Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
File:                     w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json)
Hash identifier:          4p1985D9WoRJ8PF+ODcAnjrZqhsloy7bJOtzeiCuSdg=
Subject key identifier:   96:74:E9:95:7A:0E:CE:DC:58:45:CD:4B:23:05:AA:F6:12:7E:D0:76
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Certificate issuer:       /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial:       019511A2D4CE42DBE710C036E1B5BE78F3B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
Manifest number:          0D57
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:38 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:38 +0000
Files and hashes:         1: 2u_bcZkkSvx-ZcsdCRFCGyh5HjM.roa (hash: 7lJhGCJBImviva4lcJI32wc+2zEbO+nn7NwKLsiaeHg=)
                          2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: 4uCqCCcT8de38Xz4LwMSp5yxVQVCCimOgDEmZwxioVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:d4:ce:42:db:e7:10:c0:36:e1:b5:be:78:f3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : Feb 18 02:00:38 2025 GMT
        Subject: CN=9674e9957a0ecedc5845cd4b2305aaf6127ed076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:c8:b4:0b:74:af:96:f4:68:06:5d:1f:a4:
                    fc:e1:d8:ac:74:37:e1:a5:51:b4:26:4b:ec:44:ac:
                    c4:1b:4a:f7:a3:ff:c3:61:e4:e3:89:f4:cd:75:a2:
                    ac:6f:ad:7f:79:0a:7f:a2:e7:b8:6e:ae:62:9c:a8:
                    55:34:b1:71:5a:72:78:22:81:d5:e6:3e:95:43:38:
                    a9:d6:95:63:8a:1c:6d:2a:ee:9e:85:f6:b8:57:87:
                    de:e5:da:1f:d5:8c:af:d6:b5:52:82:cf:1c:ce:7a:
                    28:a5:6b:d8:ca:46:43:e2:50:95:05:4d:d0:5f:fe:
                    5a:59:5f:46:87:98:07:75:31:81:4b:5f:3e:56:7a:
                    dd:42:07:14:73:32:9c:7d:f7:e2:2e:18:32:4a:be:
                    59:4b:ee:55:78:de:0b:3a:31:85:6e:ff:9c:85:38:
                    ad:dd:1a:7a:05:62:3e:18:8c:c5:8b:61:23:ae:eb:
                    0c:b7:41:51:47:cb:0e:24:29:e9:9e:03:1c:44:20:
                    60:a5:22:59:11:49:df:e5:25:fc:60:e4:0c:fb:ac:
                    4b:32:f3:aa:bc:68:b1:9e:10:4d:2c:dd:88:b1:b4:
                    aa:54:2f:3d:ff:f9:4e:00:55:a6:a1:76:f9:eb:b5:
                    2c:df:85:00:fb:41:a5:9c:6c:ae:54:b4:25:f6:70:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:74:E9:95:7A:0E:CE:DC:58:45:CD:4B:23:05:AA:F6:12:7E:D0:76
            X509v3 Authority Key Identifier:
                keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:e8:ce:e9:e1:d2:95:4a:a2:d7:53:f1:60:cd:2c:48:4d:55:
         4d:ac:f8:07:1c:c9:98:52:d2:d4:44:f4:33:3f:25:20:97:ec:
         d7:a6:a1:19:6a:84:4d:15:67:71:9b:2c:69:78:7b:91:a2:dc:
         f2:72:1e:3f:5b:35:e3:d9:3c:23:d9:79:a7:8c:d4:f3:60:3e:
         46:b5:82:9a:9e:59:5f:af:f3:e8:51:bc:fe:f6:cb:b5:15:39:
         6a:ec:2e:7c:1b:a6:ee:58:de:d8:ce:73:7c:74:c3:38:b5:ab:
         bb:9c:5e:c7:b0:7a:36:43:da:1a:16:fa:ef:89:94:ed:94:00:
         69:9a:e1:4c:ee:56:36:82:c0:42:0c:62:40:6c:72:e8:c6:bd:
         0d:95:72:53:91:c2:d2:26:09:40:f4:93:2c:a8:80:42:e8:e2:
         0e:17:6a:bd:f0:af:24:68:a1:2f:3e:ea:f8:6f:c4:ab:31:d7:
         9b:28:51:9d:30:bb:ec:4b:57:df:5d:3f:ae:66:e4:df:de:c0:
         d0:ab:1b:7f:fd:d8:e4:ee:08:f1:f3:fc:ea:13:7f:fc:fe:9c:
         e5:b1:8a:ab:8f:6c:c7:f0:d6:48:b6:a3:62:8e:34:25:3e:f8:
         8f:af:72:6d:22:16:e5:d3:35:78:88:50:71:fd:29:e0:84:c7:
         73:1f:15:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:59 2025 by rpki-client