Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
File:                     Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft (raw, json)
Hash identifier:          TutHhrUvoAkrWFF+moQlc90hXDWMXyTlgbONasL8Q4I=
Subject key identifier:   A9:65:A4:A3:16:B8:2B:15:B9:3A:E2:78:EC:EB:54:79:7F:77:6D:36
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Certificate issuer:       /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial:       019512107C5DD8C0B9EB5FC02D9C5FD01629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
Manifest number:          145B
Signing time:             Mon 17 Feb 2025 04:00:25 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:25 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:25 +0000
Files and hashes:         1: A6mU_fy2dvWAW9y9y6qPym3VUYU.roa (hash: B8MQ+q91TtenzRFP6rUUzrDHFdogGVA1RdvfKnJNkfY=)
                          2: CEH26SsbgBXa-XRDjPR4dutITU8.roa (hash: 45+vY3NG1v7bfBUPDZYQRwEM4pvEI9SIrsWhw3tfGJE=)
                          3: GCgFGIXy9ORAgY5JZtgQnYO84po.roa (hash: uiQ3pF8ZQYiS46PnIMk3tsXyihLlgICHZ4OO1bUgWLU=)
                          4: Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl (hash: v/jOpIPd1C4dQcHJ5csillZGA43V3hPFQf2vTOTi94c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:7c:5d:d8:c0:b9:eb:5f:c0:2d:9c:5f:d0:16:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
        Validity
            Not Before: Feb 17 04:00:25 2025 GMT
            Not After : Feb 18 04:00:25 2025 GMT
        Subject: CN=a965a4a316b82b15b93ae278eceb54797f776d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:e2:7a:94:53:48:9c:36:75:b8:97:10:db:
                    d9:c0:67:12:59:3c:6f:b1:2d:42:58:06:02:40:e1:
                    4a:a6:f7:a3:66:fd:40:93:b5:9f:c7:a3:5f:4b:d4:
                    27:98:b3:f7:e5:4c:e3:4c:68:72:12:52:d4:a2:2f:
                    e1:00:c5:b7:c6:e0:a7:af:89:2b:00:0e:54:8d:cb:
                    66:c1:0b:02:78:a6:b8:82:c7:8d:4e:b4:9e:93:cf:
                    c8:f5:97:4e:2f:c4:c5:15:55:63:05:98:d0:bb:9b:
                    aa:a1:84:72:28:b7:ec:14:43:10:07:cb:d2:91:f7:
                    82:e6:e7:29:01:47:44:c5:bc:7a:30:85:82:e8:19:
                    6f:ff:b9:74:6e:e3:88:4d:c8:c1:e6:9c:a0:cb:6e:
                    b4:d7:4d:6a:c1:de:5f:a2:d3:86:66:c4:e7:af:27:
                    28:df:72:b4:46:c6:b4:30:b4:c4:e5:5f:4e:78:b4:
                    16:a2:95:4f:70:22:04:56:c6:3d:df:73:bc:cc:42:
                    ed:81:54:67:13:c9:19:48:a4:dd:47:ad:b8:65:20:
                    4e:82:c9:c4:60:95:14:5b:c4:91:84:5d:bd:88:77:
                    3e:3b:65:d1:67:22:a4:e5:0c:71:26:aa:22:83:c5:
                    25:be:e5:21:26:3e:54:c7:41:da:3e:a3:3e:9a:14:
                    4f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:65:A4:A3:16:B8:2B:15:B9:3A:E2:78:EC:EB:54:79:7F:77:6D:36
            X509v3 Authority Key Identifier:
                keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ea:78:1e:e6:d7:ff:97:6f:1f:cb:6e:ae:ce:d5:0f:86:73:
         1d:30:db:3e:9b:44:a3:a3:a2:46:5f:5d:ad:ae:59:99:a7:31:
         fa:e3:42:dc:3e:78:b1:77:1c:d6:ad:6b:0e:80:fc:d1:72:3d:
         23:c6:de:eb:0c:ca:3f:70:53:b8:cf:45:51:09:dc:54:a0:02:
         94:a4:75:f9:bd:20:66:79:0b:1b:df:eb:3b:c3:05:2e:41:53:
         d2:2e:dd:35:e1:0a:86:32:78:ae:6a:f6:9f:a4:29:62:8d:17:
         2f:4f:e4:e8:f1:cc:55:e8:aa:10:b8:2c:60:3b:ad:05:10:6b:
         f0:28:ab:11:b2:26:aa:11:c8:07:55:09:88:60:91:f3:77:3b:
         59:b2:c7:9b:8f:65:4b:ab:0a:c9:19:1c:01:f1:27:57:ec:b2:
         86:8b:c0:76:69:82:cf:3b:a7:74:c3:78:5e:df:17:a4:10:f5:
         fc:31:b3:bb:cc:da:20:2a:78:bc:6a:d2:ad:ee:57:7d:62:93:
         91:48:b0:28:64:d6:fc:36:25:b7:13:0c:22:b0:b7:54:6c:08:
         e7:55:72:85:fa:23:ba:87:8a:63:6f:f7:2e:14:7c:ca:da:d8:
         4c:3c:c1:de:61:58:cc:6b:9d:f8:d9:1b:2d:cd:28:20:d4:f5:
         0f:34:ab:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:38 2025 by rpki-client