Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File:                     B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier:          rJIG9JOk1As3Q4vr3Nv1pI6i3jInA1vYLTgxi9+TQWA=
Subject key identifier:   8B:0F:D5:87:2C:91:55:05:C8:73:04:F4:74:BE:5E:19:82:35:B0:76
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer:       /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial:       01958C970035C2FF6CADEF680A1A91A250CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number:          1498
Signing time:             Wed 12 Mar 2025 23:01:00 +0000
Manifest this update:     Wed 12 Mar 2025 23:01:00 +0000
Manifest next update:     Thu 13 Mar 2025 23:01:00 +0000
Files and hashes:         1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: lkgVp8P1PcK7tYWzpf9b4dD4IcsOTejZgJokJE3Oumg=)
                          2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:97:00:35:c2:ff:6c:ad:ef:68:0a:1a:91:a2:50:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
        Validity
            Not Before: Mar 12 23:01:00 2025 GMT
            Not After : Mar 13 23:01:00 2025 GMT
        Subject: CN=8b0fd5872c915505c87304f474be5e198235b076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e4:d5:96:cc:76:4b:73:83:65:1c:f8:9a:d9:
                    dd:4d:15:46:71:4d:d0:d7:47:5d:8e:92:b4:2a:d1:
                    89:c0:02:9e:ac:77:0a:60:3a:38:dd:ba:52:56:c9:
                    b2:4b:fc:11:63:e8:77:9d:76:51:3b:a2:f0:39:ad:
                    b1:9f:99:59:c3:23:2a:c1:cf:59:d5:18:12:3b:98:
                    61:86:37:9b:88:db:c2:07:f6:ac:d7:af:cc:db:0b:
                    73:c4:3a:7a:64:f2:c9:c5:cb:f8:a0:5a:e0:c0:bc:
                    c2:9a:b4:07:d7:db:df:00:31:0f:36:89:22:2a:5f:
                    7f:88:bf:bf:3f:8b:7e:06:05:65:23:91:50:f0:ad:
                    01:5f:7d:57:72:02:7d:93:28:31:cf:64:f9:1a:b8:
                    fa:d9:32:0a:24:17:bf:2f:fc:fd:18:f3:04:4e:32:
                    f9:9b:77:6c:89:26:11:08:3b:c8:d4:00:75:72:1a:
                    a2:a9:67:1e:c1:86:83:8c:d8:ef:81:c9:9d:6e:16:
                    9b:7b:23:99:52:56:42:d0:47:5c:53:39:07:15:0e:
                    1e:e9:fd:8a:cb:06:13:a4:46:e4:6c:ea:f0:26:c0:
                    1b:32:0f:85:87:01:cb:ec:84:63:84:ab:4a:d3:21:
                    fa:28:70:b8:07:1d:04:45:13:b7:c3:c4:45:c6:2c:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0F:D5:87:2C:91:55:05:C8:73:04:F4:74:BE:5E:19:82:35:B0:76
            X509v3 Authority Key Identifier:
                keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:1c:cc:f1:33:bb:13:50:bf:2b:24:2c:98:b5:88:30:07:
         ab:e0:07:4f:2c:1c:f3:a0:0b:06:19:14:14:88:8b:d5:eb:06:
         e8:be:1c:98:a8:3e:80:2a:24:87:5d:53:68:e4:e5:22:54:e7:
         07:56:a8:17:e6:d5:7a:be:82:23:13:3a:9f:8b:6a:f6:eb:85:
         f4:ec:a9:c8:0e:01:7d:7a:f5:22:9d:37:e8:5d:52:d3:04:1d:
         83:11:8c:f9:80:ef:64:ac:7e:75:6e:df:11:fe:75:60:23:08:
         14:ad:ac:ab:62:4c:0d:ab:06:9b:89:5c:10:1a:dc:01:76:f3:
         d6:5c:84:49:08:e2:55:5f:4d:92:ad:d0:9a:ce:12:17:bc:f8:
         d3:a8:74:c8:7d:11:6c:45:15:7c:3a:af:21:40:53:c9:79:28:
         4c:b4:24:03:fb:5a:94:6e:a5:25:a9:45:0c:3a:f2:a4:73:6b:
         97:aa:6b:a9:c2:3e:84:3b:28:ff:e7:f8:f5:4a:23:7f:c6:8f:
         94:b5:ae:89:73:9b:0d:e0:2e:c7:f2:f8:57:94:5b:eb:b2:00:
         6d:3b:3e:0c:a1:eb:3f:b2:c5:9c:78:71:4b:dd:a4:42:be:09:
         fe:0e:89:0d:50:5f:4e:9e:3b:56:d2:95:6d:4f:89:60:4b:1a:
         2f:55:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:46 2025 by rpki-client