Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
File:                     V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft (raw, json)
Hash identifier:          1DuM7w4gEA4Q/UwIghw3r4uL2jWyPBdBXIYlw7uqoOg=
Subject key identifier:   58:A2:94:D7:78:91:82:B9:7A:F1:D9:50:52:D5:D1:94:9E:D2:0C:E8
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Certificate issuer:       /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial:       01958B4D72740EEF1772BE364DCE5B5D8C87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
Manifest number:          0E27
Signing time:             Wed 12 Mar 2025 17:01:03 +0000
Manifest this update:     Wed 12 Mar 2025 17:01:03 +0000
Manifest next update:     Thu 13 Mar 2025 17:01:03 +0000
Files and hashes:         1: 7mW3WjVVw9eGN8jbjHf3-to5ckg.roa (hash: mgTvCDtWlsTF65gNfXMneOYsagkRwGQqVAdRKNVR7wE=)
                          2: V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl (hash: WxdKkwWleVn6L1UljuknDHLLUgHJBuwgoroFJkiKisY=)
                          3: opZuDmDWQL5ca_7w2GLyUTRdL5E.roa (hash: icGuPqMDdyClVp/nHf/m0TN12+gflYp9hAwPQL0ezMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:72:74:0e:ef:17:72:be:36:4d:ce:5b:5d:8c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
        Validity
            Not Before: Mar 12 17:01:03 2025 GMT
            Not After : Mar 13 17:01:03 2025 GMT
        Subject: CN=58a294d7789182b97af1d95052d5d1949ed20ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:0c:20:64:f8:f4:63:14:84:19:08:dc:d7:
                    bb:79:45:24:98:a9:ce:da:24:f1:96:80:9d:4a:bb:
                    b1:e7:5b:9f:50:5f:4d:89:3b:c7:64:28:0b:d9:14:
                    1b:08:9e:33:b5:8b:14:00:13:dd:e2:0e:c0:03:19:
                    0e:9a:74:4a:1c:55:af:23:b2:47:20:0c:08:1a:70:
                    5e:4d:44:3b:14:8f:8c:33:0c:88:57:e5:a1:92:31:
                    a1:31:55:f3:33:65:05:22:bc:d6:34:c0:46:eb:06:
                    b5:70:9b:72:90:75:8a:b1:fe:a4:7a:1e:ef:33:34:
                    72:14:81:c3:ef:99:fe:60:fd:ca:0c:66:f5:28:76:
                    dd:1a:88:30:60:d3:cb:6b:fb:a1:14:9a:85:18:71:
                    8e:94:59:20:90:bb:65:4e:82:f2:31:2c:1d:98:e5:
                    60:bd:77:ee:fc:b5:20:c1:e4:1f:0d:0d:86:15:51:
                    4a:ab:b5:7e:3d:14:4b:ab:7f:ac:3e:8b:01:5d:24:
                    2e:8a:6c:60:63:56:5b:05:e2:01:63:1c:0b:c6:d3:
                    65:27:4c:fa:21:39:72:88:b8:5f:20:98:f0:12:b0:
                    ab:38:69:f8:c5:6d:ab:30:e2:65:c9:37:86:a8:48:
                    c7:e0:cf:99:83:c8:5f:e0:07:07:2f:73:8e:76:f0:
                    c3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A2:94:D7:78:91:82:B9:7A:F1:D9:50:52:D5:D1:94:9E:D2:0C:E8
            X509v3 Authority Key Identifier:
                keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d8:08:05:99:b9:03:2f:a7:ee:86:fc:06:88:19:1d:4d:58:
         e0:ac:04:b3:c7:fa:55:93:93:3c:47:74:31:8c:3d:bd:17:00:
         9c:e8:11:07:e5:e1:86:1f:46:c8:a8:9b:41:d7:3e:08:e3:da:
         e7:f9:a0:94:35:f1:aa:f5:47:ca:b2:eb:b8:cb:44:b7:82:cd:
         8f:21:4b:96:ed:3a:1b:25:5d:89:25:07:1c:79:31:70:a2:f5:
         9d:08:ef:c7:a3:71:bf:8d:8a:be:94:5a:69:1a:f3:0a:80:48:
         0b:41:45:77:8b:09:6b:8d:69:ef:38:73:e0:11:96:b4:8e:01:
         27:fa:e3:51:5a:05:fa:db:26:12:0a:2a:f6:75:97:7e:88:fc:
         9b:c0:e8:de:3c:cb:c4:14:81:b2:bd:f6:a9:ea:3b:e9:ce:fd:
         26:b8:98:0d:cd:0a:f4:70:ae:6e:bf:43:db:46:70:d1:b5:28:
         22:8c:59:52:67:9b:c5:29:ec:8a:52:4f:e4:b1:35:f7:ef:02:
         09:3a:97:c1:57:b4:7d:ef:6f:69:62:2c:06:fa:ee:0e:aa:e0:
         f4:56:0c:31:4c:06:9f:ab:65:9e:95:dd:e6:6c:6a:7e:69:a7:
         3f:aa:4f:3d:74:16:be:4b:fc:59:8d:7f:a3:c3:fc:34:97:d0:
         fa:38:f7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:17 2025 by rpki-client