Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File:                     1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier:          ObmaRooiFlsDTy30z7DW9qfItR7eJ4qgiqba2gkwswc=
Subject key identifier:   77:3F:B7:B5:F8:ED:EE:3D:55:01:7C:29:E7:DE:21:CE:A0:AD:4F:2A
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer:       /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial:       019510900126D887A97EE16B5B441D2871B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number:          02AF
Signing time:             Sun 16 Feb 2025 21:00:27 +0000
Manifest this update:     Sun 16 Feb 2025 21:00:27 +0000
Manifest next update:     Mon 17 Feb 2025 21:00:27 +0000
Files and hashes:         1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: QiavlKfj9xSs73UpKHVvN/jnHeD4QZI8gS6nxz1AHm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:90:01:26:d8:87:a9:7e:e1:6b:5b:44:1d:28:71:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
        Validity
            Not Before: Feb 16 21:00:27 2025 GMT
            Not After : Feb 17 21:00:27 2025 GMT
        Subject: CN=773fb7b5f8edee3d55017c29e7de21cea0ad4f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:9b:19:2d:9f:b9:7f:dc:6e:9f:57:22:9d:
                    f1:6f:a8:82:9b:86:23:86:48:6a:49:4d:30:24:30:
                    97:62:b8:b4:97:a7:b3:97:38:ab:9a:61:08:f9:75:
                    98:86:c8:40:9d:d1:97:36:d1:3b:0f:b1:a2:f1:0c:
                    e4:9b:f3:71:a1:da:b4:35:6f:ec:a9:6a:5b:57:81:
                    04:e9:98:6f:f8:16:17:00:a8:23:6e:b5:36:a4:19:
                    37:c9:ad:9c:04:bc:38:c5:72:e5:ee:0c:ff:37:81:
                    fb:b3:9e:62:2b:32:e9:4d:0e:e6:99:e8:f4:5b:ef:
                    b6:2c:15:90:87:0f:09:04:1f:0c:76:c0:a7:51:bc:
                    c7:81:69:c9:54:1a:b4:00:75:aa:2f:83:c3:a3:0d:
                    ef:e2:ed:c3:88:b9:78:d5:22:b5:31:a3:35:bf:ba:
                    72:9b:48:3a:b6:04:4e:6a:48:5d:98:6b:00:1e:d4:
                    02:92:0d:27:85:25:47:b6:f2:fa:7c:60:25:a7:4a:
                    b0:4b:41:e8:cf:b9:55:94:08:b2:4d:72:18:24:0e:
                    0d:cb:b6:dc:b0:bd:a4:bc:58:0e:20:f2:9c:70:05:
                    dd:61:1b:46:55:8b:37:80:e8:83:7f:d3:f2:39:1e:
                    af:4f:e1:4c:b2:d1:81:b8:8b:7d:26:6d:e7:78:d5:
                    b2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3F:B7:B5:F8:ED:EE:3D:55:01:7C:29:E7:DE:21:CE:A0:AD:4F:2A
            X509v3 Authority Key Identifier:
                keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:78:a9:41:83:dc:07:c3:ae:92:e8:d8:2b:83:63:d4:a7:0f:
         ee:31:87:7f:62:3f:aa:c0:ac:23:02:e3:ba:7a:f2:91:b2:6e:
         d1:78:f8:66:29:1c:5f:c8:f0:6e:6a:5f:81:2e:1a:10:65:bd:
         11:56:88:7c:1a:3e:1b:24:9b:de:b6:7a:ea:14:38:ff:f9:8e:
         21:f6:a0:3f:11:a8:05:33:22:c4:d9:36:51:44:05:ea:ca:19:
         cd:cf:4c:8c:d9:a8:81:d7:0d:83:66:9d:f9:a0:8d:5a:26:b2:
         b3:f0:45:63:fa:df:34:d8:aa:36:c0:a5:2d:0c:36:af:33:b8:
         5d:b2:bc:39:0d:56:63:83:0b:5e:00:fc:85:f8:73:ec:6f:dc:
         78:43:17:7c:14:da:1a:92:52:11:2b:b7:09:56:44:59:54:c2:
         a7:d7:e0:bd:ce:5e:7b:d0:bd:01:e8:d9:a5:42:a2:29:8d:10:
         b3:b3:b0:46:81:a2:6e:34:c5:19:f9:00:f8:2f:6e:d1:04:f7:
         71:5e:b5:b3:8e:34:0a:6c:ce:03:5f:0b:09:68:e1:55:55:d1:
         f7:88:cd:85:df:51:06:ac:18:b6:4d:b2:15:7b:88:8f:19:0e:
         12:19:50:35:51:19:ad:36:f8:9c:cc:31:2d:1b:cc:35:49:ae:
         aa:b8:41:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:17 2025 by rpki-client