Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File:                     ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier:          ORiwFzQCruYRIZ8Eg0cG4J5s62JCGBRjXU+Bam9gd4o=
Subject key identifier:   44:97:BB:55:22:B4:90:A4:F6:0E:7A:B3:15:EC:00:C3:91:9E:26:A3
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer:       /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial:       019511D970E1BF303890EF3A6BAD13652B99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number:          06F4
Signing time:             Mon 17 Feb 2025 03:00:17 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:17 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:17 +0000
Files and hashes:         1: 4HntnwbwwM5vMcJuIab-USv0aos.roa (hash: D4Y8oo/1p1CfNZ78xGazKWpJcNpM6vsLdZIWby5+wsA=)
                          2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: iO0xyNyPzGhPqjZb6lbHm0jVEbzgOHYtlPI42ahbCgk=)
                          3: xqQfiVZ1kttrOCR7xRSiCiiX2fY.roa (hash: 9+bsofjuuct5WmR8AYlK+fsU9sOrJTXhdDVACpV84ik=)
                          4: z6m9WxpDgDoLf4lFQ6-3riSMGBo.roa (hash: DdTxEazjHwj9S4/2pF5uXHejE6sdQfki7PScehxeU80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:70:e1:bf:30:38:90:ef:3a:6b:ad:13:65:2b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
        Validity
            Not Before: Feb 17 03:00:17 2025 GMT
            Not After : Feb 18 03:00:17 2025 GMT
        Subject: CN=4497bb5522b490a4f60e7ab315ec00c3919e26a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:ad:4d:42:48:5c:67:f4:69:34:40:f1:23:
                    b7:dd:20:d3:28:57:ec:b0:f6:20:9e:e1:8d:cf:e7:
                    95:5d:5e:53:69:5b:7f:92:42:af:4b:e4:49:e0:0e:
                    bb:1f:94:69:5d:83:8a:54:0a:5b:e9:66:96:07:18:
                    62:31:cf:ec:3b:ed:fb:9c:90:c6:f3:0a:5b:64:a7:
                    c4:e2:b6:5a:30:12:5c:8c:f1:09:bd:44:5d:c0:27:
                    9a:47:4d:ff:93:28:5b:df:19:52:ac:db:d6:b8:37:
                    04:ae:e8:b1:58:ec:eb:0f:f2:38:b1:00:c7:ac:38:
                    65:f3:2e:f2:80:92:ab:ca:46:a2:e7:40:2f:5b:c6:
                    ee:81:9b:c3:65:8e:88:c6:07:6a:fb:91:03:56:dc:
                    42:19:8c:4a:37:26:80:56:20:41:7e:2e:58:9a:3c:
                    8e:6d:df:24:69:d6:83:b9:20:b8:dc:dc:c9:96:da:
                    46:e5:93:dc:4b:5e:ae:18:70:91:8b:71:39:66:77:
                    03:7f:fb:fe:8f:d8:c0:db:ce:01:df:ca:c4:96:bc:
                    1c:fc:48:9f:9b:cc:f4:3f:66:83:42:5e:28:17:fc:
                    b2:50:cc:56:31:1d:27:5f:06:0d:ab:cc:80:ac:2d:
                    37:71:03:0d:c5:8d:6b:a8:d7:56:fd:ce:a4:36:fa:
                    0a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:97:BB:55:22:B4:90:A4:F6:0E:7A:B3:15:EC:00:C3:91:9E:26:A3
            X509v3 Authority Key Identifier:
                keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:38:5c:60:cd:13:ea:b4:f2:64:b6:6f:fe:6c:dc:9f:fa:30:
         cf:7f:d2:c0:55:14:2d:62:df:cb:f9:78:e4:99:6b:96:56:53:
         74:08:99:c0:0f:7e:70:8e:61:24:a8:92:78:19:db:f9:c5:4f:
         5a:07:f9:f8:07:4f:ac:36:79:24:18:3b:71:b3:33:73:8c:87:
         fb:d3:67:39:4e:dc:ae:67:a5:a4:e2:5e:d5:3c:e8:eb:54:85:
         29:eb:89:ba:98:82:d7:0e:d7:cf:f4:1b:a7:32:13:f6:50:0f:
         24:4d:0c:fb:5b:4f:41:6f:2b:68:3c:b9:2e:76:00:32:2e:e3:
         27:db:49:a8:23:06:55:c7:9c:e9:4a:33:02:fc:6f:20:c8:d7:
         c7:54:c5:81:57:5e:bf:2c:41:91:14:0b:84:74:3c:3c:43:a7:
         2e:58:2b:6a:89:a3:c7:b5:4b:3d:5f:17:8e:8a:2f:5e:cb:5e:
         f9:57:05:41:87:50:26:a5:6b:83:d3:34:70:ad:6f:54:4e:66:
         79:5a:3a:21:2d:30:ee:87:5d:1b:41:05:8f:71:85:27:b0:5a:
         88:49:44:c7:c3:cb:3e:af:c5:a4:f6:96:f6:4c:55:dd:f9:a0:
         09:ca:de:6b:58:e0:7f:de:1d:d2:a2:be:87:2e:ca:a8:28:af:
         4e:81:a8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:16 2025 by rpki-client