A5:38:56:C7:8A:CB:C1:62:17:6B:4E:4A:34:A4:6D:EA:30:A9:38
Authority key identifier: 86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5
Certificate issuer:       /CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
Certificate serial:       0196BAECFB58C902A4B41C875AB3D1575C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 16:00:15 +0000
Manifest this update:     Sat 10 May 2025 16:00:15 +0000
Manifest next update:     Sun 11 May 2025 16:00:15 +0000
Files and hashes:         1: E7w56iH6n62Qtx76-l21Wicx0tI.roa (hash: mYbpZ2jovxydBfbzCm7J8lBecdgedCJGDSbz9EY1aRY=)
                          2: hiGwt9-gp4iPde_yDzIUWgs_DdU.crl (hash: 2epcwJQcDwMILfUTcR9Z9nzwXzls/yI20gH/sy0UzWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:ec:fb:58:c9:02:a4:b4:1c:87:5a:b3:d1:57:5c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
        Validity
            Not Before: May 10 16:00:15 2025 GMT
            Not After : May 11 16:00:15 2025 GMT
        Subject: CN=cea53856c78acbc162176b4e4a34a46dea30a938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:bf:c5:6f:54:82:32:05:a3:3c:ec:13:4d:
                    37:39:f1:91:8d:04:4b:b0:32:4d:9e:2e:1a:63:a4:
                    46:55:90:c3:75:7b:c7:c7:cf:24:fb:b9:9b:c6:23:
                    63:e0:58:9b:59:ac:b5:19:bc:60:b6:80:16:6d:c1:
                    f4:d1:83:5d:ad:c8:a1:28:87:f5:df:bb:2c:5f:45:
                    80:d3:cc:eb:58:f3:3e:16:c4:95:81:86:1d:c2:57:
                    70:cb:ab:fc:9d:77:70:04:71:9d:2b:10:e4:cb:8a:
                    4d:df:cc:f4:5f:ef:fe:7f:41:c9:dd:6b:43:3a:99:
                    fb:4d:98:ef:07:29:ce:ce:8b:a4:a7:5f:88:16:24:
                    56:fb:d9:cc:a5:99:52:e0:1c:d7:b4:68:5f:b4:ad:
                    d4:56:b1:ed:e8:31:c5:15:7a:9e:f7:cb:83:4c:0e:
                    42:11:9e:d4:88:8a:20:78:79:70:ef:05:47:42:e5:
                    76:91:f8:b5:c8:cb:e2:94:89:56:f0:15:97:ae:8e:
                    bd:53:2a:29:31:29:11:7e:39:02:07:3e:02:fe:3f:
                    84:63:0f:68:75:f7:ef:0a:32:79:aa:fd:df:82:ce:
                    ba:b1:dc:43:12:6c:55:fe:3e:a3:1f:4d:23:e7:89:
                    89:44:78:a9:7e:0e:b6:3d:bf:22:00:e5:b5:11:16:
                    98:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A5:38:56:C7:8A:CB:C1:62:17:6B:4E:4A:34:A4:6D:EA:30:A9:38
            X509v3 Authority Key Identifier:
                keyid:86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:87:2f:50:b0:9b:3d:13:53:4f:21:b2:77:e8:db:cc:94:cd:
         23:3a:33:cd:f3:e8:89:b1:23:21:55:fe:d2:ef:cd:81:f1:e0:
         74:51:49:9f:17:46:60:fc:f3:3f:ec:9c:c8:43:90:c1:94:b1:
         bb:8e:72:54:03:5c:ac:04:05:99:59:84:66:59:d7:b3:c8:4c:
         3a:8a:c8:bc:48:d4:ff:fb:c8:e5:51:13:34:ab:6d:2a:6b:e3:
         00:f2:7e:31:a8:72:8e:2a:e8:e4:16:a4:ea:a2:1a:36:f7:82:
         92:62:62:88:dd:12:55:5e:64:49:ef:52:9a:27:e1:a3:a8:43:
         55:d6:60:91:19:5a:df:1b:b0:c0:18:c9:c1:dd:6f:25:e9:ba:
         e4:26:91:d1:90:45:69:28:23:89:c3:90:ef:4d:bd:78:5c:bd:
         12:30:cb:af:96:a2:11:97:97:cb:e9:f6:73:10:24:a2:a3:fa:
         cd:63:a2:9c:eb:5d:98:f6:1e:a7:9d:76:59:74:1d:64:22:f7:
         8a:91:17:3c:91:b0:52:e5:7d:07:d1:bd:5e:d5:1f:79:03:3d:
         43:5c:6c:93:0a:e3:b5:05:0d:9f:10:ef:13:6f:f4:2f:32:36:
         aa:7f:36:78:55:54:8f:c9:cc:99:3e:14:a6:7d:42:c1:04:43:
         81:c8:1a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:15:58 2025 by rpki-client