Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
File:                     wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json)
Hash identifier:          DbVUTfSE2AxuFiVHkuw9oXMU14owfBvdbvTwJt9hpEA=
Subject key identifier:   CE:7F:6F:8C:98:3B:6D:42:E7:F3:94:4B:FD:8E:00:C8:0A:90:D2:EA
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Certificate issuer:       /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial:       019512472128F4DB00D9731565F285A963F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
Manifest number:          0C4F
Signing time:             Mon 17 Feb 2025 05:00:06 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:06 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:06 +0000
Files and hashes:         1: 5R5QxNHPxmr20xOEdihdn49Gqm0.roa (hash: 2rt++DxlRXOs+zCMhZPZtbhcL9D247iOIf522F37NiI=)
                          2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: ekO1lmTIndHvyJnQZAEdQxFTYB0OW+J0sPPls4dNl7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:21:28:f4:db:00:d9:73:15:65:f2:85:a9:63:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
        Validity
            Not Before: Feb 17 05:00:06 2025 GMT
            Not After : Feb 18 05:00:06 2025 GMT
        Subject: CN=ce7f6f8c983b6d42e7f3944bfd8e00c80a90d2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6a:c9:b3:de:6d:eb:b1:ba:38:99:6f:b0:ff:
                    08:77:2b:80:ce:c2:2a:6e:99:cc:85:b3:e7:92:36:
                    b6:5b:74:47:cb:b1:32:db:0b:c8:c8:3b:71:e0:84:
                    d9:dc:78:af:d8:b2:2b:1f:66:64:52:8c:44:f2:70:
                    f9:0f:03:db:09:64:74:c4:0f:ba:af:de:d7:5c:c3:
                    de:10:1d:24:8c:48:d6:23:9e:c6:38:65:10:2c:fa:
                    7a:29:83:f7:ab:cc:de:29:e1:24:9d:4c:41:ca:81:
                    49:b7:93:d9:e8:5b:62:44:2d:4c:8f:d6:11:72:1a:
                    4e:0e:12:d5:06:e5:2f:1b:93:f8:97:3e:97:b9:2a:
                    cc:11:51:c1:d5:4a:9b:e9:49:29:df:0d:88:55:5b:
                    14:db:28:a0:72:48:77:a7:ab:0f:27:5a:11:42:0f:
                    f5:bd:b4:74:f6:a6:d4:b4:e0:90:67:3f:1e:13:e3:
                    df:65:e7:56:7f:af:f6:17:67:2c:31:df:79:b7:b0:
                    25:f4:b3:2f:0c:93:16:a8:c1:f4:bc:c6:6e:a3:43:
                    3b:0e:be:16:75:7d:45:bd:03:c6:1c:b3:b1:47:8e:
                    c9:35:0f:22:99:f5:da:18:ee:03:36:80:71:05:b2:
                    3e:b4:a9:ee:48:51:93:e7:a0:8b:a6:b7:9b:f8:17:
                    b6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7F:6F:8C:98:3B:6D:42:E7:F3:94:4B:FD:8E:00:C8:0A:90:D2:EA
            X509v3 Authority Key Identifier:
                keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d9:14:99:7a:7c:0f:d4:26:e7:9f:bd:d1:5e:62:fc:1f:fb:
         85:89:22:5f:94:bf:b6:3c:95:c9:2f:4c:11:20:22:fa:7d:82:
         69:6f:39:44:d9:0e:d3:fd:1a:7b:d5:ce:a7:f1:23:79:6e:c1:
         ae:a0:c2:77:f6:6a:c5:85:a2:23:fa:41:e2:32:bf:ed:17:36:
         a6:88:46:65:67:0a:57:a0:3d:66:29:4b:c1:ba:cc:bc:12:95:
         e1:13:d5:2f:43:b1:c6:58:41:17:d3:50:1c:ad:46:ec:30:a9:
         10:03:f4:87:d1:2b:3a:18:bd:b7:8f:25:3e:e2:c4:16:27:70:
         ed:ab:b2:f7:6f:aa:98:b4:2a:1f:c1:38:df:4a:23:96:55:dc:
         06:df:1f:75:3a:7a:21:1d:ed:55:b2:c5:1a:be:b5:3e:c2:20:
         73:03:6c:2d:bf:f3:78:3c:30:de:96:c4:22:85:4e:21:91:24:
         c7:11:0e:12:ac:07:42:db:96:ff:5d:29:80:32:71:a2:7e:52:
         6e:ed:16:90:2e:42:2f:5e:3b:7e:83:52:65:bf:e5:93:58:b9:
         e3:ee:72:43:92:5e:31:49:b7:d4:39:4a:19:e3:ab:53:81:b4:
         9d:5d:99:60:e3:3a:ca:bd:fb:8b:0a:c0:7d:ea:c4:3c:77:f5:
         e0:06:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:16 2025 by rpki-client