Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File:                     34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier:          g5k7jnFaYrsPasnhQs8nD15Npmb14gJZC5dN7wSq8YE=
Subject key identifier:   5C:DF:6C:ED:98:13:0B:B3:B0:2D:B3:A1:E7:47:60:84:99:CF:25:6B
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer:       /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial:       0195116C2825C3A5EC4C38E06324B00FEC56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number:          0D64
Signing time:             Mon 17 Feb 2025 01:00:55 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:55 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:55 +0000
Files and hashes:         1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: lM+y060OFDuA2rwwoRjxGuYb8zKLPMcjWmvXcM3JL+Q=)
                          2: b-VOh1iyKHVcDysv8XYced0xnLo.roa (hash: 0b/hMsK4rsISxKd+Kzt0DOFihl9RrwFHAkmEpylmN4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6c:28:25:c3:a5:ec:4c:38:e0:63:24:b0:0f:ec:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
        Validity
            Not Before: Feb 17 01:00:55 2025 GMT
            Not After : Feb 18 01:00:55 2025 GMT
        Subject: CN=5cdf6ced98130bb3b02db3a1e747608499cf256b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f7:10:f6:20:00:87:89:a9:f0:6e:60:14:93:
                    4e:63:af:ae:02:f1:df:1d:7d:03:c6:ba:48:ed:1e:
                    34:4e:d2:5e:23:b8:12:5a:9f:98:51:07:c8:a0:d0:
                    a4:00:4b:4d:5d:d4:25:ac:1d:f9:46:dd:4c:95:27:
                    bd:5d:f8:84:33:73:4d:d0:6a:70:53:36:3f:13:68:
                    7f:66:6d:d5:f1:69:a2:93:15:e7:2b:6f:85:f1:09:
                    ab:d1:2f:08:b6:0c:72:22:2e:0d:0e:e4:9f:b9:d6:
                    e6:9c:17:01:20:44:37:0d:15:94:e3:4d:24:a3:ed:
                    6e:8e:76:9e:06:c5:1e:34:b5:eb:2b:e7:f1:3d:7e:
                    de:5e:12:d2:fb:e0:a9:73:39:59:f4:de:42:f0:ed:
                    1d:6e:48:83:f9:1f:4e:9b:6c:0c:09:07:a7:3f:e6:
                    3f:c2:bf:a5:f8:b4:22:32:79:d3:4c:6a:4d:26:cd:
                    08:38:9a:bc:84:5b:63:1f:22:a8:05:d6:26:db:c6:
                    6e:78:96:dc:6f:19:5c:02:f6:1f:ed:9e:d6:8e:6a:
                    aa:a5:26:1f:12:19:17:3a:78:71:ef:fe:33:53:c6:
                    4d:88:83:05:c8:26:ac:27:81:20:a1:c0:f2:d4:65:
                    5c:59:63:b6:33:08:87:16:d1:84:5d:a2:c8:7f:c3:
                    e5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DF:6C:ED:98:13:0B:B3:B0:2D:B3:A1:E7:47:60:84:99:CF:25:6B
            X509v3 Authority Key Identifier:
                keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:df:c8:ef:90:6a:48:66:5e:c0:b0:d9:f6:25:86:12:01:1e:
         a5:e9:0c:af:f8:56:15:63:41:65:8f:14:be:56:08:2c:ea:4a:
         3b:9d:d1:2a:39:f2:bc:5c:15:f9:50:01:34:65:17:8c:8f:9f:
         38:e6:57:6b:b0:2d:6c:86:fe:90:2d:97:68:da:e9:73:77:9d:
         33:b5:8c:67:02:43:6d:9f:cc:a0:70:42:42:0c:6c:49:b2:ed:
         e1:bc:f7:22:42:bf:bf:7f:31:ca:5a:a4:dd:eb:4b:cc:ec:2a:
         57:38:77:f3:78:f4:e3:48:f2:b3:85:01:6a:95:68:50:d1:30:
         e6:72:92:67:bb:62:1e:9e:e3:d7:b1:27:a3:eb:94:09:f5:60:
         bd:75:79:aa:85:d8:29:09:c6:d9:7f:37:1f:06:bc:c2:80:2b:
         c5:b7:30:29:da:9e:16:6f:a0:b3:79:f5:a9:1f:ea:43:d0:4e:
         1b:2d:8d:6b:ba:26:f7:9f:9c:a8:34:28:e6:ef:bd:20:06:68:
         bc:d7:a8:61:63:b6:58:20:39:5d:eb:69:b3:d4:37:9f:72:54:
         57:d3:79:19:a3:a0:ac:0c:05:db:f4:86:af:c6:55:ca:70:ed:
         ea:bb:b2:a8:cd:b8:28:89:28:b8:05:cc:55:19:35:81:71:b4:
         0b:c0:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:37 2025 by rpki-client