Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File:                     YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier:          03D8T3ltT1H7z6/ifU19PUg6X6NNN8Sbo2QNq2fKFMo=
Subject key identifier:   68:42:9F:98:B0:DE:38:93:0A:5E:35:E1:34:E9:49:8E:0D:15:CE:D4
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer:       /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial:       019511A26F4EA78F4B944CBAEA2A32AB15B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number:          1454
Signing time:             Mon 17 Feb 2025 02:00:12 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:12 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:12 +0000
Files and hashes:         1: 6NZRnUE5rHquhh6nv9A14s2aRkA.roa (hash: BDIznY+oSrAehNVVW8SN5zZkQxk6NfrwDHMlr9/Gl2o=)
                          2: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: Y7Sd0BI/7zc+kUyslLL/aGwvswbEQeZaNEhNOOCWscc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:6f:4e:a7:8f:4b:94:4c:ba:ea:2a:32:ab:15:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
        Validity
            Not Before: Feb 17 02:00:12 2025 GMT
            Not After : Feb 18 02:00:12 2025 GMT
        Subject: CN=68429f98b0de38930a5e35e134e9498e0d15ced4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:14:3c:ae:62:c9:7a:d2:97:af:c3:59:e0:
                    4a:0e:c4:fb:8c:ac:46:4c:09:46:73:ce:83:a0:16:
                    d4:af:4f:8d:0e:5f:5e:6f:e9:7f:f8:c0:bc:c9:83:
                    73:58:93:c2:a1:83:27:1b:83:f3:5d:fa:e3:e0:7b:
                    30:17:16:c7:c0:d4:c4:9f:82:b8:f0:0c:78:f6:c4:
                    54:b6:07:13:41:f7:af:12:11:64:f6:2f:c0:a2:93:
                    23:72:b6:a8:c4:45:f2:89:e2:a1:4c:75:c6:db:59:
                    f2:6c:3f:15:c1:e7:10:b3:e2:79:c6:09:b5:f7:b7:
                    d2:28:1e:36:50:f6:9e:60:cc:90:73:6f:81:2e:0b:
                    c4:93:6a:62:7d:28:b7:d9:fb:60:8f:e6:25:77:c2:
                    39:93:8b:bc:fb:8e:ea:b9:ec:cc:40:06:96:42:07:
                    e8:ef:21:7c:15:b8:2b:f0:43:25:3c:97:d6:95:43:
                    65:1a:d4:af:13:e9:ac:a9:7d:67:48:d8:05:88:c8:
                    9d:04:82:80:02:12:53:d7:b0:6f:ba:d3:21:3e:12:
                    6f:8a:a4:9c:5f:45:f1:88:bd:54:c3:4e:f8:95:8b:
                    54:f0:b3:ba:86:e0:c3:91:bb:47:d7:f3:15:e3:b2:
                    b3:df:ac:b9:33:68:6d:5a:c1:67:dd:af:cc:6d:94:
                    1a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:42:9F:98:B0:DE:38:93:0A:5E:35:E1:34:E9:49:8E:0D:15:CE:D4
            X509v3 Authority Key Identifier:
                keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:46:1c:fe:96:1d:e3:21:c3:8a:1a:bf:ee:b2:b1:ab:c3:ba:
         91:da:6c:35:a1:0a:81:ff:39:a0:f6:01:b6:35:48:6a:74:05:
         d1:ff:2d:f4:eb:64:c1:18:17:35:26:65:12:b8:8e:ca:63:11:
         f2:6f:dc:b9:9d:07:59:7b:68:72:9e:86:b8:09:6e:07:02:23:
         63:35:b3:17:51:ed:a6:09:09:df:84:03:fb:d3:d4:89:00:a6:
         52:15:80:39:9f:7d:a2:f1:4c:a6:ff:81:cc:e6:78:ad:8c:1d:
         69:e7:4d:2f:5f:57:5d:79:93:d7:52:4a:3e:11:9f:52:48:c1:
         aa:92:a3:96:ad:f7:ac:5a:5a:d1:80:fd:4a:b3:ac:ba:9d:93:
         56:b5:f3:b6:1e:9f:47:95:68:24:6a:6f:d5:05:e2:e5:d3:ef:
         fb:15:07:60:3c:d9:90:f5:24:56:f4:2f:88:91:c2:4e:48:07:
         ff:18:63:64:56:f5:fc:84:82:ad:ef:47:81:56:86:d8:d8:36:
         89:08:73:20:71:d4:a0:a5:2b:52:97:a3:e0:e0:5e:09:7b:c9:
         85:39:7a:4a:d4:72:aa:7d:b5:4f:8d:5f:95:e1:50:2e:85:b4:
         22:21:04:c1:f6:50:4b:f9:a5:63:35:08:a4:18:dd:a5:04:7d:
         35:a0:fc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:30 2025 by rpki-client