Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File:                     gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier:          fyQHspiOPgxIh8emQfUI0P6TE94Ri5u6UJnJPQqioJY=
Subject key identifier:   BD:D3:1D:EC:FD:9E:66:5F:0B:6F:61:A4:22:BD:0C:21:5F:85:30:E9
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer:       /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial:       0195116B9CADC4D9C4487AA3D3C11847F2F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number:          0806
Signing time:             Mon 17 Feb 2025 01:00:19 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:19 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:19 +0000
Files and hashes:         1: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: w5jag9euhBRFStK2OH1zPLznu/+KDB1/5FLtps4ZunY=)
                          2: oBBYy0ld98gJluOgW3OE5ry-1bI.roa (hash: cDSWMJxoBmliysmmQ82PR5LMpFN2xHzw2hwrTiHsQ+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:9c:ad:c4:d9:c4:48:7a:a3:d3:c1:18:47:f2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
        Validity
            Not Before: Feb 17 01:00:19 2025 GMT
            Not After : Feb 18 01:00:19 2025 GMT
        Subject: CN=bdd31decfd9e665f0b6f61a422bd0c215f8530e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e0:0e:bd:4f:59:0d:6b:12:f3:b5:a7:97:f1:
                    6c:d3:c4:3b:0c:31:88:81:8c:1d:d9:83:0e:00:92:
                    a6:e6:f1:1c:46:0e:ab:b0:25:84:0d:f4:b1:cf:2a:
                    0b:5d:eb:50:4a:89:ff:14:bb:dd:a9:9b:e0:58:4a:
                    bb:a7:07:4b:f1:33:c1:60:d6:17:5a:55:2d:77:ae:
                    14:2e:61:16:42:bc:d7:c6:01:15:53:e2:fa:c5:10:
                    2e:24:85:14:c1:3d:df:84:7c:48:fb:d3:02:81:34:
                    8d:4a:9e:17:b9:08:3e:2b:ce:74:23:1c:99:62:06:
                    db:52:8c:84:ef:1f:21:4e:36:4a:d9:0c:eb:de:fe:
                    51:c7:c7:d5:f1:ad:48:ac:f7:7e:09:66:be:6d:4e:
                    92:03:01:71:0f:8a:e0:38:86:14:d9:53:e6:15:dc:
                    90:64:07:37:11:2d:79:74:4d:ba:93:98:e4:b1:87:
                    9e:ac:be:a9:d8:ac:37:46:9a:11:d3:15:cb:2c:b6:
                    f0:a6:a1:5e:66:30:78:f8:65:17:d1:a8:62:85:9f:
                    c8:11:25:60:b7:57:0a:fe:39:05:9d:a5:09:b0:89:
                    ee:f5:30:7e:37:59:12:de:26:42:99:71:b0:d9:3e:
                    43:74:57:69:05:20:38:d9:73:6f:d5:08:7c:40:0b:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D3:1D:EC:FD:9E:66:5F:0B:6F:61:A4:22:BD:0C:21:5F:85:30:E9
            X509v3 Authority Key Identifier:
                keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c2:75:4e:90:f9:ea:51:56:51:43:69:c7:df:6d:ab:1e:8e:
         a3:f7:41:37:71:a2:15:c1:1d:43:5f:67:d0:7f:a2:57:9e:c7:
         01:3f:4b:55:8e:22:d8:13:3b:0e:b4:27:55:9f:f6:51:d0:f4:
         79:68:83:c3:c0:aa:ef:b6:16:c5:4a:ed:30:91:81:76:df:b2:
         80:09:85:13:d7:e2:69:f8:4a:91:7d:2b:de:23:60:99:47:b7:
         29:3a:bf:09:ef:8c:0b:7d:19:dc:a9:d3:9d:7d:c8:f4:6f:39:
         30:21:b8:45:3a:69:6d:6e:5c:8a:4c:73:9a:bc:fd:97:ec:ab:
         23:ad:09:b3:6b:a9:bd:74:54:fd:d3:a1:a2:b5:34:29:91:13:
         65:ab:dd:5d:5f:6a:f3:f4:c9:d9:a1:20:ec:5d:92:fd:5e:5e:
         6f:27:78:c5:95:73:7e:cc:84:99:5a:fb:a6:24:2b:2b:66:5c:
         61:38:f8:de:ab:0b:d7:8e:de:f2:91:d2:99:2c:a3:20:53:4f:
         3f:ad:a6:bd:da:8e:08:6b:5f:90:ef:f5:1e:b6:8d:07:b4:49:
         62:c0:fb:6d:ae:c1:c7:e5:c8:10:65:b7:d5:3a:41:42:ca:43:
         18:bd:5e:23:36:ac:19:21:dc:b3:9c:4d:2c:04:06:94:be:81:
         aa:b8:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:18 2025 by rpki-client