Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File:                     K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier:          Te1bl6oH2YJM5oLOkamedii3qpYZWYIbuWZjBHAgP/I=
Subject key identifier:   2B:C8:12:5C:F9:17:7E:F8:34:CC:AD:C6:C3:7E:20:6B:5B:71:9F:20
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer:       /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial:       019511348E02F8D8A5873300FBFE6C33E144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number:          0467
Signing time:             Mon 17 Feb 2025 00:00:11 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:11 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:11 +0000
Files and hashes:         1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: mqrW4Auf9fou0rWWhygL/baLSWLYArXeDvRnK7jJlA4=)
                          2: qLWefGaIQEsRkcA1tO3guUVq3OU.roa (hash: xslOk/6LQdIGFli9jwCBp6kVRfq8yxFvis0Kh4JP+fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:8e:02:f8:d8:a5:87:33:00:fb:fe:6c:33:e1:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
        Validity
            Not Before: Feb 17 00:00:11 2025 GMT
            Not After : Feb 18 00:00:11 2025 GMT
        Subject: CN=2bc8125cf9177ef834ccadc6c37e206b5b719f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a2:1b:92:41:34:cb:dd:a2:29:a6:96:2e:ad:
                    2c:96:c7:bc:f4:f1:67:59:95:59:58:e3:ac:58:f9:
                    3e:07:78:6c:3d:d5:77:b1:e6:bb:76:f8:5e:03:1a:
                    6d:2d:82:e9:79:50:2e:aa:c2:f4:b5:a2:2e:a9:7b:
                    c4:bb:5c:5a:45:3e:ef:e5:24:f0:f4:a6:03:17:60:
                    b9:65:cb:57:4d:d9:09:37:59:24:3a:f5:24:6a:e6:
                    27:7e:32:e7:71:8e:81:0b:71:dc:f4:d2:ea:c4:a3:
                    60:69:a5:ea:26:10:16:1d:2b:22:88:07:05:20:9f:
                    03:66:08:af:f6:cc:00:9b:f8:9a:ae:1e:49:8a:6b:
                    21:52:eb:a1:a7:10:8a:e8:3d:f3:4f:d3:cc:6f:a9:
                    4e:98:45:51:de:81:38:74:84:48:ad:b2:03:75:9a:
                    f7:1d:27:d0:e6:4a:ad:7a:d8:6e:91:74:57:35:86:
                    57:7e:13:b2:b7:63:1d:e7:89:77:54:1f:ef:63:e2:
                    31:67:32:ea:71:40:cd:36:ed:b8:60:61:ec:84:81:
                    ab:76:d8:cf:4b:c3:47:06:f5:3b:9d:73:94:2f:5c:
                    3f:a0:5f:f3:ef:e0:5f:1c:ae:64:ca:7a:a8:70:f5:
                    4b:ab:72:e3:8a:e0:69:1b:04:e4:fd:27:87:cc:0e:
                    51:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C8:12:5C:F9:17:7E:F8:34:CC:AD:C6:C3:7E:20:6B:5B:71:9F:20
            X509v3 Authority Key Identifier:
                keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:9b:78:80:78:bc:0b:c8:e3:b9:c8:29:2d:a6:a7:1a:ba:
         b3:8d:f0:d0:01:20:32:fe:61:60:c3:fe:a4:98:23:64:63:b1:
         e6:88:ec:0f:8f:73:be:e1:17:63:c9:fe:f3:19:cd:3e:8b:4d:
         48:9d:d4:47:52:70:0f:a8:8d:af:cd:5b:0b:08:d7:19:3e:cb:
         a5:ce:a1:d9:48:3e:9c:a2:6a:24:9b:19:75:34:c2:a8:9c:28:
         49:54:3b:aa:bb:eb:df:8b:81:b1:07:29:e5:5f:43:d9:99:b4:
         33:26:7c:ec:08:57:d0:cf:6e:7d:80:89:ba:21:da:6f:44:30:
         76:b0:f2:ce:e4:bd:da:c0:15:bb:3a:d8:97:74:19:a4:08:7b:
         5b:2e:a0:d4:dd:6f:3d:a8:72:41:07:5f:d9:d6:b5:8a:69:3d:
         a5:c2:be:e2:8a:d8:2e:94:05:2c:e3:7e:6f:88:61:8a:a8:c3:
         dc:8a:cb:ca:71:e9:fa:ce:b4:df:8d:e3:2d:38:1e:ad:4e:e3:
         c1:a7:c4:f7:bc:46:c3:9d:4c:64:d6:97:b2:60:25:d8:f6:2f:
         9c:a4:47:25:72:ab:e7:6f:b2:ce:10:b0:e7:d3:a2:74:5e:64:
         75:8b:7a:37:24:54:2d:1c:bb:d0:7b:98:c8:f1:1f:3e:40:ed:
         77:0d:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:23 2025 by rpki-client