Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
File:                     eUif00bnIUhmFZrC8OycmQxPFLk.mft (raw, json)
Hash identifier:          aLtZ7cnPjk49IWKluAHQ+RyxF/bEMx4tHnx8xqbOkvY=
Subject key identifier:   E1:36:3F:7D:33:D1:EB:04:BE:67:5E:8F:8D:EF:6D:B8:4A:7D:07:7F
Authority key identifier: 79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
Certificate issuer:       /CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Certificate serial:       019511D9AFCDE473416884F33E8FF143B1BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
Manifest number:          02B4
Signing time:             Mon 17 Feb 2025 03:00:33 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:33 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:33 +0000
Files and hashes:         1: YbVpJmm5d19rM-zYZeA0ZWdtDMg.roa (hash: l5rWO723DVA6iEz8C5Lvzh9vlRYqelqcHe5HXOP/cpM=)
                          2: eUif00bnIUhmFZrC8OycmQxPFLk.crl (hash: KgJT34uvWrA1tcInkcZlxygds/kPfF/vXMKxX3APT3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:af:cd:e4:73:41:68:84:f3:3e:8f:f1:43:b1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
        Validity
            Not Before: Feb 17 03:00:33 2025 GMT
            Not After : Feb 18 03:00:33 2025 GMT
        Subject: CN=e1363f7d33d1eb04be675e8f8def6db84a7d077f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b5:a0:9c:a2:32:64:47:47:83:ca:16:0b:18:
                    51:ac:e2:cb:da:79:41:3b:ed:b2:3c:45:4a:1a:c1:
                    1a:e9:bd:63:7a:1e:22:85:4e:d7:ee:96:39:d4:25:
                    7f:d4:00:f0:e2:ca:94:a4:eb:b5:1b:64:71:d4:8c:
                    7e:78:16:e1:30:2a:a9:57:51:6b:00:ba:1d:ee:51:
                    35:5b:80:a4:a5:be:8a:d1:b4:40:da:b2:45:1f:28:
                    c0:07:db:77:7a:49:de:ed:4b:5a:cf:7b:83:84:48:
                    2d:31:94:a7:82:5f:cb:cd:98:cc:f3:a3:54:95:0e:
                    88:c0:c6:c5:53:ea:2d:a8:a9:2a:8b:33:d8:12:90:
                    26:a6:bf:e3:a2:b3:b9:42:b0:5c:96:b1:57:97:8c:
                    ee:01:48:ab:fb:a4:54:f7:2f:b0:11:29:34:0b:d7:
                    eb:ca:d8:0a:2b:7e:2d:ca:85:84:d3:d4:5d:bb:49:
                    10:d8:b3:a7:bc:8c:3a:bb:3c:4a:65:c0:8a:38:ff:
                    d3:e7:13:43:5d:f1:48:83:94:77:f0:fc:13:b1:c2:
                    47:21:88:1f:0e:00:4f:ec:b5:6a:b7:6a:e9:6a:52:
                    b0:af:1a:9b:1b:21:ee:1e:b4:14:91:bb:d2:49:7d:
                    7f:a0:63:2b:50:04:6e:86:19:2a:0f:ed:89:44:30:
                    4f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:36:3F:7D:33:D1:EB:04:BE:67:5E:8F:8D:EF:6D:B8:4A:7D:07:7F
            X509v3 Authority Key Identifier:
                keyid:79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:50:8d:bd:7f:d5:a5:3e:4c:ed:83:e0:77:55:94:40:a3:56:
         34:14:13:39:15:23:b5:a4:16:de:b9:59:ef:d3:f0:0b:48:3a:
         03:86:d5:94:10:9b:b8:1b:9c:92:0e:fc:70:47:7c:fd:66:46:
         cd:e5:4e:18:f6:42:1e:cb:3c:76:59:1a:c0:6e:38:f8:00:65:
         d8:94:0a:66:e4:00:c4:be:06:a0:b5:58:4c:69:85:6a:52:af:
         51:b1:5c:16:90:89:67:98:9d:c8:fe:78:bc:97:ec:cb:bc:ac:
         a1:52:1b:4c:5a:75:86:b6:92:a4:10:37:5f:62:24:c3:1a:1e:
         3c:7e:46:23:db:33:01:06:aa:16:93:41:d9:40:e7:90:f3:fd:
         b8:84:a7:11:f7:98:48:c4:38:a0:96:49:d6:f7:9c:10:d2:c0:
         11:37:ac:b4:89:fc:90:d7:be:b0:c5:f1:c4:d7:0c:9a:e5:e6:
         95:fa:0c:9a:3c:50:1c:e2:67:6a:79:df:a0:2f:e7:43:07:40:
         4a:86:c4:dd:82:8f:2c:87:85:68:ff:64:b7:62:fd:b4:33:f5:
         7a:a2:91:15:dd:f6:10:fb:15:4d:86:50:e1:bc:76:99:02:e4:
         ee:6a:33:f6:ea:08:1d:df:ec:db:b3:f1:6c:80:bf:13:1d:26:
         61:31:98:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:40 2025 by rpki-client