Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
File:                     m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft (raw, json)
Hash identifier:          G9jFX6nIyEaOCxmK2W30Q2ylGe1Pta7B91PAqMVyp3w=
Subject key identifier:   62:73:8D:A3:64:27:1F:D1:24:6F:06:17:9D:77:92:C1:64:7B:C4:61
Authority key identifier: 9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
Certificate issuer:       /CN=9b868a76f5b4748e1e4bba834701a68577c63462
Certificate serial:       01958BF24B9936279BEC305D4F813096A1AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
Manifest number:          1496
Signing time:             Wed 12 Mar 2025 20:01:06 +0000
Manifest this update:     Wed 12 Mar 2025 20:01:06 +0000
Manifest next update:     Thu 13 Mar 2025 20:01:06 +0000
Files and hashes:         1: El3AzP_du9cgKwe4cAMY6ohro7o.roa (hash: unokVLZGXnsuik1b2lzzTnShCOzK3B+jbNl72+ddVqo=)
                          2: m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl (hash: 0YaXQB2kR+xBaGH7BPwVB/x7WRImxt+YsDyqmok3mlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:f2:4b:99:36:27:9b:ec:30:5d:4f:81:30:96:a1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b868a76f5b4748e1e4bba834701a68577c63462
        Validity
            Not Before: Mar 12 20:01:06 2025 GMT
            Not After : Mar 13 20:01:06 2025 GMT
        Subject: CN=62738da364271fd1246f06179d7792c1647bc461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:5a:a6:36:4f:9c:71:f4:e2:c7:bc:31:48:
                    bb:a7:3c:ea:b9:79:3b:97:24:dc:a1:42:18:35:89:
                    61:6e:aa:1b:ed:4a:35:b8:4d:d4:88:7b:e4:46:8a:
                    75:5f:82:ba:ea:9b:e9:1f:b9:71:3b:48:41:cc:cf:
                    7c:c2:8f:f2:b5:1e:da:b8:b2:90:03:f4:d9:b4:97:
                    1a:cb:54:90:a5:70:34:a3:d1:eb:27:40:86:39:4e:
                    c2:06:d0:c2:2f:48:2d:50:39:fe:80:58:7c:65:f1:
                    00:04:0d:d9:c3:ec:43:1f:ff:23:66:6c:20:c3:e2:
                    17:72:60:7f:b3:a6:94:5b:98:3e:8d:4e:03:80:55:
                    dd:d6:28:7d:53:59:df:cd:f8:d9:32:5a:16:5d:0c:
                    bd:b3:8b:e3:c1:63:89:cb:ea:bf:d2:71:29:dd:6f:
                    ba:a9:b9:e0:1d:96:79:b4:89:d2:73:38:65:4a:42:
                    16:11:e6:cc:7f:f3:1e:2b:27:e9:16:43:56:2e:2b:
                    c2:e7:e6:d9:65:1d:b5:38:36:5a:c5:84:77:6d:6a:
                    2a:af:5c:9c:32:97:14:0b:f4:82:ca:96:72:bf:c9:
                    e7:20:35:2b:b9:1c:8c:87:1c:cc:32:d1:b6:ac:ac:
                    f3:71:02:8d:19:7c:74:a8:b0:18:5b:84:07:57:12:
                    53:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:73:8D:A3:64:27:1F:D1:24:6F:06:17:9D:77:92:C1:64:7B:C4:61
            X509v3 Authority Key Identifier:
                keyid:9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:9b:b6:74:a2:aa:82:ac:97:06:4f:da:d6:66:7d:87:f0:e1:
         5b:11:fd:8e:f8:3a:38:02:54:2b:a6:c0:bc:02:1a:b7:96:25:
         b6:85:a2:6b:01:b1:d6:ab:30:1e:a7:3d:df:40:b8:f5:25:c9:
         06:65:e3:5d:74:a0:d8:3e:4e:82:20:2a:6d:bd:31:c3:19:db:
         ca:11:58:07:85:b9:fe:b4:7b:64:e4:64:e4:48:e3:4a:2d:84:
         4c:fa:82:d6:28:5a:00:07:70:5c:31:1a:15:6c:69:07:e8:22:
         fb:fc:dc:45:6b:a0:24:b0:84:bd:87:55:20:10:d1:4e:99:31:
         b0:17:ad:78:95:2a:ff:ff:8d:68:b7:60:a6:f4:cc:d9:e7:72:
         58:82:ec:72:d5:45:1b:1a:30:ff:cc:6e:72:95:61:74:79:d5:
         8f:93:b6:7b:a9:b8:8a:7d:7d:27:7c:fd:01:7a:31:91:eb:35:
         6a:6a:1c:57:08:79:2e:b0:14:7f:4d:96:84:46:c4:7b:12:ab:
         62:ff:1b:4f:5a:af:7d:eb:76:f9:47:a0:34:f1:b9:9b:34:87:
         d0:98:e8:cd:bf:d9:bc:fb:62:10:47:84:2c:f0:68:17:38:ea:
         03:85:75:20:a0:3e:f2:b8:55:88:1e:ab:b0:52:ce:a8:de:cb:
         74:4c:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:50 2025 by rpki-client