Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File:                     BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier:          PPFoitSWOWmkQi6bFbYSirrsZNGYCxUSfXt8/Z/2AdI=
Subject key identifier:   C6:D2:59:E6:2E:47:CA:A7:8C:BE:FF:B7:BC:A8:95:CD:01:85:88:A6
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer:       /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial:       01951134E2E4D4542BE9BC2CC9554BC2D4C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number:          1458
Signing time:             Mon 17 Feb 2025 00:00:33 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:33 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:33 +0000
Files and hashes:         1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: /nPWM1aeDssYWmPGM6EoFM7URbLAzBwdEyLv0omtVuI=)
                          2: jLbMl-iRXo5CtEApXDgnLFSdrEQ.roa (hash: nHgsQuuO7Y9rP7+Bsj4rZpGDnYmOC1HMRfXo6zw5zbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:e2:e4:d4:54:2b:e9:bc:2c:c9:55:4b:c2:d4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
        Validity
            Not Before: Feb 17 00:00:33 2025 GMT
            Not After : Feb 18 00:00:33 2025 GMT
        Subject: CN=c6d259e62e47caa78cbeffb7bca895cd018588a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:d4:57:b8:74:6e:62:3a:21:84:4e:bd:6a:
                    a0:39:7d:d3:54:18:9d:de:a9:cf:f2:93:55:3c:fc:
                    44:d9:cb:13:b5:ba:fb:cc:38:87:3e:5a:db:f8:ff:
                    0e:a7:aa:59:cd:c3:af:8b:b6:14:e3:49:ff:e6:78:
                    18:d5:f3:d1:88:4f:e8:4c:d6:81:f8:1c:13:f2:4c:
                    51:05:1f:fc:5e:86:3e:88:c9:a7:db:b4:85:b0:c2:
                    5f:68:78:af:6f:ea:06:3e:43:47:f0:c7:d8:e6:70:
                    32:7f:1b:d6:d3:df:49:d6:ff:da:1f:48:a8:d6:6f:
                    9e:98:b8:66:b8:91:82:53:10:3c:0f:76:f8:bb:9a:
                    f0:6f:d4:51:4b:80:72:34:c2:48:67:61:d1:e8:06:
                    40:dc:92:94:2c:a2:99:86:69:75:04:28:a0:de:4a:
                    81:64:ea:db:fb:78:5b:39:61:0d:68:aa:32:60:21:
                    fc:de:d4:05:d5:d9:ce:f5:07:5f:d2:00:18:d8:be:
                    4d:a0:7c:96:b6:94:ea:51:0e:c0:c9:12:5c:82:a0:
                    e5:69:5d:f6:2c:38:c6:9f:82:d5:1b:b4:e2:fc:f5:
                    a3:3a:eb:96:cb:b1:be:15:32:43:c6:ff:39:a2:97:
                    1a:f7:09:06:55:76:96:77:93:e1:db:56:8a:1d:a7:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D2:59:E6:2E:47:CA:A7:8C:BE:FF:B7:BC:A8:95:CD:01:85:88:A6
            X509v3 Authority Key Identifier:
                keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:37:6b:8e:75:e8:49:2c:da:94:64:1d:c1:9f:cf:83:cc:b8:
         f6:25:e1:ec:ea:8e:8a:55:e4:ad:b1:0c:ee:0c:e5:ce:e6:a4:
         24:1c:42:ab:be:cd:b0:08:b8:51:d1:31:32:67:f8:8d:ce:3b:
         6c:a2:5a:93:61:35:d3:10:64:93:a7:b0:38:03:06:82:f8:01:
         b5:5e:f7:86:c6:64:75:a3:72:37:92:8f:0f:3a:f5:9d:4b:c0:
         a8:e3:5a:d7:c4:0a:b8:e5:1f:ba:0a:1a:c0:a1:08:30:0e:25:
         ed:e4:bd:c0:bc:9c:f7:ff:61:32:13:a6:40:f8:78:b1:49:cc:
         f0:d7:a1:31:e7:c5:61:21:6f:76:59:1f:d6:a6:29:a0:02:e0:
         22:77:4e:22:bc:5a:73:cd:99:4b:bc:c1:e2:b9:36:fa:49:95:
         c9:ae:3a:8e:49:e0:ef:08:08:de:e0:91:74:95:f1:e1:f2:a4:
         68:f8:43:a8:ca:a0:f8:2e:0d:41:4e:df:52:56:c4:2d:ac:90:
         0d:96:cc:9c:48:df:d4:0c:1c:ad:81:f0:9a:60:e3:35:5f:a4:
         78:a4:75:ff:17:a5:bf:fb:f4:b3:b2:d7:b3:ac:ca:fb:d2:90:
         9b:99:3c:c5:6c:ae:a0:9a:6e:b0:fe:3f:57:2e:71:77:f3:1c:
         86:f4:14:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:32 2025 by rpki-client