Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File:                     vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier:          kAd+6ukI7KCkULX0lsEV5k1VFpM09NmTiGJXRbQFsuQ=
Subject key identifier:   83:B7:4C:09:5B:E9:4F:23:EA:C6:11:BA:83:C1:E8:95:21:C6:5E:3D
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer:       /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial:       019511A29AED9D7B8384D907CDF53EBEEBBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number:          1457
Signing time:             Mon 17 Feb 2025 02:00:23 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:23 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:23 +0000
Files and hashes:         1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=)
                          2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: CU+P2dJzRs25A98H3joiun0B8q9iOWoQt05JbhsMnmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:9a:ed:9d:7b:83:84:d9:07:cd:f5:3e:be:eb:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
        Validity
            Not Before: Feb 17 02:00:23 2025 GMT
            Not After : Feb 18 02:00:23 2025 GMT
        Subject: CN=83b74c095be94f23eac611ba83c1e89521c65e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:ce:da:72:a0:66:07:8b:cc:5e:5f:bb:0d:
                    e3:60:83:a1:6c:97:bd:1f:f2:b3:7b:00:13:93:b7:
                    6e:37:2e:e8:7b:40:8e:57:ba:de:ce:8b:d5:ec:a5:
                    b0:92:1c:fe:be:8f:59:da:07:7f:d3:09:44:98:e6:
                    4e:54:be:8b:ca:cf:ac:fd:3b:b7:b2:5c:7b:00:fd:
                    9f:3b:fd:df:5a:c7:c3:20:1c:9f:d2:45:a3:19:de:
                    6a:5d:d3:34:61:7f:40:b3:13:55:b5:5c:15:e5:a8:
                    63:34:5a:3d:f1:05:8a:83:d5:82:2e:ea:3a:d9:81:
                    ea:bd:63:e9:fe:60:8b:85:44:48:ee:e9:88:ac:db:
                    c2:e7:e2:02:d2:66:fa:c8:c2:28:0d:8c:73:5e:8d:
                    92:62:f3:1d:c5:55:1f:2b:30:bb:13:d6:be:39:57:
                    e0:1a:f7:ab:84:2e:10:9a:69:9e:aa:de:06:25:17:
                    72:3f:10:f0:6b:cc:d1:54:e0:56:fe:db:fb:b4:5c:
                    ec:21:fe:80:80:bf:e6:13:2a:29:95:0c:c3:6a:19:
                    43:10:e0:5b:37:09:ca:1b:40:86:73:3d:70:df:0a:
                    c1:e8:02:5f:86:7b:94:8f:54:eb:d9:7e:f6:65:94:
                    4a:d3:0f:05:d2:46:20:47:a7:df:ac:32:a8:07:27:
                    03:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B7:4C:09:5B:E9:4F:23:EA:C6:11:BA:83:C1:E8:95:21:C6:5E:3D
            X509v3 Authority Key Identifier:
                keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:34:11:7d:f4:82:80:8c:43:4a:b5:3e:5e:52:cb:94:c4:8a:
         6c:61:7c:a5:66:f7:65:92:9a:9f:0e:79:c1:be:49:b8:97:bc:
         bf:f1:28:4d:ed:e8:b4:84:f3:a1:ca:c4:d3:62:4e:26:7d:51:
         7d:ee:bb:5e:54:23:65:74:a0:21:f5:45:ec:fb:80:7c:17:a9:
         63:95:18:0f:42:3b:73:28:46:75:e7:f8:cf:7c:de:63:42:37:
         71:2d:a6:fd:97:ed:28:b0:38:8f:df:18:a3:65:48:04:b3:33:
         4f:22:e7:ce:c8:93:99:2a:4b:76:9b:10:dc:05:a4:ee:f8:03:
         ad:fa:27:65:82:b6:f3:00:8e:06:36:42:0e:57:9a:7d:55:87:
         fc:bc:92:2d:04:df:e9:13:e2:a5:7a:d5:34:8c:7a:94:b8:5e:
         97:d6:0f:ff:d2:a7:72:40:fb:42:6d:01:c5:85:58:15:bd:15:
         a1:a6:07:fb:d5:4e:71:53:48:ec:a5:36:07:ab:f7:6b:f2:6d:
         d4:6b:4b:6b:cf:8e:a7:cb:17:ad:27:bb:99:72:f2:78:cf:e5:
         1e:a1:c1:0e:c1:cf:f2:80:27:94:49:da:87:62:b4:a2:f7:f5:
         12:b5:fd:db:f2:cc:75:56:73:92:32:ab:cb:4b:88:c6:f2:55:
         c6:4a:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:54 2025 by rpki-client