Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
File:                     VzCjLzFiRs4LFHu4lejN8K7UPtY.mft (raw, json)
Hash identifier:          OGzQadgwup+ahjmEw+7OmDSF2hXsBR3aB709/Tf6usQ=
Subject key identifier:   3F:1E:48:BC:DC:02:D1:D5:C6:35:39:24:CB:67:0A:96:9C:ED:9A:90
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Certificate issuer:       /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial:       0195121061CFC79077D5232F7B5CD55CDE7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
Manifest number:          0705
Signing time:             Mon 17 Feb 2025 04:00:18 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:18 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:18 +0000
Files and hashes:         1: JdnQsGvdkhLMYKHimmIYbcmtu_4.roa (hash: XQ8/SW7MphrctHqH7PZ0NzqyE28ii273Q0FygBQXgEo=)
                          2: VzCjLzFiRs4LFHu4lejN8K7UPtY.crl (hash: BhnLRnOamder0SCQ0O/8T33Zsjmn9BveedjEr6ORgh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:61:cf:c7:90:77:d5:23:2f:7b:5c:d5:5c:de:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
        Validity
            Not Before: Feb 17 04:00:18 2025 GMT
            Not After : Feb 18 04:00:18 2025 GMT
        Subject: CN=3f1e48bcdc02d1d5c6353924cb670a969ced9a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:cb:9f:ad:29:8f:c4:60:0e:32:a8:15:a0:
                    03:b3:86:49:49:cf:23:70:63:58:bd:a7:c0:2b:08:
                    3a:20:cd:46:b0:b7:52:da:07:ce:3a:55:d3:7f:f4:
                    bc:90:d8:6e:57:4c:f9:27:0b:86:cf:e1:d1:af:8c:
                    93:a8:f8:54:d0:f1:d9:a3:7a:5a:59:33:54:9d:02:
                    77:c2:95:3f:55:70:e8:f6:41:aa:2f:ac:92:c9:24:
                    39:9d:06:16:c4:dd:04:dc:04:ab:3b:6a:df:6d:00:
                    fa:b9:5c:b7:d0:13:18:aa:e0:14:0d:65:49:c8:ef:
                    15:db:3d:77:e4:c8:fc:ae:c2:10:22:53:84:87:d8:
                    23:d8:e0:dc:92:7c:65:1d:c1:7a:08:cf:bd:a2:45:
                    31:21:8b:0c:30:34:84:6d:b6:0c:e6:85:b2:58:30:
                    22:d2:1a:30:12:07:b3:08:db:d2:f7:15:5f:c6:7b:
                    6f:22:ed:bc:53:4e:a0:e5:28:d9:74:0a:e2:78:88:
                    ad:55:dd:fe:9b:0f:b5:ba:1c:97:e0:6f:fb:37:07:
                    64:da:12:72:02:0c:54:5a:88:46:c0:d5:79:0e:4a:
                    cb:e8:fe:ac:4f:6a:5c:e8:9c:e8:a2:13:01:17:57:
                    7f:04:8b:a0:1f:ec:7c:91:18:7f:0c:4a:b4:8b:27:
                    b6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1E:48:BC:DC:02:D1:D5:C6:35:39:24:CB:67:0A:96:9C:ED:9A:90
            X509v3 Authority Key Identifier:
                keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:10:cb:a6:4c:24:60:36:4d:a8:f4:82:b1:28:ed:a3:b3:14:
         94:72:6a:29:a4:fe:72:db:60:e0:74:9a:2d:3b:bd:73:5e:78:
         b1:0f:22:81:c2:eb:f6:67:d3:ef:21:12:40:43:05:64:49:49:
         eb:ad:d6:76:15:51:a6:88:e0:a8:c3:d2:9d:1c:9a:23:05:7c:
         9d:3e:88:e5:82:ae:06:12:66:dc:6a:40:a1:6a:0e:24:75:07:
         71:c1:91:ab:7c:76:63:87:99:eb:8f:10:0a:7c:04:c6:57:58:
         ba:4f:b1:cb:0f:83:b8:7b:86:d0:6a:b6:71:22:da:77:8b:7f:
         e9:29:e9:39:65:1c:0d:16:04:33:1a:e5:8c:46:56:bd:0f:33:
         ef:2d:3e:01:26:b3:3f:7d:3e:e6:30:c8:4d:7b:02:ef:93:ff:
         c2:21:66:3d:18:78:ec:9c:20:6c:74:f3:ea:3a:55:c8:58:c6:
         fc:5f:91:7b:f8:76:2c:16:b5:e4:0e:e1:cf:2e:bb:b0:1e:88:
         d3:54:7c:c5:a7:2b:3e:a2:56:84:33:11:68:3f:ca:f3:b1:0f:
         e5:12:d7:6d:eb:69:80:54:76:64:5b:7e:fc:3a:80:73:dc:8c:
         96:9a:e3:90:4f:77:94:d4:0d:d6:a2:d7:ad:93:df:a3:f6:1b:
         16:e1:b6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:05 2025 by rpki-client