Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File:                     6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier:          54WE5dCVT9Sz0zNndFkZvnMP1Wxv2NmIFmbOXaJVgrk=
Subject key identifier:   AC:E8:AB:D8:FE:8F:3E:28:03:97:D8:4F:5D:1D:BB:2A:1D:8B:05:7D
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer:       /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial:       019511D97C1C66D66A9442E708AEEE068540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number:          0B4C
Signing time:             Mon 17 Feb 2025 03:00:20 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:20 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:20 +0000
Files and hashes:         1: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (hash: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=)
                          2: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: y/G8iWh2wV03Ur0b8HMnCkf2RnfZewQ/IMhr0G7rjWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:7c:1c:66:d6:6a:94:42:e7:08:ae:ee:06:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
        Validity
            Not Before: Feb 17 03:00:20 2025 GMT
            Not After : Feb 18 03:00:20 2025 GMT
        Subject: CN=ace8abd8fe8f3e280397d84f5d1dbb2a1d8b057d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:ee:32:e9:31:d9:7b:30:33:91:4a:6b:83:
                    f2:59:eb:0a:11:12:24:bc:99:de:2d:a0:a1:70:b5:
                    15:85:71:51:c4:79:26:7f:8c:85:16:96:b3:65:23:
                    16:d0:26:7d:50:49:33:bb:54:ab:c4:e5:bd:96:0e:
                    1c:b4:ae:39:4e:58:15:3c:96:e7:7c:64:69:fa:04:
                    54:9e:8d:ef:75:2b:70:1a:12:c9:7f:67:28:a1:bf:
                    6e:18:35:25:a4:d1:5c:43:bd:f9:70:61:8a:ed:01:
                    13:c3:5e:37:72:5c:72:83:43:47:7f:81:8b:19:70:
                    e4:98:f5:de:52:48:97:07:61:8e:b7:a0:fd:52:4d:
                    10:ad:af:d1:58:5c:c9:91:cf:31:45:1b:e8:13:56:
                    00:bf:dc:3d:57:2f:ae:63:7d:2a:1b:23:92:3b:bf:
                    64:79:8e:ed:1f:7d:b8:fe:23:a1:60:ba:a0:3b:14:
                    fb:2b:21:2c:39:6e:15:aa:2c:08:60:91:85:04:35:
                    9b:bb:42:d7:8b:41:c7:ed:38:22:10:c1:c3:86:c5:
                    4b:54:13:57:43:80:7c:e8:37:26:40:10:c7:5e:bc:
                    b7:bb:66:8f:62:8b:81:c2:b4:07:fb:6d:ea:ce:c7:
                    66:e8:eb:af:36:74:75:62:75:3c:b5:b2:e0:42:b1:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E8:AB:D8:FE:8F:3E:28:03:97:D8:4F:5D:1D:BB:2A:1D:8B:05:7D
            X509v3 Authority Key Identifier:
                keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:b7:42:ec:59:3f:6e:0d:0b:c5:6c:1a:1d:92:8d:64:64:b8:
         6d:88:5d:46:eb:d1:ad:a2:26:73:b1:86:37:68:95:5e:24:a2:
         e6:47:69:1a:38:c3:42:06:e5:97:37:d6:b4:7c:4c:29:55:bc:
         22:cb:e5:41:da:1e:bc:78:b8:9a:70:c4:03:f7:2b:75:e6:f9:
         14:2a:1e:48:aa:90:09:c7:bc:96:5d:30:aa:f2:4e:6e:b2:f4:
         f2:ac:9d:e5:73:e2:2c:af:0d:86:61:89:1d:9b:07:a0:a3:0f:
         73:21:8b:ab:6a:4b:06:ae:b0:ef:ed:65:ee:c7:0c:0c:6b:35:
         9a:0a:ba:f9:a2:47:a9:19:21:c7:63:c3:25:b4:f4:80:c2:df:
         d7:3d:17:97:3a:c1:45:f9:ab:98:fb:f2:45:f8:09:97:64:a5:
         89:4f:d9:3f:11:47:6f:2c:1c:b0:bf:c0:aa:cb:f6:48:4c:91:
         59:40:b0:47:51:63:1f:d9:60:f9:50:39:70:79:76:c3:23:b4:
         8d:d9:fd:05:7a:ee:09:78:7a:33:a3:e0:57:7a:dc:a0:2c:8a:
         49:e9:f8:82:59:98:f5:fe:03:da:ad:ac:5f:02:49:df:92:5c:
         66:b1:6e:c8:b6:06:a0:4d:f9:ba:d5:bc:51:86:b6:c5:ad:82:
         03:c4:0e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:05 2025 by rpki-client