Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.mft
File:                     r89alhpnpvrt_v2PKluD8mg3WYQ.mft (raw, json)
Hash identifier:          mxxLR8Q63Zyl4LiogG6mBx3hikd23incpcpMmKshiaQ=
Subject key identifier:   4A:66:BD:B6:BA:E9:C2:26:12:9A:5A:32:CF:EB:5F:38:F8:AD:7C:D4
Authority key identifier: AF:CF:5A:96:1A:67:A6:FA:ED:FE:FD:8F:2A:5B:83:F2:68:37:59:84
Certificate issuer:       /CN=afcf5a961a67a6faedfefd8f2a5b83f268375984
Certificate serial:       0196A72FDB7DA50DB7E10E766C778C27AD0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r89alhpnpvrt_v2PKluD8mg3WYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.mft
Manifest number:          019A
Signing time:             Tue 06 May 2025 20:00:53 +0000
Manifest this update:     Tue 06 May 2025 20:00:53 +0000
Manifest next update:     Wed 07 May 2025 20:00:53 +0000
Files and hashes:         1: r89alhpnpvrt_v2PKluD8mg3WYQ.crl (hash: t7jvW4RpGIX8PnZgQY+T80hKU1OFBbYOAn96JEx6Jl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r89alhpnpvrt_v2PKluD8mg3WYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:2f:db:7d:a5:0d:b7:e1:0e:76:6c:77:8c:27:ad:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afcf5a961a67a6faedfefd8f2a5b83f268375984
        Validity
            Not Before: May  6 20:00:53 2025 GMT
            Not After : May  7 20:00:53 2025 GMT
        Subject: CN=4a66bdb6bae9c226129a5a32cfeb5f38f8ad7cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:59:93:84:4c:cd:e2:58:ff:51:ea:35:b2:
                    a0:e3:9a:56:b9:29:2c:c9:a7:9a:72:8a:f8:52:66:
                    5e:ce:81:5e:d9:be:78:d6:8a:53:c3:96:d5:39:d6:
                    4d:18:b4:8f:5c:4d:f2:03:13:6a:bd:4b:2b:52:bd:
                    d2:43:be:07:84:ea:1e:0f:ff:aa:34:0e:35:46:53:
                    24:09:76:14:92:81:fc:37:26:89:17:4f:58:bf:53:
                    91:ee:17:3f:aa:3c:6c:ad:e2:e9:a6:b4:1c:e7:59:
                    94:08:53:b7:e5:db:d3:b5:c4:fc:bb:05:fc:0a:51:
                    dd:57:7c:13:8a:14:e1:05:98:90:b1:3e:6e:2b:65:
                    a3:6c:48:6f:3d:d6:c6:ec:49:c3:ce:5c:89:9f:c7:
                    79:7f:28:52:4b:dd:51:5b:b4:55:23:6f:c5:01:5a:
                    5d:0a:4e:f1:fd:b1:bc:b4:1c:29:21:58:c4:c7:b9:
                    ab:ab:3c:9d:ae:48:e4:0c:c7:c8:96:d9:70:a6:c7:
                    fa:06:bb:a4:9a:f8:e0:0b:c4:70:bf:2c:95:66:f5:
                    6a:da:22:78:8c:18:dd:b6:29:a8:74:56:7d:76:e4:
                    83:ba:26:78:39:42:66:ac:05:da:82:17:17:f8:0f:
                    6f:89:90:6c:f0:b1:9e:8a:5d:0c:06:23:39:c3:5a:
                    9c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:66:BD:B6:BA:E9:C2:26:12:9A:5A:32:CF:EB:5F:38:F8:AD:7C:D4
            X509v3 Authority Key Identifier:
                keyid:AF:CF:5A:96:1A:67:A6:FA:ED:FE:FD:8F:2A:5B:83:F2:68:37:59:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r89alhpnpvrt_v2PKluD8mg3WYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:67:e0:b2:34:c9:7f:40:3d:b3:64:49:cd:73:da:85:96:32:
         34:b9:80:11:82:62:53:66:5c:e7:a8:47:a8:29:3e:5a:af:e3:
         da:31:2e:8b:e3:49:81:01:9a:52:de:b5:97:a2:9e:ed:c0:7b:
         ed:cd:ab:08:bc:11:22:51:ef:f5:c8:bf:4c:b9:13:87:42:be:
         3d:5e:b9:7d:a5:2f:19:53:e9:0f:87:4d:5c:32:00:dc:dc:0f:
         91:07:eb:a2:18:32:77:e7:04:cb:69:ce:c2:fa:10:2e:96:a8:
         e7:f3:d8:82:56:29:d5:32:2c:8b:bc:b1:39:45:23:ec:6d:8b:
         5f:88:af:f3:6b:60:81:a6:53:a0:c6:e5:fa:ff:a5:43:f9:72:
         38:78:6b:b5:4a:3a:43:c6:01:f6:b0:6c:66:d6:27:ce:0a:f1:
         f3:2e:c0:e3:a7:6d:ab:73:c6:64:5f:6b:3e:58:ce:e7:37:80:
         d3:9e:d8:c8:16:09:6a:e0:06:c3:36:20:e2:77:4c:a3:8d:17:
         c2:f7:78:20:53:df:d9:79:09:c8:4f:d1:64:71:90:73:31:73:
         e2:d4:a9:6f:b7:64:ed:c0:31:12:b2:3e:ad:07:02:28:71:22:
         77:53:18:26:4c:4a:35:f9:cc:27:55:09:82:05:0c:8f:2e:5d:
         59:5a:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:21:43 2025 by rpki-client