Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
File:                     AwWB6qlpA2wz-S68SETcIsVedRM.mft (raw, json)
Hash identifier:          92VVLyzguTTQP1EiowtTKC8Yi7zfzlXBrEPYz/dyLIY=
Subject key identifier:   6E:CD:D7:39:56:DB:D0:03:F1:F6:27:B3:AF:34:4C:C7:B5:20:4E:C6
Authority key identifier: 03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13
Certificate issuer:       /CN=030581eaa969036c33f92ebc4844dc22c55e7513
Certificate serial:       01951135381C813A94D84E7581F2AFF3B8CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
Manifest number:          12EC
Signing time:             Mon 17 Feb 2025 00:00:55 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:55 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:55 +0000
Files and hashes:         1: AwWB6qlpA2wz-S68SETcIsVedRM.crl (hash: q4DkgFOztzVOa+5/lK/G/TiaKEHTORHRtVjX6+qUKX8=)
                          2: VFGMzpMj8ZJeti9Ll27ab4FJTVY.roa (hash: WhbI727KX3OCfH4pg3jssZ4731JjR3VKbBebVtWZXgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:35:38:1c:81:3a:94:d8:4e:75:81:f2:af:f3:b8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030581eaa969036c33f92ebc4844dc22c55e7513
        Validity
            Not Before: Feb 17 00:00:55 2025 GMT
            Not After : Feb 18 00:00:55 2025 GMT
        Subject: CN=6ecdd73956dbd003f1f627b3af344cc7b5204ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:63:bf:ac:4d:99:03:b3:23:5f:1a:a8:86:
                    c6:76:e0:8c:cd:c4:16:4a:bf:7c:e3:1c:95:65:f6:
                    f5:03:0d:11:41:cf:e2:3d:3d:85:4b:67:cb:93:16:
                    93:58:e7:4c:22:4f:6a:dd:bc:73:7c:ba:34:5a:ea:
                    a9:07:58:d4:da:c1:0b:9c:b0:22:06:e7:54:9c:96:
                    d1:2e:c2:58:2e:82:2e:af:74:62:ae:3c:7f:1f:74:
                    14:35:73:88:6b:ed:7d:bf:3c:1e:29:df:94:2f:6a:
                    c4:e3:49:11:c8:1c:45:a1:97:f9:e7:d0:5d:38:18:
                    4b:50:e1:7d:e3:16:56:ff:f9:40:56:5f:8f:7e:21:
                    de:4a:15:86:93:99:8a:5e:c2:ae:79:cd:9d:d0:55:
                    ce:4a:90:a5:a8:72:75:00:5f:4b:42:93:45:e5:54:
                    08:08:40:67:ba:ea:f5:53:dc:e4:44:44:ce:13:d1:
                    c7:2e:ac:00:b5:70:fe:38:c4:ce:c5:41:55:c6:19:
                    bd:39:bb:8d:17:4f:db:1b:cf:28:1a:6f:70:6b:88:
                    94:9c:08:18:95:bb:21:b5:23:d7:81:57:fe:fd:a8:
                    e3:c5:3d:f2:0e:bc:7d:e8:81:fd:ec:ba:c0:bb:af:
                    f1:c1:25:85:ce:64:49:6c:43:96:fd:00:5b:70:41:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CD:D7:39:56:DB:D0:03:F1:F6:27:B3:AF:34:4C:C7:B5:20:4E:C6
            X509v3 Authority Key Identifier:
                keyid:03:05:81:EA:A9:69:03:6C:33:F9:2E:BC:48:44:DC:22:C5:5E:75:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwWB6qlpA2wz-S68SETcIsVedRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f558b-4a6b-4827-8f01-d84b2b1e9133/1/AwWB6qlpA2wz-S68SETcIsVedRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:eb:f1:05:06:e8:fb:74:93:4c:2a:84:f3:72:53:f6:4c:e6:
         2b:ca:de:af:93:c5:d3:bf:65:ab:19:96:3f:ac:64:96:b4:4e:
         b9:60:aa:51:50:50:72:21:06:40:5d:16:ce:9f:cf:39:2e:33:
         ee:63:78:4d:49:5b:fa:fb:72:e4:69:14:17:50:b7:d4:fb:a4:
         37:4c:6a:e3:f8:91:a6:69:54:34:32:cf:ef:f7:d4:8b:6e:b7:
         53:e5:b7:60:4b:c5:b6:52:b8:05:fa:03:c9:f0:5b:42:98:76:
         9b:22:16:50:d5:ad:2e:0b:aa:ac:59:1d:ba:a8:dd:de:3d:d4:
         9c:b1:3b:d5:31:cb:d0:3c:d2:d6:79:79:cd:ce:1d:ed:44:78:
         57:6f:fc:a9:e5:37:ee:cb:07:13:2b:96:db:45:47:15:48:ba:
         4c:a0:b0:c6:cd:8d:53:e8:14:02:92:76:04:23:79:80:12:b2:
         df:2e:ea:4a:37:28:a4:81:f3:92:98:26:78:be:0a:6e:80:b6:
         0c:d1:45:4b:06:71:8d:f1:62:ae:c8:9b:52:84:b9:82:b4:ef:
         60:42:67:a4:ed:76:da:36:7a:6a:c6:bb:52:06:da:48:7e:87:
         b3:03:8f:ce:47:42:5c:9a:4b:7d:e7:8e:ff:d1:b2:61:f4:4f:
         9c:bf:a2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:29 2025 by rpki-client