Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File:                     rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier:          v9E3kzPUktgPqzvH8cAD/Dvqf3fwCvD4IGNbPXBE81Y=
Subject key identifier:   0A:6C:02:B6:B9:F5:89:28:7F:F2:11:A8:C8:2B:2B:65:1E:9A:91:D3
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer:       /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial:       01958CCE729388B0150C6E567238B978DC23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number:          1110
Signing time:             Thu 13 Mar 2025 00:01:34 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:34 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:34 +0000
Files and hashes:         1: r6C99vK2TllFCTWcqpJRSg5MRPM.roa (hash: 3+br3Wh/zPJPiW24ubp7XOxLj4qW7AeahE4kU9GEl1U=)
                          2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: d6FQFK2st9rtUuHDerXMPB0w4rQMOuf9oLPTZWZabwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:ce:72:93:88:b0:15:0c:6e:56:72:38:b9:78:dc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
        Validity
            Not Before: Mar 13 00:01:34 2025 GMT
            Not After : Mar 14 00:01:34 2025 GMT
        Subject: CN=0a6c02b6b9f589287ff211a8c82b2b651e9a91d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:61:5e:80:39:b4:e6:fa:ec:56:19:56:19:
                    8b:14:64:10:b7:db:9d:be:a4:00:2e:96:ed:40:a7:
                    1d:b8:5f:3a:c3:7c:ae:5d:3b:b6:3b:12:ca:ee:e8:
                    b8:e2:5f:d9:1f:7d:82:7a:63:84:34:9b:c1:d6:51:
                    d4:be:00:25:db:c7:36:b4:8a:b6:b4:58:87:75:16:
                    38:fa:ff:77:9f:ff:13:62:9c:89:86:00:f6:06:bb:
                    c7:f4:e7:4f:40:dd:df:b2:bf:81:71:45:0a:08:61:
                    fc:5e:19:9d:f3:03:a6:3c:f4:8e:6a:46:8a:ed:5a:
                    ee:c6:22:81:91:69:a4:7f:cc:e4:14:5b:06:1a:19:
                    c5:f5:0a:db:a0:df:72:94:dc:25:e6:e1:9f:fa:12:
                    41:83:b6:46:a4:48:63:9f:f0:10:9d:52:8c:ba:a3:
                    f6:ec:0f:30:50:d8:fd:c7:0d:dc:66:8b:09:b7:f5:
                    c4:b0:b2:05:31:1c:7e:7f:f8:9e:fb:cc:aa:09:d4:
                    62:1d:ac:55:44:9c:86:a5:66:cd:bb:4b:aa:de:0f:
                    9d:da:df:e4:57:e1:bd:e7:4d:f0:cc:56:9a:2c:32:
                    e4:5f:bb:70:05:e5:e4:06:f1:b6:a8:ad:93:4f:7c:
                    2f:b1:09:e3:28:cd:77:1a:4d:57:02:e7:c0:f7:6c:
                    a0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6C:02:B6:B9:F5:89:28:7F:F2:11:A8:C8:2B:2B:65:1E:9A:91:D3
            X509v3 Authority Key Identifier:
                keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:96:ba:7d:d1:53:07:50:c4:2c:3e:d8:4a:01:ae:75:a0:16:
         45:b7:9d:75:69:9d:9b:53:1f:ae:7e:c9:6a:41:fc:d7:cf:8b:
         10:16:1d:0f:1e:2c:94:84:db:89:47:8f:42:da:b4:f0:bc:02:
         95:59:68:c3:a1:04:03:4d:51:2f:ff:91:59:36:65:9a:ff:45:
         1f:5b:39:21:4a:ec:59:ce:9f:c4:28:97:fe:50:d3:f1:a5:d5:
         4c:8a:a6:ec:b1:f6:13:10:dc:32:80:54:4d:12:2c:4b:e9:3f:
         0a:38:89:54:e8:c1:b2:e1:00:bb:5b:09:10:7c:62:9c:44:b8:
         99:b2:b0:ec:39:06:46:e3:ec:88:37:cc:f9:23:8d:09:1d:c7:
         5c:48:3c:51:8b:49:2f:60:ed:75:56:d2:10:a5:91:76:7d:b8:
         d9:2c:ca:a4:22:61:78:d0:e2:32:47:2e:14:8e:f0:f7:c7:8f:
         b3:c4:8f:be:2d:f9:a3:72:03:ac:14:7a:47:e6:aa:a3:7a:2f:
         2e:23:e4:03:14:24:b9:51:3d:a1:e2:cd:bb:d2:c4:39:9c:68:
         27:f9:04:57:1c:99:35:87:b7:d3:b5:99:7f:fc:dd:1b:d9:03:
         7a:26:27:03:61:97:97:2b:5f:54:7b:f3:74:2f:1e:6e:4b:a9:
         33:8a:be:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:36 2025 by rpki-client