Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
File:                     Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft (raw, json)
Hash identifier:          oslqFXXP45TofEFxSfKKYSaLUCWIdeRSH919RTDV3vs=
Subject key identifier:   2E:16:18:E5:8A:44:22:96:E9:D3:1B:46:89:51:88:0D:21:B4:8B:D9
Authority key identifier: 63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
Certificate issuer:       /CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Certificate serial:       019511347078F2AC08E6039181A9E4AFA4F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
Manifest number:          05B4
Signing time:             Mon 17 Feb 2025 00:00:04 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:04 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:04 +0000
Files and hashes:         1: Xh4ptPl3loyr5HsYAeq5bigmrnc.roa (hash: y+GdTxJAoh6FrrDJ6BHqIZq0hI9csiMuoRcI0N0qK/0=)
                          2: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl (hash: a3r7pfuLMaL+uLOrwJgH4kKtvz7nyCnrYbTjDTRzUmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:70:78:f2:ac:08:e6:03:91:81:a9:e4:af:a4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
        Validity
            Not Before: Feb 17 00:00:04 2025 GMT
            Not After : Feb 18 00:00:04 2025 GMT
        Subject: CN=2e1618e58a442296e9d31b468951880d21b48bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:c3:97:58:b3:32:83:a8:d3:3e:be:17:55:
                    6c:a6:b9:00:af:53:93:f3:dc:e7:6c:2d:f1:f6:c3:
                    3c:d8:10:fb:cd:79:fa:fb:7a:62:e5:4f:89:b1:24:
                    68:23:09:93:26:85:9f:b2:e9:0a:db:32:21:98:93:
                    eb:92:90:23:24:1f:7c:96:99:5f:65:85:86:0f:22:
                    80:95:34:80:26:ec:fe:64:f2:b5:9b:9f:a1:83:3f:
                    17:42:ad:0c:4b:27:9c:d1:8c:84:01:90:dc:19:e4:
                    8c:6c:ed:cf:06:48:45:55:7e:01:c7:c3:12:99:5e:
                    7b:c4:e8:0b:9c:a6:da:25:21:52:93:d0:be:e0:56:
                    79:e4:84:bf:97:6a:bb:a4:5c:d4:fe:f2:9c:de:77:
                    f8:d0:05:c1:8b:f4:94:a9:ad:5f:1a:c1:28:6c:a9:
                    d6:ac:df:7c:a3:14:d5:f9:64:0d:30:e8:95:18:62:
                    fa:04:4b:50:2e:ff:7a:e4:5d:e6:2f:3a:03:eb:51:
                    23:40:3e:a9:61:22:78:fe:10:72:8f:72:ed:1d:c4:
                    02:0a:aa:06:38:02:6b:0e:3d:77:6f:ff:f1:2b:fa:
                    e7:c6:e8:58:62:73:1e:24:d8:31:8f:28:91:6e:8f:
                    8e:b1:77:c0:6c:91:e9:6e:81:0d:3c:27:71:19:43:
                    4e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:16:18:E5:8A:44:22:96:E9:D3:1B:46:89:51:88:0D:21:B4:8B:D9
            X509v3 Authority Key Identifier:
                keyid:63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f5:49:2b:9c:39:77:2c:3c:2d:d0:b7:69:36:67:71:61:eb:
         21:65:de:c8:5d:20:4f:3f:11:c2:ae:58:03:34:90:65:16:96:
         97:f9:46:f2:91:73:e8:0c:6e:78:6f:7e:66:56:54:39:b1:5b:
         e6:c0:96:23:31:33:68:73:2e:85:b6:80:6b:c1:b5:33:58:2c:
         cb:54:d3:a3:18:50:a1:cd:c6:9a:05:54:8e:84:2c:49:c2:3a:
         3d:d0:8c:17:71:db:9d:2e:41:ae:9a:ca:eb:d8:6e:32:b8:0e:
         81:63:ac:4b:f9:53:48:18:40:52:f3:cb:8f:85:69:a5:74:0c:
         d8:e9:7c:00:3e:06:83:ce:d5:92:e8:86:dd:f3:94:37:3b:1c:
         aa:ae:b4:cb:10:4d:29:ae:40:3c:b7:a0:67:a6:45:a2:cb:e8:
         0b:2a:a0:1e:e4:8e:5c:91:a9:f8:c7:38:40:f7:23:0d:a0:19:
         61:6b:e4:a4:e3:75:79:1b:ea:d3:02:7e:b3:b7:29:46:a3:ea:
         f0:f8:43:2c:19:92:de:28:c6:1e:d5:c8:83:02:38:78:6e:0d:
         f9:6a:86:7a:9b:54:fc:7b:9a:03:89:52:5c:68:82:3d:ee:07:
         31:79:dc:14:b2:fc:d7:d8:f3:69:f1:a0:ad:ff:ae:60:7b:dc:
         b5:fb:aa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:42 2025 by rpki-client