Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File:                     vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier:          angVxOJ50BBs2Y9XN34+jKxt2HY77J8xUX+/SB8TtIg=
Subject key identifier:   51:A6:73:26:4D:87:D2:B6:2D:5C:35:57:59:98:4A:25:B4:65:EB:F4
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer:       /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial:       0195116C29AEDD59D470D2721FC7B9411A6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number:          0E50
Signing time:             Mon 17 Feb 2025 01:00:55 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:55 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:55 +0000
Files and hashes:         1: EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa (hash: dN8Yi0kIJplgFqGhn/wQEirsJIam2YZVzXUASivGFy0=)
                          2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: gHDyKo/TAUGftEG+4OVhyccuSX7M/arVjY5tqpRdMJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6c:29:ae:dd:59:d4:70:d2:72:1f:c7:b9:41:1a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
        Validity
            Not Before: Feb 17 01:00:55 2025 GMT
            Not After : Feb 18 01:00:55 2025 GMT
        Subject: CN=51a673264d87d2b62d5c355759984a25b465ebf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:58:db:01:01:dc:82:75:b1:bf:c3:94:13:
                    14:48:c9:05:88:bf:33:6e:d9:68:01:44:e9:ad:b8:
                    17:69:07:cd:2c:1f:ce:69:b6:0a:5f:40:a5:82:c9:
                    7f:85:9e:d9:13:10:0e:44:52:13:bf:77:10:bf:0c:
                    0b:ed:49:fb:9b:b1:2f:ef:59:14:4b:d0:89:c1:35:
                    fc:4a:c1:c8:c1:8f:d9:2e:3b:58:85:44:dd:2b:64:
                    a7:1b:1a:36:44:05:86:f5:ad:59:72:25:ef:2e:cc:
                    f4:e5:4a:b3:86:f7:12:28:e1:93:c3:0b:d5:9a:d6:
                    de:cd:bc:12:a2:92:05:68:3f:c4:d2:80:33:a4:46:
                    36:f6:1f:00:3c:32:dd:f6:d0:2a:64:a9:e6:a6:d5:
                    c9:02:08:4b:7d:ac:6e:21:51:60:72:a4:7e:09:7f:
                    3a:e7:9d:d7:59:42:38:04:fd:64:13:57:cd:1b:74:
                    c4:bb:74:07:c1:78:2a:c2:c0:70:c7:c3:07:1c:96:
                    9f:f6:0a:8a:30:29:23:19:d1:68:ae:37:fa:c8:a4:
                    f5:01:26:4e:cf:a7:f7:5a:57:cb:68:7c:e2:f5:75:
                    f5:b0:a9:85:5f:c8:e6:14:66:3e:cd:4a:84:8d:38:
                    43:f6:58:70:16:aa:f7:8f:80:64:58:1b:01:af:88:
                    2a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A6:73:26:4D:87:D2:B6:2D:5C:35:57:59:98:4A:25:B4:65:EB:F4
            X509v3 Authority Key Identifier:
                keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:93:0a:93:e9:b4:ad:12:f5:4e:0b:a3:6d:43:04:b9:7e:13:
         3e:33:bf:31:0b:2a:e4:71:70:b0:c5:f9:88:72:61:dd:4f:16:
         24:0a:ad:e3:92:14:c6:4d:a2:86:43:e1:ea:f1:c2:a7:4a:dc:
         46:17:92:d6:a8:87:00:c1:76:ee:3d:32:ab:76:bf:06:32:e5:
         76:30:df:6b:ab:b3:4f:91:1d:ca:f1:15:21:c9:01:c8:be:27:
         1a:51:bc:49:65:ba:30:9c:f8:3f:25:65:44:8d:06:ea:60:2e:
         42:d5:69:e4:3f:0a:64:6e:a0:63:1f:83:fc:96:78:01:f8:0e:
         58:c4:62:e0:95:86:31:24:5a:47:c7:81:44:dd:bf:31:29:f2:
         73:48:89:45:fd:44:1e:6a:e5:da:a5:64:af:9f:99:62:4f:69:
         8a:55:1c:6b:1c:3c:db:88:22:6e:79:ff:a0:3b:2b:3a:bd:cf:
         b2:ed:4f:48:45:01:6c:bc:60:34:cd:8f:8e:ed:57:fc:5d:1f:
         3e:ab:19:83:63:0f:ed:5c:15:e0:da:13:d9:25:a8:bd:5a:1c:
         f5:66:07:ac:e2:bf:7d:85:30:b2:77:9a:e7:b6:9f:b3:62:07:
         93:a4:58:f7:db:82:44:82:b1:a1:ce:3f:0e:a7:35:4f:b1:64:
         90:2d:87:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:08 2025 by rpki-client