Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
File:                     DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft (raw, json)
Hash identifier:          2ukIywcv2bOAEhvMCivjLf8vhlc0aiHlWBU+GEEcheU=
Subject key identifier:   91:F4:11:3C:7B:CA:44:84:C8:A3:D3:99:C6:B6:C6:95:A1:05:17:F0
Authority key identifier: 0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47
Certificate issuer:       /CN=0dd33ca83affbb801172d5094b00e06856e6f547
Certificate serial:       019510C75E3854BF9DD94A250B5B2E50B0CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
Manifest number:          13C3
Signing time:             Sun 16 Feb 2025 22:00:55 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:55 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:55 +0000
Files and hashes:         1: DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl (hash: UA/E54rZkeNkfhso8rDCNpy3/ZciMwpqdvBpr5KYbOA=)
                          2: fvo32ZlXLNUWfNKLhRu-uClyC2U.roa (hash: bzkWT3EH+ccZpwHViIEHvMRRGrNUoXsGOv/sbjZrV0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:5e:38:54:bf:9d:d9:4a:25:0b:5b:2e:50:b0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd33ca83affbb801172d5094b00e06856e6f547
        Validity
            Not Before: Feb 16 22:00:55 2025 GMT
            Not After : Feb 17 22:00:55 2025 GMT
        Subject: CN=91f4113c7bca4484c8a3d399c6b6c695a10517f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:09:ee:48:b8:81:5e:cb:36:29:d8:8d:49:37:
                    f3:a8:32:a9:00:fd:0f:f6:11:cb:ac:81:6a:33:c4:
                    ac:cf:83:ee:0d:cb:50:6b:0b:3e:ec:54:3c:ad:d5:
                    de:63:c6:d8:d8:a4:52:2f:84:52:1a:5a:5c:7d:3c:
                    5d:42:87:5f:1f:f8:6b:94:61:e3:af:53:43:36:fa:
                    77:76:1c:ee:cf:24:12:e2:a8:88:bb:8d:24:5c:16:
                    9a:45:05:c9:e4:3b:62:3b:2f:82:50:55:79:ec:75:
                    d4:7d:f5:a2:2d:31:01:78:7f:a0:9d:da:32:de:a8:
                    11:6f:be:56:14:fb:fc:17:84:57:5f:1d:b0:58:f2:
                    63:a6:a1:59:4a:76:aa:f1:40:3e:cc:a9:e2:83:6f:
                    9d:ac:f7:dc:c3:89:d6:9e:e2:22:69:0a:0c:dc:0c:
                    af:d8:46:7e:27:64:88:cd:79:18:4a:01:83:47:eb:
                    bc:e1:ca:26:f1:7d:3e:1e:a8:cb:b8:87:49:ff:74:
                    10:51:19:f2:e4:a0:37:64:bc:fe:b4:3a:ee:f9:e0:
                    7a:c0:ad:5e:61:d1:8c:8c:b5:89:9b:0a:8c:b0:06:
                    8c:3f:69:96:6b:e7:ed:4d:e4:fe:51:e3:c4:29:03:
                    2c:c1:95:69:3c:09:db:46:11:49:0f:19:82:fe:4d:
                    a5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:11:3C:7B:CA:44:84:C8:A3:D3:99:C6:B6:C6:95:A1:05:17:F0
            X509v3 Authority Key Identifier:
                keyid:0D:D3:3C:A8:3A:FF:BB:80:11:72:D5:09:4B:00:E0:68:56:E6:F5:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdM8qDr_u4ARctUJSwDgaFbm9Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0fcfbd-2790-4850-bafa-890eb2266657/1/DdM8qDr_u4ARctUJSwDgaFbm9Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:17:b6:84:f2:73:35:55:dc:e0:36:f0:06:73:30:b9:f0:6e:
         08:f3:f4:a3:1e:00:09:65:b1:c0:e8:68:99:b7:74:c1:09:c4:
         10:8f:8f:f6:95:d1:31:ab:de:62:0f:2f:d6:9a:0d:ee:b2:22:
         4e:bf:8b:0c:52:63:66:4b:60:3f:9a:91:c0:b0:af:4c:3d:30:
         48:69:83:01:51:31:79:da:d0:99:81:1f:ac:62:3b:26:88:21:
         35:ff:f4:f3:24:6d:c4:44:32:15:d7:2e:53:4e:e3:e2:4b:1c:
         89:2e:46:41:da:95:f2:4c:ba:e0:59:b1:ca:21:dc:a0:aa:05:
         79:8b:4c:90:62:23:e1:d4:3e:7f:33:ce:5d:06:2c:57:2a:a4:
         0e:6e:21:11:c9:05:62:b9:75:fb:0d:58:fd:06:90:e6:7f:f7:
         e4:99:72:c2:86:ed:15:37:f1:d0:3c:fa:6d:32:2a:cd:51:be:
         68:1e:50:01:5c:73:08:a0:1b:db:5c:29:3d:a4:80:81:aa:7f:
         ca:af:bf:81:10:6e:9a:0c:e8:7b:ac:e2:de:80:84:f8:ee:be:
         5c:b8:71:b6:8e:00:20:4e:ff:5f:74:83:f4:79:d3:f4:de:1b:
         f6:ea:e6:81:b8:ca:aa:65:b0:23:2d:03:aa:99:57:eb:a2:88:
         c6:cc:b0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:20 2025 by rpki-client