Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
File:                     yhzFx7EhfMuxVd3a6CbOb5_brLo.mft (raw, json)
Hash identifier:          utB43n128iM0EgqDgQWE4ir0PSm5DmhAI+4kEXN56So=
Subject key identifier:   3C:D1:E7:08:F0:68:78:1E:57:D8:2E:03:0C:59:0B:EF:CA:F9:97:6B
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Certificate issuer:       /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial:       0196A2775DCEDBFA95CCAF14B61FA8790091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
Manifest number:          1527
Signing time:             Mon 05 May 2025 22:00:53 +0000
Manifest this update:     Mon 05 May 2025 22:00:53 +0000
Manifest next update:     Tue 06 May 2025 22:00:53 +0000
Files and hashes:         1: yhzFx7EhfMuxVd3a6CbOb5_brLo.crl (hash: 9PFZ69R7Od8p1MfZOJlyGyK55R+ehoqOrH31lb0nTYE=)
                          2: yniD2-h7jGuUUlNQypkKXhyQzvo.roa (hash: a5MixzP6IcIXV007WL3u3PcAPZ5qlGOIAKkGTBZ9SHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:77:5d:ce:db:fa:95:cc:af:14:b6:1f:a8:79:00:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
        Validity
            Not Before: May  5 22:00:53 2025 GMT
            Not After : May  6 22:00:53 2025 GMT
        Subject: CN=3cd1e708f068781e57d82e030c590befcaf9976b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:1a:3c:64:38:63:9a:94:a2:60:66:e7:df:
                    f4:09:bd:58:b2:1e:90:23:68:9c:74:78:d2:37:9d:
                    2d:8e:4f:8e:ac:a5:fc:b6:04:d6:b7:0d:3a:b6:8f:
                    30:21:a4:20:c1:a1:bb:f5:94:0b:ad:f0:de:a6:00:
                    13:45:9a:f1:7d:5c:15:7c:5e:82:50:e7:02:bd:95:
                    08:ff:1c:7e:82:51:ec:bd:f1:65:d9:f4:31:ad:b0:
                    ad:18:55:67:3b:de:0c:5b:b2:58:6d:f4:f6:84:2d:
                    ae:59:b2:88:22:39:e2:85:02:cc:cb:5f:29:ba:2d:
                    95:15:49:46:00:da:7e:b2:db:8c:cd:8d:be:83:63:
                    ad:f5:90:82:0c:3b:11:1e:cb:ac:6c:1b:e9:47:79:
                    82:78:c5:81:1d:e1:8b:ce:18:9e:bb:1e:c6:91:c9:
                    5e:5d:43:ed:b9:69:88:9b:a3:47:d8:37:b7:e7:37:
                    14:0a:92:2a:50:74:6d:55:53:02:ef:3c:58:2f:ce:
                    82:7c:10:7e:d1:2a:77:28:d5:8b:e6:c7:17:4b:8c:
                    91:c2:4c:d2:b2:b6:ba:e4:3c:db:f1:2e:7b:d2:07:
                    37:73:4e:7e:90:ba:31:7e:c7:61:62:39:67:9a:e7:
                    c4:93:a7:a0:e4:7b:2f:dd:9c:bf:60:a7:f7:ba:ba:
                    ed:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D1:E7:08:F0:68:78:1E:57:D8:2E:03:0C:59:0B:EF:CA:F9:97:6B
            X509v3 Authority Key Identifier:
                keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a5:24:2a:e0:26:9a:cf:66:f6:20:7f:21:56:a1:b3:2e:45:
         2c:94:87:e3:e0:9d:b1:40:ce:28:be:7e:14:b3:64:00:ab:0f:
         4f:ba:0e:d1:4e:80:e8:f1:71:10:cb:f7:bc:bc:8d:fc:81:c8:
         8d:c4:cf:c9:35:81:3f:ba:55:92:34:9e:1b:cf:b9:ca:35:f4:
         e6:f3:43:4b:c8:84:0d:3e:5c:06:a9:34:88:00:f6:88:5c:1e:
         4d:06:4e:f5:aa:10:ef:73:e0:be:f8:69:9b:ff:c8:bb:3a:77:
         1f:2f:11:00:94:85:64:14:21:fb:ae:f4:65:bf:a1:ab:43:6f:
         ff:3f:ce:53:81:9c:f3:00:0e:e9:8e:3c:96:53:dc:e2:3e:12:
         c2:43:cb:f0:2b:52:59:3a:01:bf:56:33:5b:68:8d:eb:26:8b:
         30:f2:5c:60:16:87:85:db:c1:5a:a4:a6:81:8c:5b:0b:98:b1:
         08:6a:ff:e8:8b:c8:f8:fb:97:12:4c:8a:6f:a6:2d:62:7e:1f:
         53:ed:69:30:6c:b1:c8:0c:db:8c:e5:44:db:63:2f:06:9b:cf:
         f5:c3:07:47:70:25:03:bc:87:25:96:41:7b:0e:3f:34:b7:3d:
         70:f7:2e:ae:b7:91:83:75:49:ca:89:d8:a9:b7:94:93:c8:de:
         ab:af:32:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:21:47 2025 by rpki-client