Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File:                     jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier:          uIa8pY7z5Sueky2ZosYIlatlKMXI29citTQYIJ0ljE8=
Subject key identifier:   C3:70:D8:C3:5E:D5:68:05:37:B4:A1:BE:C0:74:22:7F:04:7B:75:4C
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer:       /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial:       0194C3883E7CAD93B38992655C1F8D370A72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number:          22
Signing time:             Sat 01 Feb 2025 22:01:13 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:13 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:13 +0000
Files and hashes:         1: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: gzErFcRLZ/Z/U22i26A2yzp2tw9lWkbQ6ODncIQk7ac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:3e:7c:ad:93:b3:89:92:65:5c:1f:8d:37:0a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
        Validity
            Not Before: Feb  1 22:01:13 2025 GMT
            Not After : Feb  2 22:01:13 2025 GMT
        Subject: CN=c370d8c35ed5680537b4a1bec074227f047b754c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:f1:2e:b7:9f:68:22:3b:90:47:42:07:a2:
                    20:49:0d:c3:7e:ac:a9:13:c5:a4:97:24:cc:a8:4e:
                    60:75:12:35:6e:31:94:a3:c7:11:2d:3f:55:07:be:
                    9b:62:48:f6:20:16:ba:b5:43:0c:65:c7:aa:8b:db:
                    7b:f1:5d:8e:46:47:21:d6:15:5c:cc:16:27:52:a4:
                    5b:15:17:21:40:d6:b3:61:52:1a:31:f6:b6:8d:78:
                    20:d0:29:bf:29:d2:7e:f0:04:76:16:3c:4a:e7:82:
                    dc:aa:d1:e5:3c:c2:ea:c1:c4:83:ad:4b:21:36:8a:
                    2c:6d:83:13:aa:ea:71:ac:b5:80:1f:56:72:44:3e:
                    be:ba:c1:e7:06:77:70:d9:3d:a6:54:8d:b4:26:98:
                    ea:ad:a8:c0:21:29:01:1e:fc:41:90:15:03:60:16:
                    27:05:7d:78:5d:e2:3e:51:bf:48:3d:0d:89:7c:4f:
                    c3:cc:24:a2:b6:e1:48:af:79:72:b5:dd:5c:be:1f:
                    bc:08:50:fe:b4:ce:1a:e4:fa:92:12:8f:2e:f2:9c:
                    0b:8b:db:f2:e8:d0:54:8c:f9:55:28:0d:27:0b:36:
                    8e:d1:bd:b5:f3:81:a9:ef:4d:69:bf:4c:3d:62:5f:
                    41:cd:ba:66:0c:15:59:c0:39:02:5c:bd:ab:de:e6:
                    04:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:70:D8:C3:5E:D5:68:05:37:B4:A1:BE:C0:74:22:7F:04:7B:75:4C
            X509v3 Authority Key Identifier:
                keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:4d:1b:1e:7f:28:2f:ed:90:f2:14:0b:71:74:2c:44:89:0d:
         ce:75:ca:ff:e4:67:33:39:01:71:2d:ec:78:0e:5f:6b:3c:81:
         d6:67:20:01:89:90:74:8f:0b:52:a3:95:f6:f3:87:5e:c5:9a:
         ca:57:e6:ed:e1:00:7f:52:c9:d2:e8:19:e2:03:2c:41:e3:25:
         80:cb:ce:31:be:27:d2:78:32:53:41:5d:01:3d:94:cd:41:33:
         45:dd:52:21:08:4a:b9:96:ec:b6:ad:18:03:09:4b:a7:09:b4:
         f9:c6:db:37:90:21:84:d6:ea:a6:de:af:b2:ef:c6:21:3e:ef:
         9a:b1:9b:b2:1a:a5:7f:fe:18:b0:d2:f0:c6:db:aa:4e:fd:33:
         d1:b3:f8:df:19:0d:51:c1:33:7c:b9:0e:7c:91:5f:b1:71:9d:
         65:45:a6:bd:bd:84:d4:03:13:b1:af:e7:96:3a:09:6e:d4:22:
         cb:3a:d2:08:24:9a:b0:a7:b4:78:0e:dd:68:60:74:30:d2:f9:
         57:0f:32:fd:2c:ba:fa:ec:48:b5:00:6a:d2:07:1e:07:ef:8a:
         ba:5c:eb:ad:44:e2:b4:b9:01:9f:f7:1c:2e:fd:6b:bc:99:74:
         d8:fd:0a:46:c5:d8:d4:4f:ff:cc:b0:0c:f1:68:1b:c0:c5:42:
         94:65:ec:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:53:37 2025 by rpki-client