Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File:                     bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier:          sc/TlBwf+1HUttwztWobptfW6PEzdS2ZcN5krRG7y+s=
Subject key identifier:   EB:47:AC:95:05:00:68:76:6D:EB:7B:3E:24:54:3E:E0:D1:86:04:46
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer:       /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial:       01958BBB83AB9AE47668B57B7A7BBA2F5955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number:          1496
Signing time:             Wed 12 Mar 2025 19:01:16 +0000
Manifest this update:     Wed 12 Mar 2025 19:01:16 +0000
Manifest next update:     Thu 13 Mar 2025 19:01:16 +0000
Files and hashes:         1: 2cCUJtYhVepSHvUymWA4difKbm4.roa (hash: 2GZetLN+ABzzZiJpVfwp76NOZrbjBE0afEtmIXZxkxM=)
                          2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: rGRCNYRrSRnoO4dNng+yJkEWYDsIBP22BZPSTVZov9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:bb:83:ab:9a:e4:76:68:b5:7b:7a:7b:ba:2f:59:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
        Validity
            Not Before: Mar 12 19:01:16 2025 GMT
            Not After : Mar 13 19:01:16 2025 GMT
        Subject: CN=eb47ac95050068766deb7b3e24543ee0d1860446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:93:f7:f0:54:68:b3:1c:98:f8:15:42:f5:
                    c4:15:2e:20:2d:f8:bd:52:8f:e7:6f:06:4b:fe:53:
                    18:21:ea:82:bc:f9:9a:0f:7e:d4:02:3d:d0:e7:51:
                    73:63:d8:49:0f:3e:e5:57:d0:fc:99:b8:08:c3:35:
                    83:93:74:c8:1b:27:47:73:54:bb:29:55:6a:3e:da:
                    83:1f:50:26:57:8e:da:79:e1:12:89:d5:50:25:c5:
                    43:a5:f7:33:1c:cc:b1:0a:92:e2:d2:0e:c2:82:31:
                    fa:16:63:27:84:84:83:5c:73:49:a5:e8:21:f6:51:
                    b9:a9:04:2f:d7:ee:a6:a7:3b:c9:c6:3c:e3:ed:ff:
                    07:3d:6a:89:ef:59:4a:46:4c:4b:c5:85:59:cd:0f:
                    aa:55:c3:30:5f:9d:c7:13:49:d8:fb:c8:65:c2:03:
                    1e:8c:62:72:98:c8:34:1a:72:2d:2c:78:8f:c8:c9:
                    94:24:3c:47:d5:d4:53:a5:b0:16:09:47:2f:6a:a9:
                    20:06:92:b2:57:a4:1e:7b:23:2e:ba:ab:7d:fb:c8:
                    16:93:94:86:26:2c:3b:26:27:18:2f:23:cd:76:f7:
                    56:34:88:6f:84:96:c6:c1:a5:22:11:b8:37:1f:5d:
                    66:ee:73:56:94:14:ed:ac:9b:57:62:88:cc:f8:c5:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:47:AC:95:05:00:68:76:6D:EB:7B:3E:24:54:3E:E0:D1:86:04:46
            X509v3 Authority Key Identifier:
                keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6c:80:07:ae:28:86:ff:22:9e:37:1a:19:fe:e7:5f:d4:76:
         16:b0:42:e1:d9:24:24:d8:30:a0:87:0e:a1:03:ee:8c:ca:e0:
         6c:d1:f8:a2:5e:b8:d3:3f:65:22:6c:d8:cf:2a:0d:46:77:02:
         19:ea:a7:4f:ea:30:9d:c8:e5:d0:05:51:5a:87:2e:d0:42:cf:
         f1:8b:8e:54:0b:29:df:5e:53:b7:24:4d:94:5b:94:97:17:57:
         04:80:00:f6:b9:2a:8f:5b:55:bd:d2:86:45:3e:2b:27:93:5e:
         c9:c2:4a:e2:ec:cc:9b:c6:01:c4:a7:b4:8b:0a:3b:f8:0f:ba:
         d8:18:7e:5c:5c:dd:0d:7a:4c:60:eb:23:1e:67:75:ab:43:71:
         c1:b7:b2:94:f9:af:c2:3b:a9:fc:f5:99:52:4f:54:ef:9c:3b:
         e7:9a:2b:0d:c4:e7:c5:b1:78:55:30:f3:61:6f:6e:63:a7:ad:
         36:9e:53:76:7c:31:4a:76:14:2a:40:64:e1:18:dd:05:bd:a8:
         e7:ba:01:b7:13:70:b8:42:72:bb:00:da:c4:70:74:0a:0c:86:
         4a:38:20:51:89:a4:12:e7:0b:1b:4d:c9:18:7f:83:d2:f6:5d:
         df:ab:9f:16:dc:3f:71:07:a2:21:a1:e1:e9:1d:3c:55:43:15:
         b9:3a:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:44 2025 by rpki-client