Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File:                     boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier:          6SZjcSG9YAaV5IRWiz44+xZlpnOSeOl5w3OVNMSZ5r4=
Subject key identifier:   37:FB:AC:C1:B3:A6:DC:8A:DC:FD:E5:1B:FF:32:BA:E1:BC:8B:57:9B
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer:       /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial:       0195127E60118E445A3EBBAACDA49EC04CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number:          1455
Signing time:             Mon 17 Feb 2025 06:00:26 +0000
Manifest this update:     Mon 17 Feb 2025 06:00:26 +0000
Manifest next update:     Tue 18 Feb 2025 06:00:26 +0000
Files and hashes:         1: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: HnyXvZZddK0T4yC9MYGAcung93m2P0uVxxAHLQTbK9o=)
                          2: xL1waNLH89tu16gqR_InkZtP0MM.roa (hash: UbiBAyPW5WcKpHG6QUDn1a6TZhLyyQKfdK3u0M9NdEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:7e:60:11:8e:44:5a:3e:bb:aa:cd:a4:9e:c0:4c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
        Validity
            Not Before: Feb 17 06:00:26 2025 GMT
            Not After : Feb 18 06:00:26 2025 GMT
        Subject: CN=37fbacc1b3a6dc8adcfde51bff32bae1bc8b579b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:e4:fe:0e:77:49:36:cd:81:ae:c0:a5:b4:
                    ea:a2:07:8f:af:9b:36:70:a9:d6:37:3a:05:33:3d:
                    e6:a0:17:ae:80:83:0a:7e:19:17:bb:bd:00:c2:1d:
                    e3:b2:0a:28:13:1a:cf:1f:15:b8:2d:11:5d:8a:39:
                    a6:a7:52:76:43:ec:d5:55:7e:f5:94:44:ac:7a:24:
                    9e:04:e1:c3:ef:7d:57:04:ed:d7:72:1e:26:66:4e:
                    e1:8d:e7:63:33:95:44:d5:94:72:16:50:6a:c0:66:
                    63:12:b2:50:4c:91:aa:9c:6f:20:7c:f3:7d:2c:8b:
                    9b:f4:43:c1:51:fe:17:9a:7a:cd:0b:53:fc:9c:ae:
                    0b:7f:eb:bf:fb:dc:0d:08:34:67:2a:3f:9c:56:ae:
                    69:0e:5f:cd:f3:cb:aa:0a:17:0e:95:73:ba:78:a9:
                    59:65:7c:6b:40:cc:57:a4:aa:78:f4:83:87:35:57:
                    66:62:fc:bc:82:18:7f:10:9c:d8:37:57:39:7a:e8:
                    59:16:34:61:4d:7f:6c:ee:c9:90:bf:f7:03:fb:f8:
                    5e:bb:6f:e4:07:a0:2b:17:fe:c7:dc:61:76:7e:a6:
                    09:2c:26:92:69:bc:13:35:b8:fb:ef:9e:0d:35:21:
                    8e:d8:95:99:0f:60:4f:fc:30:c5:52:6e:c3:09:dd:
                    bf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FB:AC:C1:B3:A6:DC:8A:DC:FD:E5:1B:FF:32:BA:E1:BC:8B:57:9B
            X509v3 Authority Key Identifier:
                keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:06:55:c5:fc:be:5f:3c:f7:c4:86:ca:9d:06:6f:52:8a:a7:
         62:a2:48:cb:13:1c:e4:98:9b:63:46:fe:fe:1d:0c:1f:2a:13:
         3a:d2:fc:66:bd:3a:3c:11:7e:c6:55:d6:3f:9c:21:a9:70:63:
         4f:5a:c9:b8:ce:e4:2b:90:81:44:47:f0:3d:78:89:a9:4e:19:
         f7:6c:c1:7f:7a:66:78:73:eb:72:bf:7c:e3:06:c0:7f:ef:81:
         cb:22:75:90:60:16:87:87:db:57:1e:4e:c2:2c:fa:46:3a:2c:
         11:39:73:82:76:cf:c7:04:46:10:3f:e6:2a:ba:38:56:d2:f0:
         df:3d:c1:d0:c5:53:2c:8b:c3:63:29:07:51:9e:96:6d:a3:77:
         89:8c:42:94:a5:87:44:58:3e:fe:ae:6c:01:0c:95:56:1c:53:
         85:c3:94:c3:1d:76:95:ab:87:32:a6:01:17:90:9b:80:ce:68:
         10:52:e4:13:39:8a:e3:8c:e9:40:e2:6a:c4:60:87:3b:89:17:
         17:f5:ba:16:86:49:2c:b0:fc:8e:ef:f4:85:42:ca:7d:60:91:
         2a:23:18:c7:14:fc:83:c3:b3:f6:a1:7e:78:ee:33:a6:ba:2d:
         40:3a:ae:00:6b:6e:78:73:4e:5f:69:62:5a:21:67:26:b5:0d:
         c0:de:ef:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:40 2025 by rpki-client