Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
File:                     UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft (raw, json)
Hash identifier:          ZbZow9qhuYbh18N5bO18T2qroNzMo5Qg4Gjx71mKOtk=
Subject key identifier:   E8:A3:FE:BB:6D:CC:B0:65:C1:28:03:CF:33:5B:83:97:B0:8C:5B:3D
Authority key identifier: 53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36
Certificate issuer:       /CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
Certificate serial:       0195108FFB37A8A93C95797918F633252F88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
Manifest number:          1457
Signing time:             Sun 16 Feb 2025 21:00:26 +0000
Manifest this update:     Sun 16 Feb 2025 21:00:26 +0000
Manifest next update:     Mon 17 Feb 2025 21:00:26 +0000
Files and hashes:         1: UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl (hash: DTD5IpvivxB8O7/aK5xDdewDR6aOK+EjlYiVB7hSy50=)
                          2: kgy9uroMpZcNrgZQHiOHzstivPY.roa (hash: Xv6NaivYBEvpPSpEf7smylfVsD4m8uMWLcQBfecPM1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:8f:fb:37:a8:a9:3c:95:79:79:18:f6:33:25:2f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53324ea7bb9ed58d8d7b85d5d1cdc0fe43bce236
        Validity
            Not Before: Feb 16 21:00:26 2025 GMT
            Not After : Feb 17 21:00:26 2025 GMT
        Subject: CN=e8a3febb6dccb065c12803cf335b8397b08c5b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2f:5a:a0:32:64:0f:1e:01:2e:54:57:24:54:
                    7b:c9:ea:3a:06:29:cd:8b:70:9b:25:e4:37:46:a5:
                    01:27:79:41:7b:4a:3e:cd:b7:51:32:a9:25:01:7b:
                    e4:4f:79:83:7d:ae:7c:29:19:1c:a0:7b:b5:26:c1:
                    f3:17:4e:b1:ee:f0:c3:28:64:b1:14:d8:23:53:b4:
                    33:ff:a5:23:80:59:8b:6f:64:d0:ee:f5:6a:5d:1a:
                    3d:73:09:41:18:fd:c5:63:c4:85:87:ff:fc:4c:fd:
                    a9:bf:44:ea:e7:5a:b5:2e:6b:b0:f9:b8:72:a0:28:
                    d7:8e:0a:22:2a:52:43:cd:c6:1f:b2:8c:f9:72:90:
                    21:0a:40:d4:81:24:3b:a6:a6:ca:79:bf:7d:90:cb:
                    75:ab:01:6d:3b:0b:a5:cd:1f:6a:55:47:8f:e9:13:
                    4d:dc:b7:ae:df:c5:6b:4d:97:d3:c4:7f:09:8a:38:
                    94:77:eb:8c:20:84:25:9f:89:8c:87:5a:f2:9a:51:
                    4f:a9:57:1a:ef:d0:0d:d0:44:c0:3c:9c:aa:16:ea:
                    12:8c:c5:b2:3b:ea:c0:b0:fd:91:9a:ff:e0:44:ce:
                    42:33:54:85:b0:42:14:a2:32:51:6b:00:b8:2d:e1:
                    38:fd:cd:f0:aa:83:bd:40:94:7b:39:98:95:83:be:
                    37:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A3:FE:BB:6D:CC:B0:65:C1:28:03:CF:33:5B:83:97:B0:8C:5B:3D
            X509v3 Authority Key Identifier:
                keyid:53:32:4E:A7:BB:9E:D5:8D:8D:7B:85:D5:D1:CD:C0:FE:43:BC:E2:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/655080-a488-4ebe-a471-288fcdf0cd0b/1/UzJOp7ue1Y2Ne4XV0c3A_kO84jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:81:fa:71:24:89:85:3f:58:9b:98:17:f3:e5:f0:e3:dc:d9:
         43:0e:38:88:24:55:eb:ec:05:8c:20:36:52:1e:49:1b:15:18:
         41:ee:85:0a:cc:dd:34:fb:b2:fe:37:a7:0e:81:28:dc:51:9c:
         bd:db:20:cc:ce:02:bc:8d:77:30:3e:b8:a2:88:49:05:f2:14:
         00:7f:7e:cf:0b:67:1d:6a:e8:b6:fd:93:76:5b:b2:81:bb:2e:
         9d:2b:39:0e:14:f3:83:46:9a:56:f4:f1:22:93:7b:97:8f:35:
         86:b2:71:b6:93:a8:eb:71:e5:73:b6:9d:99:f6:26:0a:4c:97:
         1b:69:bd:01:1f:76:25:c4:3e:d3:12:ea:ac:02:8c:40:bd:6c:
         05:53:cb:91:4b:ed:d9:48:59:47:1c:e7:c7:01:e0:b6:69:18:
         38:3d:96:c9:6b:d8:98:43:21:22:34:5c:f3:2c:5b:77:4a:31:
         16:70:98:f2:cb:c9:65:69:b1:b9:1a:88:4d:f7:ab:b4:e3:62:
         5d:84:3f:9e:01:38:aa:ca:90:d6:36:7e:06:e2:6f:53:1a:ce:
         08:ce:60:08:d6:a3:f2:eb:31:95:7f:dd:2c:26:48:7b:9e:6f:
         1a:e8:40:39:a5:b4:53:79:15:42:83:ce:36:33:eb:96:16:b2:
         3e:3a:94:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:56 2025 by rpki-client