Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File:                     Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier:          hC8HNEG8WBP9P4CJ3AOzdLgnBN+AtDwjaBre+AiFK04=
Subject key identifier:   33:EE:D5:4F:ED:9C:59:3C:08:D3:E8:DC:4E:5B:85:D1:2D:F0:74:6C
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer:       /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial:       0195116C31312933B872300FFAF6ACFAB790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number:          0C70
Signing time:             Mon 17 Feb 2025 01:00:57 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:57 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:57 +0000
Files and hashes:         1: D1ApEIwb1kjfyIq9DKRzPBBfvvY.roa (hash: xg03oxBmRY8/OHWbSAoqzOUqsR3adUdWhS3XjYzzmwE=)
                          2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: qT2cF5OVxtWDHLMrNBIwaJbXdAQFL+llblBfgWKjtEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6c:31:31:29:33:b8:72:30:0f:fa:f6:ac:fa:b7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
        Validity
            Not Before: Feb 17 01:00:57 2025 GMT
            Not After : Feb 18 01:00:57 2025 GMT
        Subject: CN=33eed54fed9c593c08d3e8dc4e5b85d12df0746c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:06:61:12:ef:c1:d5:26:65:72:bb:38:7a:
                    75:57:f5:18:b3:63:f6:2a:88:41:8f:1b:ec:33:24:
                    38:07:96:7e:ab:ad:9b:6e:2f:7c:35:0e:31:20:c2:
                    db:97:76:0a:37:8d:2f:21:b1:1b:5b:a7:05:e6:f0:
                    54:20:b4:29:37:fb:81:6a:b6:39:6c:67:b4:aa:e9:
                    e0:cc:3f:43:a6:ab:88:37:0c:8e:cd:79:f2:77:32:
                    dc:9f:62:4b:41:6a:20:60:3a:aa:bf:c3:9e:11:64:
                    19:0b:59:08:54:54:45:d5:c3:ae:7a:d1:0b:ec:90:
                    e8:fd:48:d9:39:9e:5d:6c:90:b2:b5:67:c2:47:77:
                    e9:d9:d4:1a:9c:44:ae:b0:3a:99:11:46:90:6c:01:
                    93:fc:fa:75:7e:07:5a:70:91:60:e4:68:d8:3b:60:
                    ed:cf:84:01:50:31:6d:52:22:ef:ed:8b:b5:df:7b:
                    94:46:71:75:16:73:41:92:7d:92:4c:0a:ff:b0:b9:
                    d9:e3:79:73:82:61:72:ca:f9:9e:a3:08:bb:f1:6a:
                    53:70:5a:84:ee:f7:b0:ad:0d:e1:90:ee:47:e5:a0:
                    20:e0:30:b7:e7:18:14:0d:e0:c7:59:3a:82:62:9f:
                    55:a0:8e:17:4a:27:05:02:38:9f:62:c0:16:28:67:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EE:D5:4F:ED:9C:59:3C:08:D3:E8:DC:4E:5B:85:D1:2D:F0:74:6C
            X509v3 Authority Key Identifier:
                keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:0e:7f:75:9f:7e:d3:55:58:5e:a6:5b:bd:00:3e:5f:f4:ac:
         c6:e6:82:49:52:48:ba:29:c0:8d:57:a1:0a:4c:cd:7e:08:46:
         ca:d3:27:38:3c:d8:54:54:6a:93:6e:db:29:c6:96:34:7f:7e:
         e4:f7:8d:54:28:64:10:df:04:19:35:99:04:89:e1:42:99:3f:
         08:70:f1:b9:1d:6d:e8:c8:69:de:7c:d6:92:9d:35:a1:a5:af:
         f7:3b:5b:87:03:bf:f4:12:d6:c8:1c:f1:18:ee:aa:16:47:a4:
         13:23:06:bf:7c:ae:cf:ca:16:7d:4a:c0:a0:ec:2f:db:e9:4e:
         2a:5b:9d:83:6b:a6:c6:d9:98:4e:9d:ee:ea:9d:c1:ae:c5:6e:
         e3:1f:58:0c:b6:68:97:07:4a:0f:72:c4:b9:f4:8a:56:93:4b:
         aa:b1:77:03:8b:7f:a7:3e:49:e9:f2:99:eb:f0:ff:60:9f:53:
         99:a9:bd:69:9a:d5:c2:10:fe:19:68:95:a0:e2:4c:9f:ac:9e:
         f0:ac:69:8b:9b:39:a5:26:24:3c:f4:64:02:3a:4a:a4:8b:c0:
         14:ed:8f:70:dd:ef:93:3f:19:30:df:35:77:a6:e7:d3:d3:b6:
         14:92:02:c0:f7:57:a9:8d:45:a3:9f:54:fa:04:1b:6c:6b:f6:
         fa:4b:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:40 2025 by rpki-client