Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File:                     oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier:          YDqNFZ9PZCoaTPgRrSPMM8E1eWMF0mMPjzAbu5KRF2k=
Subject key identifier:   83:5B:31:E4:C4:74:E5:14:A4:17:3F:85:5D:89:BB:A1:13:60:E6:1F
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer:       /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial:       019511A325F76FB1197828ECEE1494481B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number:          1456
Signing time:             Mon 17 Feb 2025 02:00:59 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:59 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:59 +0000
Files and hashes:         1: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (hash: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=)
                          2: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (hash: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=)
                          3: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: ILbfYL8Xw89kgp45C/KA2QZB6e3WxMAu7Br0WEx+DPo=)
                          4: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (hash: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=)
                          5: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (hash: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a3:25:f7:6f:b1:19:78:28:ec:ee:14:94:48:1b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
        Validity
            Not Before: Feb 17 02:00:59 2025 GMT
            Not After : Feb 18 02:00:59 2025 GMT
        Subject: CN=835b31e4c474e514a4173f855d89bba11360e61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c5:62:14:a9:f6:ed:48:30:1b:6a:f0:c0:97:
                    20:3b:5a:4e:e5:20:82:35:0f:19:05:d3:29:35:3f:
                    a9:af:7e:ed:4a:fa:54:08:4c:11:51:d3:c9:ba:d4:
                    bf:11:cd:42:ee:b9:c0:24:f9:e1:99:72:82:20:45:
                    6c:13:94:16:77:89:99:9b:df:1b:14:9a:70:77:d9:
                    5e:62:5c:df:43:6d:66:05:5d:28:d7:05:24:6e:58:
                    72:22:67:f8:15:c8:66:85:8a:90:29:2a:27:fd:61:
                    75:18:da:60:a5:44:4a:e7:f6:19:eb:7f:62:cb:26:
                    62:14:c5:7b:d1:3e:af:04:9f:40:97:88:99:e3:bb:
                    fd:07:ac:71:8f:11:4e:85:4f:9f:a4:5d:1f:2c:07:
                    9a:d6:ce:19:54:d5:92:d6:c0:30:1e:df:62:cd:10:
                    d3:3a:15:34:7d:fc:a7:69:0e:d1:e6:40:d8:d3:08:
                    3a:e4:16:75:68:64:ed:2d:44:84:c7:cc:11:54:cc:
                    1b:95:7b:c9:93:98:7e:22:61:f7:b2:26:ef:02:f9:
                    99:e4:52:5d:8a:e4:ba:cc:cd:43:f9:45:f4:75:04:
                    f8:fb:77:24:22:67:ab:ca:3b:49:d7:c2:17:19:4f:
                    ff:ce:99:2b:07:f9:d6:cd:ee:fe:e4:f3:00:cc:a3:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5B:31:E4:C4:74:E5:14:A4:17:3F:85:5D:89:BB:A1:13:60:E6:1F
            X509v3 Authority Key Identifier:
                keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:86:95:60:be:3c:98:e9:1a:2c:8e:69:85:68:f0:2f:cf:30:
         16:f7:0a:19:cb:d5:63:7c:3f:ed:fb:85:ad:35:66:bb:0d:74:
         af:2a:28:4e:1f:15:1e:92:8b:c3:cc:e5:34:23:27:44:83:d4:
         a3:6f:02:0d:67:35:8b:d0:79:59:ae:fb:7a:c6:fd:e1:bc:7f:
         99:26:15:13:72:01:f8:72:9e:71:4e:9c:d0:6a:67:84:01:82:
         1d:2a:85:54:4f:da:bd:fe:9d:80:59:b3:0e:1e:c1:5e:b0:95:
         70:1c:ac:d1:63:aa:14:c3:61:41:97:5d:47:70:a8:06:61:9b:
         29:75:de:06:45:92:f7:fa:15:2e:dd:63:c8:d9:27:70:73:f4:
         e3:ad:f8:4f:df:d0:c6:52:8a:cf:f2:a3:b0:cb:80:ea:18:95:
         63:25:c3:e2:05:9e:75:6e:71:3e:c0:39:0c:db:d0:2c:6d:a5:
         71:88:e7:75:30:ab:bc:d4:1f:b7:1b:88:50:b5:36:83:f4:59:
         e9:14:be:82:ab:b4:e5:db:36:57:fa:77:4f:63:08:56:44:02:
         67:f6:72:e1:61:be:fc:15:97:8c:6a:fc:3d:62:79:2c:60:5b:
         67:cb:e2:72:cc:dd:d8:cf:8c:43:c4:37:2d:8e:69:5d:e2:fe:
         ca:36:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:54 2025 by rpki-client