Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
File:                     c5ddXanaigdLM_vLXAnVA6O0Q6E.mft (raw, json)
Hash identifier:          17IH9Nj6PDwbjRy+c/Q/zsMSCejUSNU1EUWIqSw7wSc=
Subject key identifier:   91:35:44:02:61:9C:BA:AC:BA:49:87:8B:BC:55:B3:7B:AF:F7:4C:AE
Authority key identifier: 73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1
Certificate issuer:       /CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
Certificate serial:       01950FEB13D0838EAFC70F6455E5F1CA0249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
Manifest number:          146E
Signing time:             Sun 16 Feb 2025 18:00:19 +0000
Manifest this update:     Sun 16 Feb 2025 18:00:19 +0000
Manifest next update:     Mon 17 Feb 2025 18:00:19 +0000
Files and hashes:         1: 5hi4oRUV3-lKQNDaUn51nnT1qK0.roa (hash: JinYSimT/Wg2ItaoADr26fHiavicFEOuho5581RUh7s=)
                          2: SjDGqMtyA_tOZOFH9qEhztndPDA.roa (hash: SYm04LsgP1kHh1UhWwOlwBd3q7mezHyPYrt9bFb03b4=)
                          3: T7iXt4sJUoDnHP-qWowXfwJDp5I.roa (hash: KTxUHbHDaHdkVbRY7Vka++NBqUDid63y2hSOJuy207k=)
                          4: c5ddXanaigdLM_vLXAnVA6O0Q6E.crl (hash: g1WJoe1fDL8O9pL83XjOtnmVI2G93cFUeiasBnTdvGI=)
                          5: cJwqie2X40_QNltIbFm8mbtEYgg.roa (hash: 3tSp6jg9Ep/kPYXuczS90i3Bn6SwmlbgTSU/wFhXkuM=)
                          6: gE2C1EfDuVwxxJDKotTRnz-Yq4w.roa (hash: pwL0fRQakGirIxsJOmpHF82vAfTBBCME2LVYmBIAzQA=)
                          7: iSqhLAHx-OPTgee6HZU05Gn7mrg.roa (hash: /LTwUnCBfctjGJbeDzhYKUgsItn5b+f1/FLcjg7y0VU=)
                          8: il1qN-6b575Qrhubx9ECJYw-ExA.roa (hash: l3cKFcZsIxHBwQmjzQTRktanLJGMwjOlGIjh3dsWi3s=)
                          9: nwasxCIPFFaQLDFGjgREeCDdEJ0.roa (hash: l3Qci4Ma0ZBc/BJswSuk3N16gUqszJQ2M5qXeNWO8Z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:0f:eb:13:d0:83:8e:af:c7:0f:64:55:e5:f1:ca:02:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73975d5da9da8a074b33fbcb5c09d503a3b443a1
        Validity
            Not Before: Feb 16 18:00:19 2025 GMT
            Not After : Feb 17 18:00:19 2025 GMT
        Subject: CN=91354402619cbaacba49878bbc55b37baff74cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:98:0b:31:73:46:0e:f8:7a:f7:45:87:5b:bb:
                    ed:f7:f6:6e:ee:a1:7c:48:17:a7:fe:39:5a:3a:53:
                    d8:9e:9b:11:17:b9:ab:dd:bf:e9:bd:11:23:97:fb:
                    c5:dc:62:46:dd:87:78:62:14:d6:cb:aa:b3:dd:fa:
                    00:eb:57:62:ac:6f:af:90:63:8e:c5:a1:9e:ad:df:
                    4e:df:ad:b3:63:7f:a7:92:07:39:f1:c6:92:54:4b:
                    ab:d0:70:c1:b7:92:d4:9b:d0:1e:1c:e8:48:ee:9b:
                    62:85:0d:75:c9:01:1c:b0:47:17:5b:d0:97:fa:2b:
                    5d:fa:15:47:ce:b6:e9:d8:1c:69:d9:d8:48:01:92:
                    37:07:0c:3a:6f:ad:64:70:a3:59:36:fb:23:c4:9f:
                    a6:53:81:28:17:2a:87:77:16:37:77:c7:2b:61:9d:
                    63:c2:05:4d:0f:6f:f0:91:23:56:4b:4b:bf:c2:f2:
                    be:37:c6:bd:7f:f6:c2:8d:e7:c7:ad:11:8f:56:25:
                    54:15:5e:a9:7a:7a:80:aa:5a:7c:55:a9:bb:20:de:
                    2e:82:69:03:c0:cb:13:a5:e9:ae:41:cc:df:a8:49:
                    9e:f9:a9:b9:59:b8:eb:10:c8:bd:87:2a:3e:01:84:
                    ca:d6:e8:c8:9f:c2:b5:0d:1c:9b:f5:f7:30:c1:58:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:35:44:02:61:9C:BA:AC:BA:49:87:8B:BC:55:B3:7B:AF:F7:4C:AE
            X509v3 Authority Key Identifier:
                keyid:73:97:5D:5D:A9:DA:8A:07:4B:33:FB:CB:5C:09:D5:03:A3:B4:43:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5ddXanaigdLM_vLXAnVA6O0Q6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f0172e-69c2-422f-8296-9e80d0d87c2d/1/c5ddXanaigdLM_vLXAnVA6O0Q6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ec:a6:02:0f:bf:a1:d3:1a:85:c6:01:a7:9e:b4:04:88:e7:
         86:bb:35:7b:31:ac:44:b0:29:4d:fa:6f:9d:79:f6:fe:42:0b:
         eb:4f:56:5b:3a:99:9f:d9:81:71:55:4b:30:bc:98:c6:44:df:
         3b:1f:aa:13:bc:78:04:54:cb:94:f0:af:db:02:f9:ba:92:03:
         c1:f7:f4:33:07:eb:49:3f:86:72:80:f2:4c:7f:a0:3e:0c:13:
         6f:14:ae:8b:2a:f1:21:8e:da:00:13:a1:31:14:2b:da:0e:a4:
         90:4a:e9:f6:bb:2a:9e:85:f9:26:c7:f3:ec:c2:93:24:df:20:
         a4:fe:6e:54:cb:39:e7:ee:f8:dd:36:b5:41:c4:b2:1f:fd:91:
         53:e5:e2:db:99:38:ef:75:10:27:e1:17:53:94:78:aa:4a:a0:
         de:95:65:65:f8:33:09:08:1c:2e:aa:43:e7:6f:47:e8:5d:55:
         ad:02:8d:84:0e:54:50:99:c9:84:a2:91:73:44:c4:9b:30:da:
         fa:65:27:83:67:3e:9e:43:0d:b0:1f:71:5d:c2:da:05:7f:80:
         5f:98:be:83:7a:10:e6:65:68:6f:5d:49:fd:e1:d1:8f:a6:e5:
         46:8c:39:30:f1:9c:51:fb:d2:61:5d:9f:e2:7d:62:54:5e:ac:
         8a:19:2e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:43 2025 by rpki-client