Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
File:                     i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft (raw, json)
Hash identifier:          IwEYFy9U+lBN5U6omXmU/wU2w8ZvT8mdFRuTqD8p77s=
Subject key identifier:   4C:1D:21:0C:23:E0:E3:0E:5C:91:BB:2B:5D:20:E7:C8:CE:D0:F7:19
Authority key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
Certificate issuer:       /CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Certificate serial:       01951210783BC5D656DCD64BF78F4523E4EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
Manifest number:          092E
Signing time:             Mon 17 Feb 2025 04:00:23 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:23 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:23 +0000
Files and hashes:         1: i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl (hash: Mnt5KDOgCMsUdlo38OySpG0eXwmxUQxcFgXODAX9iIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:78:3b:c5:d6:56:dc:d6:4b:f7:8f:45:23:e4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
        Validity
            Not Before: Feb 17 04:00:23 2025 GMT
            Not After : Feb 18 04:00:23 2025 GMT
        Subject: CN=4c1d210c23e0e30e5c91bb2b5d20e7c8ced0f719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:6a:cc:43:bb:80:b1:6b:68:fc:60:6a:41:
                    87:7c:a7:dd:00:54:07:18:0e:e8:8a:1a:88:da:35:
                    4c:de:b4:c4:7d:53:ed:f5:5b:a8:a9:48:96:37:b8:
                    d1:e7:fb:5d:69:2c:60:f3:74:16:2f:3c:4e:1d:29:
                    a8:18:63:bf:4b:65:a2:19:e2:df:3e:ef:c6:6b:d2:
                    72:42:a7:04:39:12:f4:64:c2:cb:da:94:c1:f5:d3:
                    34:f6:3b:c0:eb:05:35:68:27:e2:00:47:94:64:fb:
                    c7:4e:71:5f:6b:eb:b8:2a:80:f8:2b:91:09:d9:b4:
                    3c:de:92:eb:41:72:dd:f9:f6:ca:61:e8:fe:46:54:
                    f9:8c:a3:11:37:58:ac:2c:72:48:9c:9c:0f:53:07:
                    6f:dd:0c:18:34:f3:34:75:af:02:49:b6:53:8d:cf:
                    d5:4c:aa:0c:41:de:c4:a8:85:f2:58:31:20:f7:2d:
                    ba:5d:ac:0d:c6:fe:c1:2d:b0:eb:6f:00:4c:98:1b:
                    1c:bd:f7:bd:a2:5e:81:25:d0:3b:86:89:f0:5b:58:
                    04:68:28:d7:8f:7d:23:03:0a:52:f8:7e:db:a8:f5:
                    bc:b9:af:8a:ec:b2:30:a5:74:0f:0f:35:3e:2a:8e:
                    29:4a:07:31:82:44:99:b2:d5:79:84:25:42:16:ec:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1D:21:0C:23:E0:E3:0E:5C:91:BB:2B:5D:20:E7:C8:CE:D0:F7:19
            X509v3 Authority Key Identifier:
                keyid:8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:9a:e3:97:e9:94:27:8d:18:8a:f9:16:16:33:3b:ed:fa:73:
         5b:c6:4f:76:fa:76:11:84:22:bc:f7:2f:6c:4c:f8:e7:2f:87:
         77:b9:57:c0:8c:64:be:60:ed:31:09:d6:05:ab:4d:bf:df:04:
         31:d4:95:af:3c:8f:72:7a:b2:66:66:da:26:5f:ac:5b:9b:9f:
         e0:95:35:c3:bc:db:1b:3e:8b:a5:4c:2e:44:d0:cc:3f:57:37:
         4e:0d:9b:65:83:26:d4:66:6b:bb:cc:71:dc:09:94:d9:07:2f:
         23:36:07:e0:fd:b6:e6:d0:4b:65:73:fd:a8:73:11:41:c4:47:
         aa:7d:ca:8d:63:2c:95:e4:f2:06:e1:61:b1:1c:cc:91:6d:df:
         aa:4b:61:10:9a:7a:18:61:9a:e4:cb:55:b6:bd:61:d3:7b:f4:
         63:79:1c:42:59:11:e2:b6:4b:06:88:de:b4:2c:dc:e9:e9:76:
         c0:d3:e8:0a:4c:90:e0:bc:55:80:87:bd:fe:5c:04:a3:74:97:
         11:e8:e8:1a:8a:55:89:6b:d4:6b:4b:80:eb:73:d4:4e:8d:99:
         ec:ff:6b:80:78:03:a8:4c:00:ad:78:e1:3f:4c:e8:d9:08:b4:
         9d:74:05:54:a2:d0:44:63:f6:67:80:38:8e:80:7c:bd:7e:10:
         f3:15:ec:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:51 2025 by rpki-client