Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
File:                     OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft (raw, json)
Hash identifier:          Mtbmxd6LXSLRsBIxV2vu3ufas/JapqqANjuud414aII=
Subject key identifier:   50:D9:94:58:51:FD:41:D6:75:83:4F:C3:73:A8:B6:EC:B7:5D:9D:18
Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
Certificate issuer:       /CN=381203337b0cd06fcfc045588f097cbc24153a75
Certificate serial:       0194C3BEB7253928DE375DFC6C954F654D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
Manifest number:          012E
Signing time:             Sat 01 Feb 2025 23:00:43 +0000
Manifest this update:     Sat 01 Feb 2025 23:00:43 +0000
Manifest next update:     Sun 02 Feb 2025 23:00:43 +0000
Files and hashes:         1: OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl (hash: ICBh+j370XBuutUy+T4GB3a716F52t8cJIDw2tE+F2s=)
                          2: e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa (hash: HGLblEw2HtaEUIxL5jALfeyy40mvJ9+sofWltk0ijmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:be:b7:25:39:28:de:37:5d:fc:6c:95:4f:65:4d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75
        Validity
            Not Before: Feb  1 23:00:43 2025 GMT
            Not After : Feb  2 23:00:43 2025 GMT
        Subject: CN=50d9945851fd41d675834fc373a8b6ecb75d9d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fd:55:2e:3f:a3:8f:5e:3b:54:b3:f1:f0:20:
                    50:0e:26:fd:36:83:15:7d:b3:02:eb:13:3a:6f:d0:
                    f5:a7:9a:14:41:ee:53:9e:2c:72:d3:0c:5f:d4:cd:
                    4b:89:79:f8:db:63:68:13:c7:0b:02:ba:ad:1c:fa:
                    e5:ba:92:01:85:d8:67:6b:49:d5:c4:04:92:78:24:
                    62:a9:d8:79:b0:69:65:eb:f9:ca:20:7b:83:03:94:
                    48:19:e3:b0:e4:1a:30:d7:2f:02:51:03:17:6d:57:
                    eb:5b:08:fc:b5:f8:96:18:11:cf:b5:4a:1d:be:66:
                    13:db:1c:53:a3:24:37:75:fe:2c:9f:75:db:ce:eb:
                    f4:ab:83:7b:cf:df:ea:bc:18:c1:51:1e:c7:a2:3e:
                    12:9b:8f:7d:cd:7d:26:34:bd:8a:21:32:a2:c8:8d:
                    74:60:5b:70:3d:33:78:27:5c:92:c7:4e:30:61:74:
                    d5:e4:84:14:16:1d:8c:b0:0b:e3:87:7e:0c:1e:40:
                    ea:fd:97:de:ef:ce:cd:de:a4:40:20:fc:49:66:1b:
                    34:03:ac:3c:26:76:e9:79:18:05:77:e9:53:22:07:
                    c7:a0:6f:22:c2:18:fd:b5:d2:a0:cc:cc:67:61:e9:
                    04:e9:eb:eb:07:c9:3c:fc:98:ac:9c:66:5c:e7:e9:
                    e7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D9:94:58:51:FD:41:D6:75:83:4F:C3:73:A8:B6:EC:B7:5D:9D:18
            X509v3 Authority Key Identifier:
                keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:98:f8:2e:fe:d5:ab:0a:5b:a6:97:68:48:8e:9c:5f:c5:d9:
         e4:a7:bf:71:ac:4d:1a:38:ae:4b:71:8f:ae:4e:97:9c:2e:a5:
         44:ad:21:68:23:6f:0f:39:bd:01:c8:bd:2f:aa:c9:37:a0:52:
         e5:a0:ad:1c:b8:6d:b0:2b:1c:88:29:d8:50:fe:61:af:c1:7e:
         6a:ea:bd:41:c7:f7:75:71:d6:9a:05:1d:9d:b6:a6:a1:6e:2f:
         9d:45:a9:3e:e7:e7:c4:58:8f:e0:85:14:0d:08:36:da:a4:ea:
         0a:95:40:67:d7:89:9b:e3:5f:c5:4e:f7:dd:f5:e9:2d:7b:bf:
         9d:e4:79:1a:4a:98:d2:49:10:93:38:70:7b:d2:d6:81:f3:05:
         23:e6:a5:35:83:6a:90:98:86:99:dd:76:ce:05:78:e0:13:b5:
         84:f6:89:f8:ae:50:11:07:51:88:3c:be:d3:ed:5b:9a:91:e0:
         ed:49:d5:e6:cb:a6:4c:78:e1:dc:f4:6f:4b:0d:7d:ff:87:c6:
         b2:c5:9d:13:57:fa:41:95:09:fd:32:ed:d5:76:33:e9:d5:39:
         21:87:ae:a0:f9:ad:21:4d:95:73:19:a2:0c:9e:67:fa:d8:9a:
         29:c7:4c:24:d9:08:60:23:bb:30:da:93:da:7c:11:04:4c:98:
         f0:69:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:13 2025 by rpki-client