Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File:                     v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier:          PCPR7ZN9zV0keiCMTDspqeqL+1bU1aA6vpSdjKDDvOo=
Subject key identifier:   ED:47:23:9B:7A:86:35:F7:1F:E5:7A:9A:49:13:94:79:3B:FF:D6:CB
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer:       /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial:       019510FDD7984F99F9E6966EE496297F7AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number:          01B6
Signing time:             Sun 16 Feb 2025 23:00:26 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:26 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:26 +0000
Files and hashes:         1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=)
                          2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: hperL/nkJhxvsgTKQZshjaLUkoaYauDhasV6/QImWvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fd:d7:98:4f:99:f9:e6:96:6e:e4:96:29:7f:7a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
        Validity
            Not Before: Feb 16 23:00:26 2025 GMT
            Not After : Feb 17 23:00:26 2025 GMT
        Subject: CN=ed47239b7a8635f71fe57a9a491394793bffd6cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:f5:ec:64:25:a9:be:9b:c0:d0:80:f9:8e:
                    ed:f5:93:d4:1f:0b:5d:41:34:13:94:80:ba:73:a7:
                    fd:05:7f:ce:14:08:ae:54:0a:2a:68:66:04:92:ab:
                    1d:dd:9f:51:82:cd:54:50:c0:c5:34:06:c8:1f:1d:
                    a0:86:8d:58:a5:f8:cd:13:d6:0b:b6:31:ee:18:59:
                    73:6f:74:68:9b:47:e1:4a:2b:5b:50:0e:8c:02:4d:
                    80:2a:68:c3:ad:de:33:a7:7e:8f:d0:76:49:bf:98:
                    98:9e:cd:58:22:5f:60:d0:02:2d:e2:a0:4d:68:fb:
                    5d:6b:a4:cf:e9:9b:b5:46:13:47:90:da:a5:41:3d:
                    2c:e4:ee:58:97:34:5c:9a:1c:d5:30:b1:b4:fb:d3:
                    ec:7b:89:37:2b:ab:af:e7:bf:55:3d:74:21:e2:0b:
                    74:fe:ec:c8:f0:05:62:e5:df:14:9d:30:7a:55:07:
                    7b:a9:14:28:50:99:eb:e0:c8:f2:88:87:68:1d:ca:
                    7c:55:09:fc:93:ac:e5:ff:6b:1f:c7:2e:b0:c7:c2:
                    19:eb:96:51:bc:26:2f:85:e4:76:4a:bc:50:3b:75:
                    4b:62:c5:f3:ce:a2:a6:d4:4c:40:b4:96:36:68:90:
                    c4:35:bf:b8:fd:05:78:3f:91:7a:91:48:4a:17:7b:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:47:23:9B:7A:86:35:F7:1F:E5:7A:9A:49:13:94:79:3B:FF:D6:CB
            X509v3 Authority Key Identifier:
                keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:7b:69:72:88:05:ff:44:40:63:e0:09:a2:cc:33:e5:58:13:
         a7:ad:2a:49:36:2f:6f:b5:87:59:7b:1a:f7:94:49:e7:ee:43:
         44:d2:63:71:6a:e1:43:e4:0d:67:08:5a:99:9f:05:5d:2a:33:
         b6:11:52:e8:3b:fc:49:ad:cc:f4:6c:5b:fd:98:8c:0e:b8:ac:
         ba:9a:8d:98:9b:ff:78:80:7c:78:e1:e5:06:51:0c:b6:6b:ef:
         7b:35:97:7c:58:07:22:ad:55:1f:4b:7c:16:fe:c7:50:56:4e:
         50:17:90:69:df:96:8a:ca:11:d6:9d:07:8d:83:ce:40:b5:ae:
         58:30:e5:32:f2:16:ec:9f:38:46:11:4e:e0:5f:15:3b:dd:a5:
         65:79:64:8e:40:c4:64:b3:7c:29:35:f1:76:96:21:b5:94:5f:
         f5:26:f1:46:6b:26:92:35:b0:7f:97:86:e4:5c:1e:64:ec:5c:
         33:7a:bd:a4:48:c7:67:a4:1b:8e:6b:ba:ce:e3:07:e0:ae:c5:
         18:35:e6:d0:88:db:a4:73:10:eb:50:11:b2:18:d2:f6:c1:ad:
         33:14:38:be:f7:a4:10:e4:be:f1:a6:2b:0b:3f:df:43:cf:6c:
         aa:02:57:43:dd:7e:4d:fa:97:ca:b1:ab:fe:d7:ab:55:b7:d1:
         ce:9a:12:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:10 2025 by rpki-client