Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File:                     CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier:          8rdir0a1XiY7GlGmF2sF2d1iWfmKZHVpTOsOLsUsJVo=
Subject key identifier:   FA:91:A2:76:80:D2:EE:36:69:6E:BF:ED:74:A4:27:D9:25:42:7A:8F
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer:       /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial:       01969ED1385667392D984DBA0623E33905FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number:          0BF6
Signing time:             Mon 05 May 2025 05:00:33 +0000
Manifest this update:     Mon 05 May 2025 05:00:33 +0000
Manifest next update:     Tue 06 May 2025 05:00:33 +0000
Files and hashes:         1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: lTTG31bHs4CDkAFuc0pFXcF/WoHgyoYkhEhdUFPzBLk=)
                          2: YFKVeEBJZW1VH1lMf1z8k2XR2dw.roa (hash: ktDo2PZ71KEenNsxjiVRbbwqRhzDhrH0f5p3Dle1h/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:d1:38:56:67:39:2d:98:4d:ba:06:23:e3:39:05:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
        Validity
            Not Before: May  5 05:00:33 2025 GMT
            Not After : May  6 05:00:33 2025 GMT
        Subject: CN=fa91a27680d2ee36696ebfed74a427d925427a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:52:a2:2a:ca:89:96:5f:4a:de:ce:38:ee:c8:
                    de:79:1c:0c:9b:22:f0:88:cd:00:33:3a:1f:19:db:
                    48:c0:b0:2d:17:74:80:b4:a4:58:0c:b5:ca:20:1d:
                    0d:7d:a2:f5:39:fd:2a:23:0d:62:24:73:fc:86:33:
                    fb:6a:10:93:d9:28:84:f5:69:03:dd:1f:43:c1:0f:
                    97:1f:ba:de:3f:d9:6a:4e:c9:55:33:2d:ed:39:02:
                    77:d2:f7:a5:8b:93:e6:a1:4c:a3:a5:b5:6c:0d:a7:
                    f5:50:d1:2b:0b:2b:b2:d1:02:36:95:f7:3f:4a:88:
                    44:f8:e1:de:8b:b2:4b:71:53:7e:ff:93:bb:f3:42:
                    f7:63:f9:f5:59:20:b4:92:df:44:83:06:8e:a5:2a:
                    70:fa:69:7d:76:7d:47:12:71:42:bf:b2:37:ee:47:
                    b9:21:56:c0:ce:b9:10:f4:36:6e:61:62:d0:32:14:
                    68:ca:1f:dc:14:1f:2b:9f:e1:80:0e:1b:92:fc:fc:
                    75:4d:10:e3:59:8d:1b:33:c1:3e:e8:d8:c8:8f:dd:
                    66:78:50:95:9b:95:db:34:7e:30:6a:c6:5f:39:58:
                    df:33:6d:6c:d7:b3:94:c7:80:11:30:61:f8:75:70:
                    58:fe:f0:65:46:40:e1:2c:d8:f1:c7:5d:18:02:e0:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:91:A2:76:80:D2:EE:36:69:6E:BF:ED:74:A4:27:D9:25:42:7A:8F
            X509v3 Authority Key Identifier:
                keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:cb:fa:6c:56:4b:a3:28:c1:d0:74:ac:9e:57:cd:fe:1c:7d:
         1d:56:44:12:6a:c0:6a:64:af:20:2e:25:fa:fe:18:88:09:4d:
         2e:3c:25:0a:5c:63:2f:df:d2:0d:5d:03:9a:eb:2c:36:13:5d:
         ef:50:ab:aa:d9:70:8a:39:7f:18:a5:65:90:27:67:2e:a2:38:
         94:8a:92:0d:ac:10:fe:fc:80:c5:36:9b:a0:db:0c:86:7f:72:
         82:bb:dc:56:e9:46:bd:38:f7:a2:7d:8f:0b:93:c9:cf:ea:b7:
         b1:8e:9e:5f:bc:2d:d5:c7:41:75:13:64:cf:c8:dc:35:e7:0c:
         eb:9d:67:af:4d:8e:1a:46:a8:a3:17:ee:bc:45:05:b1:4f:82:
         68:9c:13:2d:72:80:5d:3a:31:1f:8e:4a:3a:c3:8a:66:b8:e3:
         6d:c1:f6:7a:d0:45:cf:73:d9:03:ff:d5:15:42:7f:9e:a2:29:
         85:05:a7:ac:ba:b9:a1:09:64:63:75:bb:b9:9f:d6:8a:f4:52:
         10:9f:bf:46:c3:e6:43:45:91:66:da:28:ff:5c:92:7a:0d:12:
         c0:fa:4f:e3:2e:ed:fe:68:eb:79:57:db:85:70:f5:78:6d:d1:
         57:9a:47:be:75:a5:61:49:8a:21:34:9a:af:7f:c4:94:b2:63:
         95:4b:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:28 2025 by rpki-client