Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File:                     Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier:          OezOtI+dml81S3dlNP9lfqdsqgxx5LiYPoxVwtKYocI=
Subject key identifier:   EC:A3:08:C9:5A:CA:EA:39:11:45:8E:1A:65:BE:94:08:D2:71:7A:9B
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer:       /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial:       019510C71FE910B800CFD793C2127FC8E19E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number:          046D
Signing time:             Sun 16 Feb 2025 22:00:39 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:39 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:39 +0000
Files and hashes:         1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: 1eavVovLNzx3xMS5w0TtH6OoKtirBrkokG7AvqkkJG8=)
                          2: F9XGZi-RuqVcSe1fpzN4q7qIdc4.roa (hash: f6T7R08rHMZ0z6ganX/KnRpxEiznu3aFpX2FIokh414=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:1f:e9:10:b8:00:cf:d7:93:c2:12:7f:c8:e1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
        Validity
            Not Before: Feb 16 22:00:39 2025 GMT
            Not After : Feb 17 22:00:39 2025 GMT
        Subject: CN=eca308c95acaea3911458e1a65be9408d2717a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:8c:df:96:c1:15:86:c4:ed:38:e5:f7:48:
                    54:a9:a8:2f:95:d6:5c:de:e0:b6:fd:6d:74:c6:16:
                    ec:a7:7e:8e:cc:b6:17:9e:d7:73:d1:e0:aa:5b:0f:
                    ba:6e:0f:d3:e8:d6:0c:14:dc:32:6e:09:7b:c9:d3:
                    21:0c:41:a4:1d:7d:b1:0c:ba:cb:04:7b:40:c6:52:
                    1a:53:5a:10:48:5f:96:6b:b6:fe:06:49:19:76:c9:
                    b7:27:c4:9a:43:80:5e:64:be:a3:87:88:9e:ca:89:
                    ea:17:d0:02:4e:93:2a:64:ca:a9:7d:d9:1b:88:a5:
                    35:eb:a2:0d:24:1f:51:26:c7:e5:9d:5d:22:af:d0:
                    0c:8e:b0:55:3c:65:88:ab:fc:dc:f8:7c:57:e5:dc:
                    0c:30:8f:2d:e8:da:62:82:28:4c:70:df:a5:ef:d8:
                    91:2e:f0:39:f5:2d:fe:b1:3b:c8:f9:d1:03:86:80:
                    9a:e2:31:7f:32:6a:2b:1f:2b:e5:16:d9:f6:a5:37:
                    91:4f:f4:bc:de:96:ab:27:d5:1e:5c:cf:52:8f:ef:
                    28:e6:f0:1f:33:2d:84:86:89:fd:fc:32:8a:66:07:
                    78:8a:85:52:09:24:e9:46:70:0f:a3:72:87:79:9e:
                    29:b0:86:66:67:1a:3a:bd:d8:f3:1a:51:7b:c7:49:
                    4a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A3:08:C9:5A:CA:EA:39:11:45:8E:1A:65:BE:94:08:D2:71:7A:9B
            X509v3 Authority Key Identifier:
                keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5a:b3:d2:b6:d9:09:78:e6:cb:3f:de:80:ed:b8:79:a0:97:
         eb:d5:8b:b9:82:4b:b7:6c:b7:d2:d6:30:42:57:fa:85:73:6e:
         a8:5b:3b:12:e0:18:91:9a:a4:2e:8c:81:a7:02:ca:3d:d0:07:
         27:74:ae:fe:6d:23:3f:77:73:a9:ad:d7:ff:d3:09:86:23:95:
         6a:aa:83:64:02:0e:26:ab:07:6d:65:ea:2a:75:86:10:55:4a:
         e0:40:1b:1b:1d:66:12:9b:55:4d:54:c2:ce:dd:75:ec:40:a7:
         f9:b5:b0:3b:5a:3b:08:d8:41:bf:95:3e:54:02:8f:90:dc:31:
         c8:67:ef:42:a4:94:73:39:9e:56:34:f3:37:b4:7b:c3:17:67:
         7d:ad:33:e8:db:18:40:05:04:85:a1:7b:8b:e4:d0:e4:90:99:
         bd:2c:eb:02:1b:77:d3:d3:26:15:03:4a:03:61:91:b3:c9:67:
         c2:6c:2c:66:2d:b2:a1:d8:bc:8d:d0:7c:fa:69:e4:eb:80:94:
         ca:b1:ee:2f:01:83:f7:4e:cb:f0:04:ff:74:dd:61:bf:09:c6:
         3d:3d:5b:05:95:22:a5:11:2a:aa:d8:f1:08:0b:57:49:ea:0b:
         86:be:f1:0d:10:7b:76:7f:17:c5:7d:c2:64:07:dd:43:47:62:
         f2:e0:9e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:50 2025 by rpki-client