Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
File:                     8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft (raw, json)
Hash identifier:          O4YJGeP9Y2Von1AqIIXB/UHp2l1VsqOkLTeCuZEiWYc=
Subject key identifier:   31:ED:36:C4:36:CA:6C:35:3E:2C:F8:E3:E8:98:BA:51:22:22:76:2D
Authority key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Certificate issuer:       /CN=f2bffa2742563265037029a78f9317339053009c
Certificate serial:       01969D8800C6441CF37F9EDA48C98269FA89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
Manifest number:          0504
Signing time:             Sun 04 May 2025 23:00:57 +0000
Manifest this update:     Sun 04 May 2025 23:00:57 +0000
Manifest next update:     Mon 05 May 2025 23:00:57 +0000
Files and hashes:         1: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl (hash: XvcobU3TJa/7pSkrs6U0Au6EgeGGpsBmDdi5c94nHK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:88:00:c6:44:1c:f3:7f:9e:da:48:c9:82:69:fa:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bffa2742563265037029a78f9317339053009c
        Validity
            Not Before: May  4 23:00:57 2025 GMT
            Not After : May  5 23:00:57 2025 GMT
        Subject: CN=31ed36c436ca6c353e2cf8e3e898ba512222762d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0d:31:1a:9a:78:0f:a0:66:1d:f8:80:e1:ec:
                    41:f1:1a:3e:01:eb:8b:e1:da:31:0e:07:b7:11:b8:
                    4c:f1:bb:fa:3b:c2:fb:b3:b2:fa:b2:2d:85:f6:c0:
                    b1:8a:64:dd:53:f0:10:66:24:45:06:15:25:ce:c8:
                    c9:61:05:0c:1b:8a:16:f7:d2:7c:f4:29:eb:bb:a6:
                    85:52:fb:53:54:c3:b9:92:35:23:d4:e4:bb:a8:89:
                    a9:ae:f7:34:1f:48:0d:41:98:11:2e:e6:1e:cd:44:
                    8a:8f:7e:44:0a:ee:0b:53:84:a2:06:bb:23:41:b8:
                    3b:59:bd:a4:f8:57:a9:ff:bb:8a:41:35:e4:cb:d0:
                    c0:0e:90:d3:46:9e:29:d6:e9:a4:05:c8:b7:27:eb:
                    52:79:33:d6:d6:11:0b:a5:b0:6f:ac:61:83:02:af:
                    72:3f:27:67:59:9e:ce:7d:31:27:6a:b2:74:8d:f2:
                    16:46:dd:08:b4:03:8c:0b:33:a7:00:ba:92:5e:79:
                    ce:03:3b:52:3a:98:28:97:c2:6a:8b:ae:92:82:6b:
                    32:30:ad:52:b0:32:bf:b1:52:b5:1c:94:d3:11:8b:
                    d9:cc:40:d7:cf:4b:57:78:3c:4a:17:2b:36:7c:8b:
                    1e:47:8e:51:a8:73:18:3c:d0:8b:c0:a5:91:0d:bd:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:ED:36:C4:36:CA:6C:35:3E:2C:F8:E3:E8:98:BA:51:22:22:76:2D
            X509v3 Authority Key Identifier:
                keyid:F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f1:6d:a1:ea:a1:fc:3f:f5:7c:14:b1:c9:6f:8d:50:3f:14:
         77:bc:e3:e1:3f:82:a4:2a:79:9e:24:4a:a7:50:68:67:fc:8a:
         73:90:54:5f:02:24:38:6a:a7:69:a8:cb:a0:71:02:37:39:f4:
         51:ad:91:a8:29:51:56:f7:a6:c8:4c:43:41:b6:dd:b6:e8:7b:
         ef:26:54:96:0c:12:72:a8:ab:cb:33:0a:4b:2b:06:26:66:2b:
         77:86:be:59:15:97:ce:58:88:4a:96:e1:ef:c1:d8:e6:46:72:
         2d:9b:cc:31:2c:fd:e9:1d:99:33:cf:af:86:a1:94:4f:68:fd:
         92:16:fb:51:ed:d5:b7:55:d8:b5:eb:e3:1c:07:1b:00:aa:73:
         c1:9a:fa:45:41:78:50:dc:bd:ec:e4:f2:b7:3f:e8:5b:2f:3d:
         19:82:5e:b4:b2:19:99:aa:e5:9f:93:59:ab:48:08:0d:14:0d:
         48:12:7b:24:17:4f:14:0c:e0:5d:4e:69:f2:0c:ab:28:6b:ea:
         cc:6b:7c:84:d2:d6:2a:ff:76:c2:9b:c8:15:1e:05:e1:63:b8:
         d0:95:0e:b9:a1:23:0f:0a:ed:9c:fd:98:92:20:01:7e:94:5b:
         e1:1e:8d:b7:8f:67:c4:61:1b:6c:64:58:a5:e1:81:92:5a:41:
         28:cb:3f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:09:43 2025 by rpki-client