Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File:                     _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier:          apzFrgMLTp6SphGyVHpivtDSqSwmDhGrszmqCTmQIO0=
Subject key identifier:   27:01:B3:62:3E:56:70:CF:D0:AA:98:6E:9E:27:BE:A1:EB:E1:45:C4
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer:       /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial:       019510C6B1C9EC0E2D512AB31AD0327CA097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number:          1453
Signing time:             Sun 16 Feb 2025 22:00:11 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:11 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:11 +0000
Files and hashes:         1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: rPoXdMbsfTHA2SIWfSggUj+XELgnfEBiBY53SyIhHyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:b1:c9:ec:0e:2d:51:2a:b3:1a:d0:32:7c:a0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
        Validity
            Not Before: Feb 16 22:00:11 2025 GMT
            Not After : Feb 17 22:00:11 2025 GMT
        Subject: CN=2701b3623e5670cfd0aa986e9e27bea1ebe145c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:98:06:41:b3:42:59:e3:24:5b:fd:48:60:
                    00:e3:12:b0:72:db:73:e3:12:be:f9:6e:ef:0d:98:
                    a5:28:20:6b:1c:67:af:11:de:2a:47:80:aa:aa:98:
                    ed:47:95:4f:2f:78:1d:f8:06:08:71:d1:d2:26:70:
                    e0:65:7e:44:83:fe:63:22:d0:37:c4:b6:42:27:e6:
                    61:27:d1:24:c4:76:c5:45:59:4e:01:d6:f6:ba:6b:
                    94:fc:f1:60:58:e0:1f:a2:0e:22:f3:d3:c6:64:72:
                    27:72:6a:ac:5b:93:93:36:98:3e:fd:b4:c1:1d:1d:
                    ec:db:f9:68:21:6a:22:7f:18:22:c8:28:05:8f:20:
                    27:30:29:71:90:38:7e:f2:1d:1a:3c:9b:0d:dd:6a:
                    94:3d:b3:ff:1f:1d:d3:c2:ef:ee:61:f1:6d:a0:9f:
                    28:bf:49:37:d5:de:09:c3:09:de:11:da:a5:ae:24:
                    db:95:75:98:a1:89:cc:48:64:e6:6e:87:4a:d3:57:
                    46:de:63:23:87:af:44:9d:45:d8:72:4b:6e:cf:fe:
                    33:62:36:16:1d:48:5d:f4:a7:10:3e:33:0d:cd:14:
                    c0:f3:35:2f:d5:62:68:40:b4:ed:b2:e0:04:30:7b:
                    a6:a6:6c:da:8a:ec:2c:fc:10:1e:83:91:77:7d:71:
                    43:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:01:B3:62:3E:56:70:CF:D0:AA:98:6E:9E:27:BE:A1:EB:E1:45:C4
            X509v3 Authority Key Identifier:
                keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:95:3a:65:1d:32:8b:9f:b9:d9:1d:cd:24:1f:60:9b:35:ab:
         d8:5b:48:21:ce:96:7c:25:3a:a8:36:49:e1:ba:46:49:ec:17:
         78:d6:e2:f3:5a:8e:ca:97:58:ff:38:1b:58:ad:a3:0c:62:fb:
         64:58:f4:46:6a:82:77:f3:7a:7e:ed:52:15:c5:f6:fd:e5:83:
         5c:42:67:46:7e:96:d6:84:40:f0:b4:23:e4:4a:28:d1:af:31:
         c8:d6:54:30:dc:2e:76:21:16:44:3c:46:09:e7:44:ec:fa:d7:
         fd:7a:b1:7f:86:d4:31:d9:73:a7:7c:0d:40:ac:e5:b0:72:5a:
         6b:65:97:fc:b3:5c:6d:9f:d5:d1:1f:4f:a7:f4:01:6c:14:94:
         12:21:6f:47:ca:76:45:1b:08:8b:8e:1b:19:d8:f3:47:a6:55:
         7c:41:a8:c4:bb:69:db:91:49:5a:40:b3:de:d4:38:82:33:9e:
         6f:1b:5e:25:c4:8f:b2:9f:fc:9a:4f:b1:1f:2b:4b:b0:01:b6:
         59:af:70:34:88:24:44:ba:84:d5:e3:80:d7:0e:b4:c5:57:c5:
         b0:00:15:dc:38:c1:aa:53:d0:b6:f7:3f:65:97:d7:15:1e:c1:
         6a:3a:75:ef:ee:98:0f:87:0b:a3:97:5a:ef:0f:ca:aa:b1:a0:
         8f:50:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:35 2025 by rpki-client