Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File:                     2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier:          Ba7LUNDrZBsb2nh5H+WKOvRjF9HxTzMPEgZfcLkK5IU=
Subject key identifier:   35:39:83:33:62:AA:46:06:FB:45:12:6F:96:F1:E9:DC:6E:EE:8C:63
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer:       /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial:       0195900632B2B0A2C33C410C4BE309CB64B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number:          0C95
Signing time:             Thu 13 Mar 2025 15:01:19 +0000
Manifest this update:     Thu 13 Mar 2025 15:01:19 +0000
Manifest next update:     Fri 14 Mar 2025 15:01:19 +0000
Files and hashes:         1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: RoDOG7YTKKHJ+dQSE6kcl3z2LPXUtHMXF26g+xZvfi8=)
                          2: L4roRdlkRFF_L_7wYpfaNa1dLaA.roa (hash: KuAnzPBgxp55/NCR6oySR+pQEyeN2HDAB6NF7tBzr6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 15:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:06:32:b2:b0:a2:c3:3c:41:0c:4b:e3:09:cb:64:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
        Validity
            Not Before: Mar 13 15:01:19 2025 GMT
            Not After : Mar 14 15:01:19 2025 GMT
        Subject: CN=3539833362aa4606fb45126f96f1e9dc6eee8c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:66:36:26:7b:43:ba:da:6a:9b:3b:68:f9:
                    5c:53:35:cd:94:cf:09:ec:92:46:9b:5d:4b:80:c2:
                    58:32:68:1b:c1:e3:9f:06:82:7c:10:ad:2e:86:aa:
                    af:d8:f1:13:ac:c4:a4:35:8a:85:4f:b4:d7:8c:a8:
                    5a:35:f6:c1:44:32:4c:e2:78:08:8d:a5:89:e2:88:
                    d7:94:0d:1e:16:79:11:d9:5b:9b:7a:ea:ef:76:93:
                    c8:72:cf:f4:37:91:4e:75:75:75:69:43:3a:e9:e2:
                    d3:de:9a:19:5f:50:0c:a4:1a:c5:96:fc:c0:9f:75:
                    35:e5:00:24:2f:f1:53:1f:c3:5d:e9:b3:53:6b:c8:
                    d2:b9:44:10:e5:62:25:13:ec:8f:70:21:9a:f8:1c:
                    d8:64:f4:a7:b5:df:d0:70:62:f4:4b:1c:0b:3d:bc:
                    ea:83:4f:65:6c:4e:80:4b:d2:42:b1:70:a4:99:b6:
                    b6:e3:64:8a:5e:82:22:16:f9:9b:eb:d6:08:66:38:
                    75:26:3d:89:d8:fb:a3:a9:a6:d3:c5:8b:7c:c4:0d:
                    cc:9b:bf:cc:9e:d2:d8:f6:f2:34:99:6e:28:32:2b:
                    0b:dc:7f:90:26:1e:27:48:8c:75:d0:99:56:43:57:
                    12:63:23:9c:05:1e:8c:ec:f7:7a:56:2b:c6:29:73:
                    f4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:39:83:33:62:AA:46:06:FB:45:12:6F:96:F1:E9:DC:6E:EE:8C:63
            X509v3 Authority Key Identifier:
                keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:76:e5:95:a2:39:f1:e2:d1:53:9a:57:2b:f7:20:d7:38:0c:
         33:f0:49:e4:da:ce:17:de:6f:3f:31:67:0c:b1:7b:6c:ca:1f:
         53:37:ff:ef:75:d1:1c:7c:8d:73:df:92:ad:c1:ee:a4:08:b0:
         a3:5c:2d:5c:0f:f7:08:05:c3:c2:76:b0:16:3b:dc:ee:15:b1:
         d2:97:55:2f:8e:74:45:5e:5a:06:90:b7:48:97:08:ee:34:ac:
         aa:7a:3e:3b:57:43:0d:61:2e:c2:e7:70:b2:05:cb:14:c0:01:
         3f:58:2c:3a:af:f3:90:37:78:97:6c:81:09:fc:8d:3a:5b:bd:
         38:e7:f2:87:7b:c0:92:b4:ff:89:0f:42:10:b1:06:91:a2:79:
         17:ad:01:ec:6e:0a:a3:c6:7d:44:dc:16:7c:f3:4f:5a:d4:60:
         9c:26:23:f0:c7:3a:bd:9f:2b:79:0d:a3:b0:cd:8e:f0:30:9c:
         2e:53:03:ba:80:14:68:ce:84:0a:e8:62:63:50:f3:3e:51:d5:
         83:06:9d:2e:b3:8e:f9:1c:d6:43:a8:2d:95:7a:56:55:56:fe:
         45:73:75:ac:4a:8f:9a:61:fa:d8:c3:82:e8:36:49:35:00:23:
         16:19:84:17:43:a2:3f:3e:e5:fc:36:22:85:f7:2d:32:71:dc:
         47:9f:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:21 2025 by rpki-client