Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
File:                     LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft (raw, json)
Hash identifier:          JVHX4wX085fGJeUVRSKpDrBjwwgFDZZ0UwJvAUO57sY=
Subject key identifier:   8D:DB:D8:44:10:17:E1:FA:15:FF:75:02:ED:A1:1D:A1:67:63:C3:15
Authority key identifier: 2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F
Certificate issuer:       /CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
Certificate serial:       0194C5084CD5620269F0642C66E1FDCD4149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
Manifest number:          35
Signing time:             Sun 02 Feb 2025 05:00:43 +0000
Manifest this update:     Sun 02 Feb 2025 05:00:43 +0000
Manifest next update:     Mon 03 Feb 2025 05:00:43 +0000
Files and hashes:         1: 0XZQM4HI3XhlmYvdoGd0b4phC5w.roa (hash: U0I63h+zWa/76rG6uJx/JmYr6Xgzo7IgH0GTSgv+Tfg=)
                          2: LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl (hash: ClB88e1cqKHQNQipXLcrbWiVi3cAfV4mKBY3Xvo2ZTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c5:08:4c:d5:62:02:69:f0:64:2c:66:e1:fd:cd:41:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d26fe9a7e21a773f61d65123f83e2828fd0429f
        Validity
            Not Before: Feb  2 05:00:43 2025 GMT
            Not After : Feb  3 05:00:43 2025 GMT
        Subject: CN=8ddbd8441017e1fa15ff7502eda11da16763c315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c9:36:9a:9a:1c:a5:b8:26:a4:1a:88:b1:b9:
                    32:98:20:4b:c6:5a:6f:af:3a:89:2f:1c:b6:c6:e2:
                    21:b6:43:f7:0c:f1:15:84:3b:70:04:53:1d:ad:fa:
                    33:03:7a:e8:1d:ac:10:53:e7:91:d7:19:10:8f:97:
                    d2:7c:f5:3a:c2:f3:ee:44:18:96:a3:65:5a:2a:cd:
                    0d:da:80:6e:4a:f2:2e:6d:25:7b:05:c0:c7:a5:26:
                    5c:87:c0:68:1f:11:e3:02:f4:5d:57:29:e8:ba:60:
                    c4:b2:e4:d6:36:f5:35:d9:d4:62:4c:d5:81:22:f6:
                    06:99:c8:85:bd:ac:a8:a3:dc:f0:54:35:2d:48:e7:
                    c1:af:3d:29:2a:31:15:67:60:38:4f:88:fe:20:d8:
                    6f:a0:d9:05:ec:47:66:49:4a:9d:38:7a:3d:4c:a2:
                    d7:ad:60:13:4f:15:69:e2:e6:c9:ec:0a:f2:84:2b:
                    f8:7c:5a:4a:10:67:72:0f:56:44:fb:5d:dd:98:bd:
                    58:06:ad:7c:8a:d3:98:55:2f:5d:af:06:59:09:bf:
                    ab:de:8e:ff:ef:56:93:36:e5:4a:f1:99:7c:e0:5b:
                    9a:0c:8e:db:a8:da:7e:44:33:b0:78:6e:cd:aa:44:
                    8d:79:1b:33:29:ea:81:09:fb:c5:52:91:6e:32:e3:
                    f2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DB:D8:44:10:17:E1:FA:15:FF:75:02:ED:A1:1D:A1:67:63:C3:15
            X509v3 Authority Key Identifier:
                keyid:2D:26:FE:9A:7E:21:A7:73:F6:1D:65:12:3F:83:E2:82:8F:D0:42:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSb-mn4hp3P2HWUSP4Pigo_QQp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/54e78c-5dd0-4f26-b56e-eb306a8d4ab5/1/LSb-mn4hp3P2HWUSP4Pigo_QQp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2a:89:0e:42:c6:18:b1:c5:a6:2d:0e:a2:47:a0:0e:5f:b5:
         ec:73:8f:be:55:8b:87:1a:fc:5a:3c:5b:27:ce:3c:26:31:35:
         29:b3:8c:fe:37:71:b5:0c:8e:6a:5a:16:70:12:bf:50:17:ba:
         e3:db:26:ca:20:9e:9d:95:4f:40:db:75:a2:d1:5f:28:90:53:
         ad:66:9b:3f:22:fb:32:44:8a:58:ca:66:f7:bf:6b:7d:5e:48:
         19:4d:42:98:e4:04:cc:c3:0f:0b:6b:c1:08:67:76:77:a9:0c:
         c4:69:22:6a:27:69:d3:7d:2b:a6:1f:fb:0d:3d:75:9f:d4:e2:
         9e:80:73:40:39:c1:17:8b:ba:71:28:68:12:63:f4:85:a8:eb:
         21:e6:70:1f:d7:bb:d2:05:b0:63:9f:d7:bb:7e:e1:f3:29:74:
         84:8e:08:ad:a2:18:7b:29:c6:e9:4c:0e:23:09:5c:01:17:92:
         3a:3b:d5:98:3b:92:ec:0b:f9:67:cd:f3:76:0e:0b:96:ff:9e:
         63:c7:85:cf:36:08:18:ee:f9:17:bc:b7:ef:f5:6b:1d:89:9f:
         18:cc:42:95:b2:1f:c5:ea:e3:40:43:ef:be:26:84:98:32:dc:
         0e:ed:b4:7e:98:22:90:b8:29:bf:3d:0d:f7:81:f8:15:38:86:
         76:5a:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:41 2025 by rpki-client