Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File:                     0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier:          IZlGVuVoLwe/O6bIq0OKKoAX0D+aFuxiELOJ/M12Dc4=
Subject key identifier:   51:16:07:C2:11:72:D3:66:69:94:E9:DF:41:EE:D8:F8:FF:A9:81:BE
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer:       /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial:       019510FDE6B00F9AB4201D0EF710B7147DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number:          0748
Signing time:             Sun 16 Feb 2025 23:00:29 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:29 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:29 +0000
Files and hashes:         1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: OWd+I67+56OwlD4vumq0YBYmD29tAlJQpP/debX8EIU=)
                          2: 3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa (hash: oLSU3YNaGRS7ljQgete6uiDJRLwSKNoaWdOvOIOXxdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fd:e6:b0:0f:9a:b4:20:1d:0e:f7:10:b7:14:7d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
        Validity
            Not Before: Feb 16 23:00:29 2025 GMT
            Not After : Feb 17 23:00:29 2025 GMT
        Subject: CN=511607c21172d3666994e9df41eed8f8ffa981be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e7:90:da:fb:36:04:49:2d:f3:97:5c:52:f5:
                    ec:f9:08:b3:fc:c0:24:4b:c3:c5:26:32:b4:7c:b0:
                    74:1e:0e:5c:ae:e2:8d:9e:3c:62:8f:1a:36:46:ca:
                    a1:2c:15:c0:8c:9b:74:65:63:f0:f1:23:99:07:20:
                    20:04:66:e2:53:59:7c:43:75:0f:06:58:d2:2a:dc:
                    3f:87:f6:a3:27:da:c4:77:b6:b1:b2:16:f4:1b:55:
                    84:da:9d:52:e5:41:19:34:26:11:9e:7b:4b:ab:88:
                    d2:4d:8e:07:67:e5:af:fc:d3:d7:da:03:b5:8a:91:
                    45:a3:fe:33:8d:f6:a5:c6:86:d4:f7:32:e0:8c:53:
                    95:86:ef:68:2d:91:d2:42:10:1c:99:a1:22:a0:a4:
                    b6:52:3b:00:b0:4e:44:53:85:db:fb:33:f7:f1:aa:
                    79:15:82:c3:66:aa:c5:61:37:52:3c:6d:49:08:4a:
                    68:12:e7:54:0c:8b:3d:2a:53:d6:0b:36:ad:04:12:
                    a0:f9:80:f8:e7:1e:0d:56:0f:69:56:e1:63:80:3a:
                    2b:de:3c:cf:92:12:dc:41:f7:22:fc:6c:d8:bb:1d:
                    a1:8f:aa:12:c5:31:87:2c:c4:5d:fd:fb:51:ae:ff:
                    e6:7d:e7:6f:b8:12:f4:ea:63:cf:cb:79:07:fc:6e:
                    bc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:16:07:C2:11:72:D3:66:69:94:E9:DF:41:EE:D8:F8:FF:A9:81:BE
            X509v3 Authority Key Identifier:
                keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ca:d9:98:0f:d9:fe:de:20:d9:5c:46:a2:b7:79:38:74:42:
         97:85:43:35:cf:90:73:ff:90:8b:81:30:18:bc:73:a9:cc:52:
         c9:71:a9:bb:e5:0f:a1:a2:43:b8:67:f4:7c:4b:99:5e:68:d1:
         75:07:7d:14:4c:94:59:34:74:38:64:f4:9a:79:81:bb:cc:44:
         dc:d6:08:28:c0:58:bf:30:dc:a6:67:63:39:ee:35:df:dc:73:
         56:02:40:f2:f8:d8:61:e1:3c:99:f4:f3:e3:2e:46:3a:e7:72:
         47:85:ee:ba:3c:f4:75:1b:cd:3a:1f:89:36:c9:cd:2a:f6:f4:
         61:0e:a6:1d:43:54:cc:a6:3f:0e:af:5e:23:0a:5d:2b:62:b5:
         2d:60:0c:5a:17:2f:47:cf:fb:bc:d9:32:d5:74:2b:4c:42:09:
         d4:55:48:b0:8e:7a:ba:c7:94:5f:16:c9:41:7f:35:be:c9:31:
         40:98:56:50:2e:9a:8c:ec:72:6d:60:b2:be:6f:3b:7e:f9:96:
         a1:5b:e7:0c:c0:ca:14:f1:73:32:38:4a:32:80:92:5e:8b:8c:
         4d:92:f0:d7:0a:10:bf:27:96:8d:26:82:2f:dc:af:6c:70:1a:
         f3:46:15:0c:27:e8:34:6a:47:08:cb:1d:10:9d:d5:51:6b:4a:
         c9:d0:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:51 2025 by rpki-client