Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
File:                     Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json)
Hash identifier:          0iolIbO8QBibtixQbgnzWVdaXvwC6ZoAWyAe23ez7rY=
Subject key identifier:   07:F3:A8:3E:81:95:54:BE:61:99:32:45:30:DB:6C:0F:D0:21:A9:C6
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       019614A1CF46451CD5865F2694FA6F043008
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
Manifest number:          0C60
Signing time:             Tue 08 Apr 2025 09:01:10 +0000
Manifest this update:     Tue 08 Apr 2025 09:01:10 +0000
Manifest next update:     Wed 09 Apr 2025 09:01:10 +0000
Files and hashes:         1: 2ryoTZBN5F3OiNCuF51I0QKaurE.roa (hash: Osws3/zgkZy8Uyd/0g/4WCaZXYz7WNin28TFS0n+qzE=)
                          2: 9bZMaVRDUPty_7efLT2YpkpIYcM.roa (hash: CtsPPucmvohErAHToYEeV/HheWSPpHxQEHc0Z1mOfCU=)
                          3: AtctRtEqNWKPB5rlQKlPqC6yWDs.roa (hash: 05XetyyHEDIPnW6uLoBtl5Z9uPB/DAO88wvWzPJ/MPs=)
                          4: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: AaU42GeF4sm69S5mhwymAOAwAK0cc8pGn8ZUjRizXcA=)
                          5: PSBx1Ap1dSVwu4S3zItuhXFXT84.roa (hash: BJW2moxRlz3fWDKj7aaF6fzBur3RzPQUthWd7EvMjfQ=)
                          6: Yv5Vb1UYXxXLpSQFLwUNvoBL1uk.roa (hash: zQenlhAbszJDRqh2xIFTp2RhN0nwTs4w2oT1T/Kp9dM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 09:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:a1:cf:46:45:1c:d5:86:5f:26:94:fa:6f:04:30:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Apr  8 09:01:10 2025 GMT
            Not After : Apr  9 09:01:10 2025 GMT
        Subject: CN=07f3a83e819554be6199324530db6c0fd021a9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:cf:17:26:dd:da:31:de:43:3d:b2:ff:11:
                    3c:82:de:0d:a9:73:c2:2e:48:3b:bb:1a:f8:de:f0:
                    45:f7:1c:b1:99:5d:cd:73:8e:95:b8:67:10:b6:47:
                    6e:49:19:61:75:6f:a7:a4:21:cf:b6:58:25:e2:82:
                    fd:0f:e0:31:c5:71:cd:d9:35:da:58:8b:ca:26:29:
                    f0:c1:4b:a3:2b:0b:44:85:33:40:28:a0:49:36:7d:
                    8b:fc:fb:09:1e:f8:fc:9e:fd:b0:68:a8:ce:1f:ea:
                    e4:e7:65:f9:3d:ec:c4:e5:f5:63:b7:99:d4:7f:5a:
                    1c:4b:ad:39:99:f6:d5:01:a1:34:10:08:9f:e4:ec:
                    83:62:29:74:c4:87:1e:82:d8:19:b2:c6:0c:7d:e5:
                    00:7f:53:3d:c2:fe:db:df:15:e9:17:45:a2:bd:9c:
                    b2:ca:53:64:83:4f:d7:d9:2f:13:e9:c1:b9:db:fa:
                    5b:07:35:72:4f:35:c9:b3:e6:e4:96:e8:73:86:9a:
                    95:ed:b8:8e:ca:bd:3b:b6:60:3c:e7:cb:9c:7e:be:
                    1d:bd:1b:ad:d5:90:eb:d9:c2:eb:52:6a:d8:54:6f:
                    27:e8:8b:c1:91:6a:72:ff:24:f0:2f:3a:a9:e5:8a:
                    2d:39:0f:86:a8:f0:71:cd:52:e4:8d:26:c4:26:1f:
                    7d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F3:A8:3E:81:95:54:BE:61:99:32:45:30:DB:6C:0F:D0:21:A9:C6
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:fc:0c:ce:a5:70:41:06:90:4a:ec:8b:53:6f:89:ae:ce:ca:
         c2:b5:55:6e:bd:18:40:34:a4:42:90:2f:f3:ee:fd:6d:44:c5:
         9b:00:51:a1:2c:da:a0:09:e3:f3:fa:03:c3:bc:51:a6:d1:06:
         fd:3f:e0:b2:57:96:30:e7:10:ab:ce:65:a2:a2:90:1d:c3:bb:
         4a:dc:d6:76:c1:75:a0:4b:2f:9d:e4:cb:9e:08:91:8f:c4:f9:
         e6:8c:71:f3:c3:fd:3a:44:8b:e1:bd:13:f2:d5:93:75:ae:56:
         2a:48:3c:cc:d2:14:30:72:e5:b3:1e:88:d9:5d:0d:75:35:29:
         c1:5a:d0:d6:42:e7:0e:12:99:0f:7e:5e:bd:f3:9e:5b:84:9b:
         96:e1:2e:8e:19:4e:09:de:f4:3c:a4:90:bd:10:4f:0b:ac:84:
         47:46:cc:b1:e3:1d:34:89:85:ef:e5:9b:1f:b6:20:38:78:b3:
         38:f8:fa:7d:78:cc:9d:47:d9:ee:fe:76:50:88:f3:59:9d:64:
         f7:eb:3d:6f:f0:57:fa:1f:e5:c9:a4:da:af:6d:d0:1b:df:ed:
         df:72:d0:4e:40:ff:02:0b:ba:e9:6c:c9:03:ad:e8:3c:8e:d9:
         f8:eb:5f:20:46:59:f9:cd:bc:a5:d0:37:1d:91:59:1d:cf:21:
         9c:17:d8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:11:02 2025 by rpki-client