Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
File:                     M6Udf_AtIfrBk65K7R8MOVbORRU.mft (raw, json)
Hash identifier:          LdMUtQTt5ULuABBeEn7wbGzYubAaE6s7gLuGS16AIkU=
Subject key identifier:   08:FE:39:54:5C:7B:02:F3:88:F6:F3:A2:12:93:89:57:05:92:BA:58
Authority key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Certificate issuer:       /CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Certificate serial:       01961245A53C49931CB2EA9F33EF4006C99C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
Manifest number:          146D
Signing time:             Mon 07 Apr 2025 22:01:16 +0000
Manifest this update:     Mon 07 Apr 2025 22:01:16 +0000
Manifest next update:     Tue 08 Apr 2025 22:01:16 +0000
Files and hashes:         1: H2UoMEQTfVfxYbD6DFEWnWSxzqY.roa (hash: oJCJ/WCUnFQh0GodJuWi0NgjkG4tPt6myP/qxDdyB6E=)
                          2: M6Udf_AtIfrBk65K7R8MOVbORRU.crl (hash: QXPyIjpfYJIlMMkpE/Ox8xZptbdMsLTENNxZI50iwiU=)
                          3: OcsKAT2NPT0ZOF4-_8aYdFedfrQ.roa (hash: hRZG/6yJi8ntHxlEybLhU4Ft+uUUaPLYRTeNmVj2zdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:12:45:a5:3c:49:93:1c:b2:ea:9f:33:ef:40:06:c9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
        Validity
            Not Before: Apr  7 22:01:16 2025 GMT
            Not After : Apr  8 22:01:16 2025 GMT
        Subject: CN=08fe39545c7b02f388f6f3a2129389570592ba58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dc:b7:23:48:71:4c:0d:b9:c4:19:4f:d0:3d:
                    8e:71:bd:e9:43:5d:cd:e6:50:b8:92:d3:2e:70:4b:
                    fb:9c:8b:8a:cc:12:70:3d:b1:43:f8:73:5e:3c:9f:
                    bb:d4:3e:72:24:cf:68:8c:98:6d:60:b3:8d:18:2c:
                    bd:46:48:23:d8:1e:f1:0b:eb:6e:fd:fa:81:c1:26:
                    92:e9:a7:85:62:ef:86:75:fe:69:29:d0:d2:e2:ea:
                    7c:49:e3:30:66:53:f2:fc:ec:35:f2:90:43:3e:98:
                    c9:10:e9:b1:4a:22:eb:76:af:64:3c:d2:26:55:a8:
                    b1:a2:e8:98:7e:fd:b4:83:58:8f:f8:88:c0:b6:0f:
                    36:78:a1:f5:3b:e4:01:8e:88:38:72:b7:f5:b5:12:
                    7b:a2:ed:3d:94:cc:79:b5:78:cc:94:5d:93:cd:f7:
                    a7:e3:db:5c:e0:c2:98:6f:08:75:17:75:fc:d1:0c:
                    07:32:12:64:ea:61:3e:3a:c4:71:fe:75:77:02:74:
                    d9:a5:2b:a9:c9:4e:17:5f:78:b7:64:ad:53:60:91:
                    71:e5:f2:e5:51:c5:fa:e4:3f:d5:ec:ca:09:2b:9f:
                    98:e0:a0:09:a6:d6:a4:99:59:89:c2:6c:d3:4c:02:
                    db:55:ba:15:c3:c7:26:c2:12:ef:00:bd:97:c0:a2:
                    c5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FE:39:54:5C:7B:02:F3:88:F6:F3:A2:12:93:89:57:05:92:BA:58
            X509v3 Authority Key Identifier:
                keyid:33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3f:50:32:86:64:d2:72:bc:7a:83:b6:74:7b:86:eb:3c:64:
         14:1e:4d:1a:f9:2e:d9:c6:5a:47:85:eb:95:78:b0:1d:fc:c8:
         ce:3d:c2:fa:e2:aa:b2:4e:21:65:01:a1:e2:01:d4:df:67:8e:
         42:52:fd:0b:f5:d1:6c:87:6f:74:74:43:5f:09:68:04:4f:3d:
         8b:0e:a1:f5:ee:73:52:92:5b:87:10:b8:3c:af:e1:80:f2:83:
         70:56:ac:9b:be:b8:0f:03:06:85:e4:bd:93:f0:27:77:87:17:
         b1:5a:7c:8b:62:fe:cd:63:ac:0f:40:1b:ef:83:eb:65:45:2a:
         53:b4:11:9e:d5:e8:77:11:15:03:be:87:ed:65:8b:80:d6:65:
         67:a6:8e:55:3a:23:bc:82:50:f8:a6:3f:17:7f:7f:70:d7:b5:
         b8:87:80:e1:d4:97:86:2a:86:eb:1c:26:bc:70:42:a3:33:92:
         97:e2:fd:7a:f4:a1:6b:8a:e9:19:b0:48:0a:f8:67:48:7a:6d:
         dc:56:9b:08:37:e2:e3:81:62:d7:17:86:57:9a:dd:81:fb:12:
         71:69:84:60:f1:0e:bd:c5:2c:6f:32:24:10:3c:72:57:fd:40:
         92:f1:ed:bc:e5:c7:ac:4e:20:06:64:7c:19:25:27:d9:2b:4a:
         c8:85:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:57:35 2025 by rpki-client