Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
File:                     moBTvNLE2KeioyXit0ZBZqXkjd0.mft (raw, json)
Hash identifier:          MlAza1W4nyMEAJ3bI1T286F7yJ3lVOe7h0Qv6R7zVLI=
Subject key identifier:   03:D7:41:F9:30:D6:7A:45:B3:FD:22:C5:46:A1:B1:AE:E3:C7:45:A5
Authority key identifier: 9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD
Certificate issuer:       /CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
Certificate serial:       0194C350BA02A6579003A13D582AD7600D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
Manifest number:          0EB9
Signing time:             Sat 01 Feb 2025 21:00:35 +0000
Manifest this update:     Sat 01 Feb 2025 21:00:35 +0000
Manifest next update:     Sun 02 Feb 2025 21:00:35 +0000
Files and hashes:         1: cxA-RyOMLkq935v_LceKQwYPwHs.roa (hash: HnGDMBYysRSj3AGQ0kR7dSJMblTeuNonvUsGSEcjwQ4=)
                          2: moBTvNLE2KeioyXit0ZBZqXkjd0.crl (hash: AGSKpiE8C/tIrN9qXIRNmILJs7aQQz2RmtXwqjSCgeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:50:ba:02:a6:57:90:03:a1:3d:58:2a:d7:60:0d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8053bcd2c4d8a7a2a325e2b7464166a5e48ddd
        Validity
            Not Before: Feb  1 21:00:35 2025 GMT
            Not After : Feb  2 21:00:35 2025 GMT
        Subject: CN=03d741f930d67a45b3fd22c546a1b1aee3c745a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:ad:67:3a:e3:a7:51:75:0f:02:55:c2:6a:
                    ff:79:a7:8f:bb:1a:3f:0c:d5:27:96:56:e3:7a:21:
                    12:1d:78:aa:6f:64:8b:cd:83:7e:ab:a4:50:a1:4d:
                    07:85:70:63:7c:de:9e:9b:60:d2:d6:4d:93:32:ce:
                    01:8e:21:dd:ce:42:ce:d1:bd:d6:aa:ab:a9:f8:80:
                    e2:9c:88:b0:77:5e:d0:04:b1:01:ad:d0:73:1e:49:
                    87:04:bb:9b:fc:1a:3a:4c:45:1a:c5:81:7f:d6:aa:
                    54:3d:15:e3:4d:21:a4:74:4e:16:a6:8f:36:b3:a3:
                    18:fc:9f:54:e6:ec:94:28:de:a8:9a:de:92:7d:62:
                    21:ab:e8:8c:3d:23:d1:0b:b6:73:cd:f8:62:48:fd:
                    de:b3:04:fd:62:a5:da:f2:2a:da:71:e5:a7:9c:f3:
                    5f:f3:09:0b:41:25:09:48:9e:51:94:cc:ca:18:06:
                    19:cd:85:2e:0b:8c:d0:cb:58:96:d7:41:93:bd:1e:
                    4a:3b:5e:e4:9a:82:00:95:20:4d:53:b3:0c:5d:db:
                    3f:17:ad:14:a8:a8:a4:2b:ac:ec:6a:6c:bd:44:59:
                    ea:a2:b9:72:99:91:de:4e:96:41:53:fc:e1:dc:31:
                    a0:bf:e6:b1:2d:6a:62:9d:53:90:f9:c8:1c:f6:0a:
                    3c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D7:41:F9:30:D6:7A:45:B3:FD:22:C5:46:A1:B1:AE:E3:C7:45:A5
            X509v3 Authority Key Identifier:
                keyid:9A:80:53:BC:D2:C4:D8:A7:A2:A3:25:E2:B7:46:41:66:A5:E4:8D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moBTvNLE2KeioyXit0ZBZqXkjd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d96189-eee1-4e9f-9d60-95e8d8293098/1/moBTvNLE2KeioyXit0ZBZqXkjd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:59:80:49:2e:6b:c0:dd:ad:fb:45:16:e2:bb:26:da:ce:
         36:bc:a0:cd:40:c2:f4:1e:a6:1a:6e:4c:86:20:0b:e0:c7:20:
         be:03:a2:78:f8:7a:be:b0:c6:59:07:6a:6e:0d:e1:01:03:51:
         60:b1:df:97:12:00:a4:f8:97:2f:e7:68:d9:7f:63:9e:7d:fa:
         98:8c:c0:a0:6b:61:42:a3:ef:22:88:f2:2d:91:61:ba:81:7a:
         3d:08:af:a4:03:2d:aa:5b:f9:b5:18:f3:7c:52:2e:d4:14:58:
         0f:f4:59:2d:b6:11:56:c3:36:7a:f8:a4:7c:c8:30:30:bc:ef:
         cf:43:88:3d:22:2b:45:50:0d:a5:73:db:c3:6a:91:12:55:35:
         f6:38:4e:c3:44:26:d7:fa:99:a0:0b:c2:51:db:17:dc:88:30:
         22:bb:a6:b7:d4:19:5b:23:bd:48:de:d1:6a:c6:1b:5b:fe:16:
         60:c5:5e:4c:8a:8b:6c:b0:20:07:06:dc:79:66:75:f0:bc:0b:
         37:0e:51:71:99:ab:49:e3:34:fc:69:54:ca:45:b0:6c:70:1c:
         4b:8a:87:87:1d:2f:43:2e:15:57:8a:51:94:9b:d4:6a:19:07:
         a5:1c:44:9d:4e:e3:d4:3e:23:d7:3d:09:96:e3:9c:99:86:c6:
         81:64:49:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:01:49 2025 by rpki-client