Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
File:                     Mya5UKRaLGusFQX80E2UDMCWj5Y.mft (raw, json)
Hash identifier:          3wAl+oC7LutB2d/05MewwOO0XdqynCzVjdRba43gyYw=
Subject key identifier:   EC:AD:B4:9A:E0:F5:24:66:56:8F:3A:56:F9:E9:04:ED:C5:D8:7A:D4
Authority key identifier: 33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96
Certificate issuer:       /CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
Certificate serial:       01951134FD0D6256C93147CEA6C646D6ED6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
Manifest number:          033F
Signing time:             Mon 17 Feb 2025 00:00:40 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:40 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:40 +0000
Files and hashes:         1: Mya5UKRaLGusFQX80E2UDMCWj5Y.crl (hash: zlIagtjNHKqVWre8AgYf9ExUD16q2ltdTvETtWbr1Zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:fd:0d:62:56:c9:31:47:ce:a6:c6:46:d6:ed:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3326b950a45a2c6bac1505fcd04d940cc0968f96
        Validity
            Not Before: Feb 17 00:00:40 2025 GMT
            Not After : Feb 18 00:00:40 2025 GMT
        Subject: CN=ecadb49ae0f52466568f3a56f9e904edc5d87ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:99:c9:9d:77:c9:9e:f1:cb:88:bb:e9:3d:4b:
                    37:93:6b:3c:e0:45:b7:41:5c:6b:49:f0:97:14:75:
                    5e:76:c6:da:75:e7:75:7e:1f:99:24:91:b9:5e:61:
                    d2:a3:8b:cb:b0:c9:5b:17:d3:c3:c1:d5:e5:95:96:
                    d3:42:4f:ed:23:6a:b3:ac:53:60:23:d5:e5:dd:27:
                    e8:25:d6:16:82:1b:32:98:8a:e1:4e:1d:dd:b7:d1:
                    e7:1a:34:06:06:c1:03:75:40:02:65:2c:96:7b:53:
                    1f:98:85:b8:60:f7:55:ed:34:42:2a:5e:75:be:ee:
                    02:71:4c:d5:fb:e5:78:0a:fc:e4:5d:23:fa:4b:ef:
                    f4:b6:ac:e3:b7:ec:14:79:55:8c:e6:38:64:69:66:
                    45:84:20:08:a7:bd:e7:9a:f6:b8:8d:22:9d:e3:45:
                    35:5c:6d:36:07:41:e1:20:43:f2:43:51:15:4e:c2:
                    2b:f6:0b:8e:7b:dc:3a:a6:48:1b:63:3f:10:7f:46:
                    5a:0d:61:5f:7f:34:ba:a2:f5:45:c9:6f:5f:43:dc:
                    37:42:13:f4:d4:06:55:b8:4f:2d:99:f0:66:56:00:
                    ec:d5:54:af:59:d1:aa:47:70:ab:c9:48:ff:fd:5c:
                    c6:97:87:ac:a7:09:f3:3d:1f:3c:41:e1:74:2b:c3:
                    48:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AD:B4:9A:E0:F5:24:66:56:8F:3A:56:F9:E9:04:ED:C5:D8:7A:D4
            X509v3 Authority Key Identifier:
                keyid:33:26:B9:50:A4:5A:2C:6B:AC:15:05:FC:D0:4D:94:0C:C0:96:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mya5UKRaLGusFQX80E2UDMCWj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/28b730-f5bb-4606-8365-08e10638225e/1/Mya5UKRaLGusFQX80E2UDMCWj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:6b:d6:44:e7:cb:76:a9:b7:60:8d:93:e1:f2:e1:51:15:
         59:43:64:2d:19:47:09:4d:d4:5e:ce:26:16:89:49:98:2b:15:
         84:b2:e7:40:5c:d7:6e:f3:d5:df:25:ad:b2:7c:ad:e4:f7:b4:
         1e:6c:ae:6b:12:bd:b4:a5:f7:2f:c2:72:32:09:cf:82:56:6b:
         90:90:6b:11:ca:59:8b:ad:e3:26:5f:44:72:d0:58:44:79:5f:
         11:40:57:1b:17:9c:d5:39:01:7e:24:4f:74:f3:36:e7:1f:fe:
         71:62:37:d2:49:48:49:64:4b:ce:5a:7b:bc:5a:0b:75:fd:16:
         b5:9b:8e:25:50:31:11:14:b7:09:40:52:72:9e:3a:5d:95:84:
         28:3f:be:0f:47:a3:52:22:f8:7f:0a:f5:71:9f:7f:f7:81:a2:
         1d:a6:31:6d:4c:e5:e8:74:17:fb:44:de:52:05:8e:58:43:18:
         b7:ee:f4:a5:b0:58:50:5f:60:f2:82:83:f0:3a:b9:0c:9f:eb:
         60:e5:b5:b8:aa:64:f6:46:d3:66:91:cb:a6:b5:a9:73:15:0a:
         74:f1:70:af:e0:06:51:fc:2e:0b:17:8f:e2:fd:6f:0a:25:00:
         d4:b7:a7:89:ef:b3:d5:be:5e:25:2f:0f:a4:2c:57:ba:b1:3e:
         12:fd:b2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:59 2025 by rpki-client