Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
File:                     kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft (raw, json)
Hash identifier:          cK1kCLpeBL6SxTKmc653TQtnVc1BI/R7Tyl7RjhPW4M=
Subject key identifier:   90:CC:93:24:41:3B:D0:42:3A:FD:E5:45:01:12:9B:70:40:ED:85:4A
Authority key identifier: 92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E
Certificate issuer:       /CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
Certificate serial:       0196B5C700C7627BD95EDB2BAAF48EAF5B04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
Manifest number:          0AB3
Signing time:             Fri 09 May 2025 16:00:39 +0000
Manifest this update:     Fri 09 May 2025 16:00:39 +0000
Manifest next update:     Sat 10 May 2025 16:00:39 +0000
Files and hashes:         1: LZy1osNQUhfVUq7phinZnPKl6sg.roa (hash: reyk0Zvn/J6AzXb7QQ8ewqifkrvY/15JT8YFCCBaMEM=)
                          2: kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl (hash: RF9DhJepY75hSMpoC5pbNjjj2Uur8ICSYI6jTKRhYwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:c7:00:c7:62:7b:d9:5e:db:2b:aa:f4:8e:af:5b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
        Validity
            Not Before: May  9 16:00:39 2025 GMT
            Not After : May 10 16:00:39 2025 GMT
        Subject: CN=90cc9324413bd0423afde54501129b7040ed854a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:12:99:d0:28:58:09:af:81:ca:11:9b:7b:b3:
                    03:0d:04:89:5f:2f:17:c9:a3:18:7c:80:d2:f6:10:
                    6d:a0:92:21:eb:68:96:c7:d4:52:6e:f0:a7:bf:4a:
                    33:7e:6e:02:52:a3:93:77:c1:5c:00:7c:13:3e:89:
                    36:a1:20:ae:ec:09:f3:77:4d:2e:6e:4f:d8:8a:a9:
                    8e:2b:53:9b:4c:60:69:1d:ea:01:64:c2:c2:68:87:
                    f4:42:ba:37:af:39:5e:8d:c3:57:f6:12:07:13:31:
                    b7:5f:16:c0:6d:39:1a:0e:50:fc:5d:29:5f:26:c1:
                    96:2b:55:78:fd:5c:2c:6f:25:17:e8:b8:d6:82:0d:
                    86:d3:aa:99:fa:9b:97:a0:9c:2b:22:6d:10:f3:f6:
                    36:9d:e2:83:8a:b2:cf:8c:8a:f0:ee:38:3c:bb:42:
                    6d:58:6b:21:c0:8f:49:20:cc:80:37:f3:e9:1b:60:
                    f6:5d:ae:15:2e:c5:02:3b:4b:f1:44:7a:e7:5f:58:
                    33:cd:77:6a:20:a6:39:b7:2a:e6:f5:ad:1f:61:a3:
                    bf:2d:e6:57:e6:7d:5c:fc:36:6c:3c:6d:64:50:04:
                    67:28:09:83:ea:5f:91:ef:d9:54:4c:9f:4f:52:69:
                    1e:0d:9a:10:b3:33:c3:75:13:32:ba:43:4a:6d:85:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CC:93:24:41:3B:D0:42:3A:FD:E5:45:01:12:9B:70:40:ED:85:4A
            X509v3 Authority Key Identifier:
                keyid:92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:6c:5d:9e:5c:b8:8c:e0:bb:8b:a5:30:31:6f:a4:2e:2c:26:
         2c:f3:83:10:64:84:d0:69:a6:ff:ad:2d:dd:0a:fa:92:0e:09:
         4d:0f:df:15:9f:59:e8:ab:15:6a:7c:02:af:7c:db:5b:dc:9b:
         fc:4a:b8:eb:41:d6:98:91:9c:9f:09:68:2d:77:b7:a5:59:ff:
         ea:da:08:22:b6:c2:b0:10:ae:3d:af:da:25:a9:8e:49:86:b3:
         79:db:4e:0d:c5:e2:5e:1d:df:c7:26:c1:e5:19:03:a5:37:0b:
         f2:c4:41:6e:20:08:c1:cf:b4:a3:fc:d3:65:f1:04:a8:a7:fe:
         b8:37:09:69:7d:9d:80:df:3f:04:19:5a:1a:ab:c6:da:b8:76:
         27:bb:12:eb:f0:87:ff:83:b1:f6:e2:40:d1:7c:6c:1c:e3:39:
         66:b5:a0:26:29:a1:0e:6b:08:24:cb:6a:f0:bd:ed:67:7c:c2:
         55:37:3e:e1:68:d5:a1:32:cd:51:e1:3e:c0:f9:d4:50:5f:eb:
         49:bc:7f:e9:ac:6e:86:e5:17:92:d3:36:97:f9:be:d3:67:0f:
         76:04:ed:5b:4f:78:c5:7e:31:6d:ab:26:1d:bc:1b:bb:e2:69:
         96:56:e6:1a:fa:99:63:51:ae:c2:0c:52:37:08:51:c1:fc:e3:
         15:8c:ab:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:04:28 2025 by rpki-client