Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File:                     PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier:          W+oKs5cElahftEpPXHLSCFbNYnvSRy5n3A0WQlA3Uf4=
Subject key identifier:   A6:7D:9A:4E:88:CF:42:D0:CD:09:9D:3A:33:CB:F0:67:87:6C:E2:EE
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer:       /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial:       019510C7099B2DCC4D7110EA1D845DC58899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number:          1456
Signing time:             Sun 16 Feb 2025 22:00:34 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:34 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:34 +0000
Files and hashes:         1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: DjU6JYg+/wufh8w+SW3NT/asWZIoiJgYhjBAVBCPkjM=)
                          2: RGavrFD9QlH9mvEK00LE9vM0Ylo.roa (hash: in3DOj7fuK/tRP2Np73D85wEHXvdsqUOTjKtL4z+mG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:09:9b:2d:cc:4d:71:10:ea:1d:84:5d:c5:88:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
        Validity
            Not Before: Feb 16 22:00:34 2025 GMT
            Not After : Feb 17 22:00:34 2025 GMT
        Subject: CN=a67d9a4e88cf42d0cd099d3a33cbf067876ce2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:cb:d7:56:04:6c:8a:21:7f:1d:3e:b0:98:
                    cf:e3:f2:52:86:28:a5:f9:61:b4:ea:61:59:9f:2f:
                    01:bc:b0:ab:6f:77:a2:2e:b6:d7:85:89:5b:b1:79:
                    eb:d6:2f:18:84:3e:e2:24:c6:1a:99:1b:7c:37:24:
                    d8:2a:09:da:01:0a:d7:63:aa:cf:83:47:22:6f:6b:
                    81:08:50:23:b6:45:96:5c:bb:a2:d8:4c:11:7d:d2:
                    c2:4c:9f:84:22:17:8a:11:d2:b7:ae:5a:f2:ae:72:
                    16:c3:01:e8:90:4c:a9:3d:ca:3a:e9:30:6e:3a:43:
                    75:cf:a0:20:9d:ba:7a:82:fa:a2:cd:51:5d:cc:e4:
                    1e:9b:ea:80:06:de:e5:f2:5b:36:3a:ba:38:3f:fc:
                    88:69:55:55:ec:de:c0:62:d5:d2:2c:76:2e:f6:e7:
                    ff:b7:a0:5d:13:02:6f:17:9a:a7:7d:17:c3:5a:e7:
                    6e:cb:32:b6:0a:f2:39:e6:06:42:40:87:5a:0b:4d:
                    b8:77:59:73:e4:03:27:0e:08:e7:83:4c:35:8c:36:
                    47:9b:3f:2d:8b:6a:32:a1:5e:1d:a9:9f:f4:93:7b:
                    0f:db:36:d0:68:81:2d:b4:6d:a3:4d:5c:8a:15:e0:
                    a0:db:f3:3c:cf:df:5d:16:de:6e:5c:10:ff:5e:63:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7D:9A:4E:88:CF:42:D0:CD:09:9D:3A:33:CB:F0:67:87:6C:E2:EE
            X509v3 Authority Key Identifier:
                keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:47:85:0f:d3:5a:ea:5b:2d:f0:1e:a5:22:a9:dc:9a:b0:6a:
         ab:2a:86:ec:48:53:00:6c:4f:ab:b0:95:f2:1f:bd:48:ec:14:
         8d:6b:d2:62:ce:65:f3:e5:1d:07:dd:96:5a:52:66:7d:6e:64:
         e9:38:46:cc:49:56:be:0c:69:0f:44:81:fa:6b:8b:1a:da:ef:
         19:2a:ac:d4:f4:70:7d:8c:01:68:d7:80:01:85:75:5b:14:9e:
         b9:6a:6a:2e:c1:89:86:f1:00:a8:71:8c:5f:9a:0a:8d:eb:63:
         2a:2c:a1:67:7c:93:ae:42:80:38:0a:b8:6d:59:ee:bb:ec:a5:
         5b:b9:53:ef:68:97:0c:2e:3b:67:ed:aa:05:eb:20:0c:ff:3a:
         28:4a:65:4b:cb:46:72:a0:cc:03:86:e0:1e:8c:ea:3f:6b:a1:
         0a:e3:5f:85:f7:55:c4:4c:a1:76:8b:8c:6d:12:a8:41:63:3e:
         6b:de:48:57:54:48:eb:52:7e:b6:98:e5:25:59:d1:61:2f:d8:
         d8:9f:70:94:df:fb:b2:d7:51:c8:20:7d:0e:c3:98:90:4e:4e:
         97:d2:73:0c:9a:d8:fe:7e:79:b9:fc:b2:2a:72:c0:61:ee:d0:
         6b:46:68:a3:71:06:a2:28:ea:0a:a1:f4:e3:67:67:f7:29:53:
         b7:b8:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:16 2025 by rpki-client