Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File:                     S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier:          PxIr7ZvyPmWDnkEZ0qWa0i46O8fSgQcbDcNXu2OqwvE=
Subject key identifier:   A2:45:06:67:D9:6B:FE:32:FB:B5:28:35:10:BD:CE:15:F0:F6:E4:B5
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer:       /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial:       01958B847AF3A1A212F82C73BD9232A952C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number:          0BCE
Signing time:             Wed 12 Mar 2025 18:01:09 +0000
Manifest this update:     Wed 12 Mar 2025 18:01:09 +0000
Manifest next update:     Thu 13 Mar 2025 18:01:09 +0000
Files and hashes:         1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=)
                          2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: Ovzj/uuQ/q76F+67/nKr+q7Ht2PpwwhBH5+EoucixZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 18:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:84:7a:f3:a1:a2:12:f8:2c:73:bd:92:32:a9:52:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
        Validity
            Not Before: Mar 12 18:01:09 2025 GMT
            Not After : Mar 13 18:01:09 2025 GMT
        Subject: CN=a2450667d96bfe32fbb5283510bdce15f0f6e4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:57:e3:87:56:49:df:8b:44:28:d0:32:0e:5d:
                    a0:3d:9a:a2:24:ff:52:fc:71:95:8e:c3:23:ab:33:
                    b6:d6:b4:f0:d4:61:53:98:c5:90:f7:e6:67:9f:1b:
                    63:fb:aa:51:fb:43:b2:93:84:7e:f7:f8:79:1f:7a:
                    50:89:46:40:df:9b:77:5a:92:a4:d9:94:5f:d3:df:
                    74:49:77:9d:71:83:02:a2:dc:93:97:39:2a:20:40:
                    f0:90:18:33:1f:a4:62:7e:15:b7:a9:d4:11:d3:d1:
                    8c:61:7e:49:3e:27:91:a6:20:cc:42:3c:ae:09:1e:
                    04:44:b5:3c:99:ff:f2:33:26:aa:9e:d8:22:23:a5:
                    95:cb:c4:b3:ca:4c:36:12:75:29:e2:79:40:5d:59:
                    88:93:82:cd:92:46:ce:c4:d5:52:76:e8:3e:4e:26:
                    d5:f9:a2:94:27:44:7e:b0:25:82:9b:c3:67:36:23:
                    5f:37:36:3b:49:2a:b3:ef:a3:ee:08:56:e8:91:34:
                    35:1b:c6:5d:ea:d3:c1:e5:d2:ec:e4:d7:a0:e0:1a:
                    61:66:3d:e3:62:95:d9:6c:ef:07:8b:66:64:cc:f1:
                    7a:25:e7:77:55:65:18:d7:6f:d1:38:5a:d7:c3:d9:
                    49:e8:09:c0:6d:bb:86:1e:37:3f:3d:04:f1:b3:ef:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:45:06:67:D9:6B:FE:32:FB:B5:28:35:10:BD:CE:15:F0:F6:E4:B5
            X509v3 Authority Key Identifier:
                keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0e:c1:18:fa:5f:ce:44:86:f6:f8:2a:58:f7:e9:fe:b7:54:
         b9:70:23:fa:02:6b:f8:21:61:c6:f6:bc:26:10:49:9d:09:ed:
         90:34:71:33:49:72:c6:d8:37:0f:ad:9d:cf:33:c6:79:5d:16:
         53:93:e2:de:01:72:3e:6d:ca:bb:db:05:cd:59:59:b6:f1:cf:
         ac:ec:8a:98:35:2b:f9:ee:57:01:4e:36:27:2d:ea:72:20:f9:
         fc:67:d8:0f:f8:67:8a:7b:83:5f:20:54:d6:27:3d:0b:24:cb:
         cb:cf:37:98:2f:a2:10:72:4e:77:66:c7:74:a2:90:df:14:49:
         e6:da:c8:0b:0b:5c:44:43:4b:c5:8b:40:e1:d6:03:43:df:92:
         bc:27:8e:9c:02:5a:bb:cc:c0:43:1a:96:91:be:3d:2c:af:c1:
         46:fc:db:8f:6c:7d:64:c7:8f:46:45:ad:10:47:81:fe:0f:96:
         ac:e0:68:98:09:ca:0b:0d:8c:16:04:b3:4f:4c:65:e0:ec:58:
         87:02:c8:0c:f1:51:0e:95:f3:17:e4:0b:fe:f4:f3:72:5e:d3:
         d6:ec:43:32:bb:63:ba:23:53:d2:6d:66:5a:34:51:f7:12:8e:
         80:d7:88:fa:7f:8a:1d:21:ff:a4:be:f5:b5:74:08:a5:0d:8a:
         0c:d6:17:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:16 2025 by rpki-client