Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File:                     _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier:          9LxCgR7D4Y4fDpKT/aNz3Lroz9gArrWziCMb4LBtwaY=
Subject key identifier:   53:EF:BA:51:5E:17:AE:49:50:B1:19:58:B5:28:67:51:0C:19:84:EA
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer:       /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial:       01951247765ED3CCCDF260EF1D5D8695FEEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number:          0175
Signing time:             Mon 17 Feb 2025 05:00:28 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:28 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:28 +0000
Files and hashes:         1: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: 6AbwvVJTlOiQ9dlc8XOXTEjDbtI5LqoWk4I8JzsMoSE=)
                          2: pa5HePIwYLGZT4FlyIIuIImBBQ4.roa (hash: bgmy9hrxpCSfMFbbUzRFuhNbtBsDHQmEsmp/I6aYk+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:76:5e:d3:cc:cd:f2:60:ef:1d:5d:86:95:fe:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
        Validity
            Not Before: Feb 17 05:00:28 2025 GMT
            Not After : Feb 18 05:00:28 2025 GMT
        Subject: CN=53efba515e17ae4950b11958b52867510c1984ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:4c:1c:69:50:54:8d:86:fc:f6:bd:08:46:
                    30:2a:2d:4b:60:e0:d0:64:34:ba:4d:ff:ac:af:37:
                    1f:15:c7:f0:8c:82:e3:d6:cb:71:cd:4d:79:e0:69:
                    a7:6e:d7:6c:c0:e3:f0:88:a3:52:18:40:3e:5e:18:
                    56:84:7d:e7:c3:3e:1d:3b:1a:7b:a8:72:3f:97:28:
                    29:15:34:71:e9:1b:f2:a5:24:fc:d2:d7:fa:d4:ae:
                    ee:85:00:e7:4a:c4:fe:34:0d:64:e0:e3:3d:26:bb:
                    39:73:ad:ba:b2:32:6a:33:b8:da:68:0f:4e:71:fb:
                    cd:db:c9:1b:a8:8f:ab:48:05:d2:aa:de:ac:ac:d1:
                    35:c4:34:b0:f4:05:43:a3:fb:7e:e3:d6:ae:91:9e:
                    45:1d:15:a5:90:03:1f:ac:9f:1b:e1:c8:98:64:d8:
                    ba:1f:1f:31:92:df:ba:81:e7:de:36:78:78:92:63:
                    86:6d:39:ea:b7:6e:49:2a:be:3e:44:8d:22:5a:1f:
                    66:8d:a1:d0:bc:d6:fd:c2:83:29:ca:fa:ce:5e:e8:
                    b6:96:d6:45:f7:2d:dd:79:f3:a9:06:cd:7b:7a:fc:
                    21:03:35:bc:50:4e:a1:03:0e:e9:c5:44:3a:22:22:
                    53:a1:50:8f:5f:fd:af:aa:9a:9c:bb:de:9e:bb:64:
                    cf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EF:BA:51:5E:17:AE:49:50:B1:19:58:B5:28:67:51:0C:19:84:EA
            X509v3 Authority Key Identifier:
                keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:51:b4:6f:8a:11:1d:b8:56:cd:2c:b3:0e:1e:94:bd:49:12:
         b7:10:8c:16:09:ff:87:02:c1:ae:0a:53:c6:c1:9f:ac:6a:81:
         f3:11:12:e1:f9:4f:16:29:56:3e:83:80:4f:ac:1f:f6:ef:b0:
         d3:2d:ba:43:59:e2:00:31:10:e1:3b:eb:e2:04:4c:90:fd:35:
         33:b0:17:54:cd:01:8d:f0:04:35:46:56:00:d4:77:c8:5f:fc:
         0d:46:ba:9b:dc:4c:7b:0a:cf:10:1e:bd:1b:9c:b9:ea:e6:52:
         5e:5a:a5:33:a5:b9:0f:a5:73:7e:aa:6c:06:d1:18:74:9e:a6:
         4d:a8:ab:4e:b3:d2:3c:65:01:09:a1:95:16:d7:f0:7e:45:2b:
         1f:a5:ab:7e:79:9f:82:70:36:c7:c1:a2:b3:fc:89:82:18:b4:
         95:89:3b:86:7d:98:e7:48:74:38:27:6e:14:17:a5:ad:7a:52:
         ca:c9:d7:c1:11:f8:1f:a3:a8:e1:34:68:7b:97:1a:c9:fc:43:
         b0:92:d7:5d:fb:10:d7:a4:ef:cf:ae:7d:12:89:d9:9a:50:1a:
         fc:c1:84:e6:31:4a:e9:ec:ba:14:1f:67:22:76:9f:5d:61:b1:
         52:48:03:49:16:89:0f:aa:2d:c4:05:ea:8d:45:e5:1c:07:74:
         9c:01:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:20 2025 by rpki-client