Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File:                     0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier:          NMtZGUhOeM3lG2lulpNLq9tWGOIft7aDr1qpxLPbn7A=
Subject key identifier:   28:B2:B5:42:F0:28:D4:FC:3E:39:98:EA:A9:B1:9A:65:50:C7:A0:68
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer:       /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial:       01951134EDC99D255C166CCDC855B22B07EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number:          110A
Signing time:             Mon 17 Feb 2025 00:00:36 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:36 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:36 +0000
Files and hashes:         1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: Ohm04pWG8pZ653ec10q7JoIvXy8DSK8c7hY9iT2GwxA=)
                          2: AyldtAoWafPHTkmACDxst6jxsP8.roa (hash: 5JuPcS4QOkaO/Jt7b79o9DhsMUfsXTNZilUz8aQXzEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:ed:c9:9d:25:5c:16:6c:cd:c8:55:b2:2b:07:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
        Validity
            Not Before: Feb 17 00:00:36 2025 GMT
            Not After : Feb 18 00:00:36 2025 GMT
        Subject: CN=28b2b542f028d4fc3e3998eaa9b19a6550c7a068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:de:29:eb:ba:8d:49:f2:6c:56:ba:55:24:
                    24:d8:e6:64:32:4f:4c:15:60:a0:61:9d:33:3f:da:
                    0f:40:b2:d6:0d:d7:e5:fd:ba:07:88:e2:96:8d:0b:
                    ab:4a:89:5c:e1:af:8a:50:ec:4d:a6:70:b7:32:01:
                    c8:00:6d:0e:6a:25:ea:a1:98:06:f8:91:54:f5:28:
                    60:b8:b6:b1:6a:3d:ba:af:92:ea:82:65:e5:d0:b1:
                    fe:4b:06:08:a4:42:3b:29:5d:75:97:76:2f:8f:82:
                    85:38:fc:39:6d:81:6e:4c:70:fc:f3:27:15:71:f6:
                    67:e3:10:85:10:49:6b:b4:9f:28:c1:d5:78:59:95:
                    d3:88:2f:0f:dc:14:2d:16:a1:fe:18:ac:e5:f0:ce:
                    f4:c9:58:8d:d6:47:f7:6b:32:8d:a8:54:79:62:20:
                    6c:ce:d0:bb:c7:38:a3:61:3a:d5:62:8f:a3:dd:d1:
                    13:fc:30:03:9e:0b:9d:b4:c0:75:ca:be:59:bd:5a:
                    6d:dc:14:eb:a7:6d:c5:2e:e4:dc:3b:12:3b:b0:99:
                    67:2d:cc:76:9d:a7:67:3c:fe:19:2e:76:51:57:e2:
                    40:f3:6b:30:ce:a4:bd:69:91:21:ba:3b:22:16:1f:
                    e1:e0:e3:d3:4b:86:c1:70:bb:42:45:94:07:89:66:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B2:B5:42:F0:28:D4:FC:3E:39:98:EA:A9:B1:9A:65:50:C7:A0:68
            X509v3 Authority Key Identifier:
                keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:eb:91:99:dd:9e:d9:10:64:a4:ac:40:ee:59:78:23:d1:d7:
         31:54:f2:18:c5:5d:ad:1d:42:a3:a4:ef:f5:2e:e2:69:2d:14:
         2d:fa:7d:a5:7b:ac:e9:12:be:60:62:ed:50:c4:11:0d:5a:e5:
         0a:fc:bb:50:92:a6:d2:5f:fb:19:bb:0b:15:bd:76:f8:19:ec:
         18:4c:b4:62:59:49:67:69:f1:1e:e5:69:24:ed:e1:f6:11:2b:
         71:16:67:e7:3e:c2:6d:fa:2a:be:24:dd:2a:12:3c:57:57:5c:
         ed:39:99:23:a3:73:5c:84:74:69:72:26:26:91:ca:22:21:8e:
         41:19:a8:35:4b:13:6d:d7:f3:f3:4f:71:52:02:bc:fb:42:ba:
         14:5f:db:41:a9:f9:69:f4:3b:46:f1:42:be:5f:16:fe:86:15:
         38:1e:12:38:ea:e8:df:3b:43:a2:e8:0d:3f:94:c3:09:aa:b8:
         8f:41:4e:26:34:e0:60:96:b3:4d:85:4d:61:05:da:11:f2:9b:
         97:26:1c:b7:50:4c:43:2d:ac:4f:f1:11:e0:8b:4d:5d:2e:08:
         a3:92:9c:5b:c9:f5:a6:6f:7a:bf:18:a5:0f:08:f7:7d:47:e6:
         f8:0f:77:27:2f:3e:d1:2d:35:48:48:2c:f1:19:54:ec:ca:0f:
         80:aa:57:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:44 2025 by rpki-client