Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
File:                     OEzdzXTQQilYPSwr7tBz4AlrozU.mft (raw, json)
Hash identifier:          cBPxCGeaelDwmUA5oTNRgu9etVkYIsayzo8ZR2ccElI=
Subject key identifier:   14:51:3D:9C:5F:45:73:1F:58:5A:97:05:51:AB:6E:39:4A:89:86:FC
Authority key identifier: 38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35
Certificate issuer:       /CN=384cddcd74d04229583d2c2beed073e0096ba335
Certificate serial:       0194C387A36E4F17CD847D64121AAA78689A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
Manifest number:          0480
Signing time:             Sat 01 Feb 2025 22:00:33 +0000
Manifest this update:     Sat 01 Feb 2025 22:00:33 +0000
Manifest next update:     Sun 02 Feb 2025 22:00:33 +0000
Files and hashes:         1: OEzdzXTQQilYPSwr7tBz4AlrozU.crl (hash: lU1iI/l7uwIWX/2l4JyS3ITpCRdzpb83611V8liRGx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:87:a3:6e:4f:17:cd:84:7d:64:12:1a:aa:78:68:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384cddcd74d04229583d2c2beed073e0096ba335
        Validity
            Not Before: Feb  1 22:00:33 2025 GMT
            Not After : Feb  2 22:00:33 2025 GMT
        Subject: CN=14513d9c5f45731f585a970551ab6e394a8986fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:92:2b:34:cb:fb:18:13:c3:38:65:8f:19:
                    5f:5a:cb:a0:82:de:b6:90:08:32:44:83:bc:c1:50:
                    ed:e2:05:d2:ca:97:3b:a3:11:9f:62:29:3d:ce:79:
                    53:84:6c:f3:fa:0a:ba:b5:7c:4f:d3:15:f5:7f:d3:
                    31:a3:2b:28:e0:fc:46:62:3a:14:1e:80:85:83:ae:
                    28:6f:91:e4:ce:7b:08:31:ff:8e:94:f0:b1:05:c3:
                    0b:66:65:51:00:83:0d:50:81:e5:3f:5e:40:66:8a:
                    49:5d:22:e5:10:ce:7c:ab:a3:8d:3c:32:44:8e:a9:
                    7d:49:95:a2:6a:25:d8:71:99:e5:5c:c5:50:ac:0e:
                    3f:ee:b6:20:cf:d4:c1:75:b4:bc:a0:ca:3f:f0:0e:
                    46:5a:17:40:3e:9f:e1:bf:5f:fa:27:a3:34:d2:df:
                    ec:01:e7:41:4c:b7:d9:7d:c0:54:f8:0b:fa:a8:08:
                    6b:a5:24:97:48:0e:f9:02:a3:9e:81:44:b1:20:fc:
                    81:dc:00:04:16:30:f4:3e:eb:62:63:68:3c:0a:c8:
                    37:3a:61:b8:f1:db:e8:47:82:77:ba:fc:e1:a2:84:
                    2c:1d:3c:74:5f:e5:9a:2b:1d:56:e1:d2:0d:0e:54:
                    51:6e:31:b8:03:e2:1a:a1:fc:a5:78:3c:1f:ed:00:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:51:3D:9C:5F:45:73:1F:58:5A:97:05:51:AB:6E:39:4A:89:86:FC
            X509v3 Authority Key Identifier:
                keyid:38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:05:ac:a2:11:cf:32:6f:3e:19:d3:20:82:4f:71:56:cb:5d:
         a7:8f:49:81:b5:79:7b:a7:17:75:31:bb:41:17:68:a6:9c:d7:
         b3:b0:51:c6:46:7d:9b:c1:59:75:c4:53:54:dd:19:c7:83:9d:
         52:89:2e:65:70:07:37:3f:ed:cd:ec:25:5a:7e:3c:4d:52:8a:
         eb:a0:9c:58:bb:11:6f:44:60:a9:d2:50:c0:86:f4:06:fe:a1:
         d8:20:2f:87:11:ba:cd:89:25:f5:9f:50:b0:a5:85:cc:15:08:
         e2:4d:30:49:29:cb:0f:d1:f4:72:98:44:81:96:02:64:ad:9a:
         6a:7a:9d:56:83:d1:fb:14:7a:fe:99:fb:e3:b0:f6:24:ea:07:
         a1:88:9f:b6:c7:cf:17:c9:ad:f0:07:ac:a6:f1:86:49:65:7a:
         74:1e:5b:3c:c3:cd:df:98:12:d4:ed:63:42:46:21:86:e5:1b:
         32:bf:f1:5b:0a:95:e0:b7:89:e4:61:df:a3:2d:19:c0:f6:36:
         b7:f3:49:6d:39:e9:16:7b:79:c3:05:65:e9:47:8b:d1:35:65:
         47:f0:94:37:c6:3d:8e:a2:c2:6c:39:eb:2f:1e:48:f9:03:7e:
         21:0d:d9:12:3e:b7:d3:86:01:dd:0b:a8:1c:9b:0e:36:ab:dd:
         87:51:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:59:00 2025 by rpki-client