Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
File:                     7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft (raw, json)
Hash identifier:          4SXhp5714gPgZNw8zDk9o6LVrUIVRYlk8ea+NKclsF4=
Subject key identifier:   5D:BF:C6:09:A5:4B:AA:C2:DD:53:04:91:0C:A3:0D:9F:74:55:E6:67
Authority key identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
Certificate issuer:       /CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Certificate serial:       019510C7C1493F4307B40312AC545AF46A63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
Manifest number:          1141
Signing time:             Sun 16 Feb 2025 22:01:21 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:21 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:21 +0000
Files and hashes:         1: 7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl (hash: davaeyQxljVXB5RhbEa8CZvqpR822cpVaX7yozVOaIM=)
                          2: Alm1D_jWQV3HZ_xMIEfApNUj0bw.roa (hash: roFDOJ4zN70FlLWN8DtAuHmCiQQVdXLTUDn3OTUhXvI=)
                          3: KOMEO3ezWZumvxO1NtiiKTGYpqs.roa (hash: y/p4zYmrPrmcic5vga+4CRguxPQrr1LrQuRZ5F/An8A=)
                          4: ZqzdAs8yZ3FLdUhbYW7TTyJuHq0.roa (hash: bttROiRtaf17Ko3eqx0YmSrz2YkGK+csEYw+4Lostm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:c1:49:3f:43:07:b4:03:12:ac:54:5a:f4:6a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3be768d28668f490afb74e9aefe41e03495d7a
        Validity
            Not Before: Feb 16 22:01:21 2025 GMT
            Not After : Feb 17 22:01:21 2025 GMT
        Subject: CN=5dbfc609a54baac2dd5304910ca30d9f7455e667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:78:10:c1:64:41:4f:dc:ae:bf:e3:91:07:c3:
                    22:7d:4f:c5:28:82:2a:bc:db:39:b4:a3:ea:97:c3:
                    ed:a7:2a:ce:82:fa:86:ad:58:4c:ab:76:63:f5:a0:
                    b2:0c:c8:50:ed:50:48:ed:6f:5f:cb:56:d6:c0:f1:
                    6e:8f:2d:01:80:21:f6:f8:53:f3:82:bd:2a:f9:34:
                    a2:a0:43:cb:f0:4b:b6:12:ee:93:6c:9c:1e:32:9e:
                    a1:f5:3d:93:c4:69:44:f7:63:5e:48:21:da:59:fb:
                    c0:46:75:be:b5:d6:07:03:66:80:13:1c:63:71:6a:
                    5f:0d:d8:2b:2d:b3:ef:9b:9a:28:eb:f6:55:d0:5c:
                    7e:f3:b0:a7:d9:d0:5b:6a:9b:35:22:75:78:67:15:
                    7f:62:f2:33:d8:64:b2:b8:11:b2:7f:81:b5:d8:a5:
                    d5:9b:95:5f:d1:9f:aa:ca:dd:1a:bb:ec:04:66:3a:
                    0a:5a:0a:84:02:22:48:85:3d:9e:d3:71:24:d8:dc:
                    60:81:49:91:87:8f:d5:81:a2:bb:e2:84:43:87:5c:
                    7a:ac:5c:96:61:e2:cf:70:2a:c9:84:ce:be:dd:25:
                    b7:45:32:21:83:0d:42:20:19:9a:97:24:75:aa:c1:
                    49:5f:ed:b3:28:42:23:52:c4:69:a6:0e:2c:d8:28:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BF:C6:09:A5:4B:AA:C2:DD:53:04:91:0C:A3:0D:9F:74:55:E6:67
            X509v3 Authority Key Identifier:
                keyid:EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:cd:20:2a:a7:38:14:e8:bb:5a:f5:a8:33:d8:a9:a4:b0:a8:
         40:47:b7:23:59:50:c7:a0:47:cb:80:da:cb:8f:94:3c:e8:9e:
         25:da:95:29:65:c5:3c:e5:6e:a9:b4:b9:b6:0b:b2:43:ca:30:
         60:3c:ac:3e:51:f5:eb:45:d9:32:e0:a0:fb:ce:74:12:8f:aa:
         1d:2d:6d:5f:da:0c:41:0e:cb:1b:d4:e7:a5:42:1e:04:c5:0a:
         58:42:a7:7b:6e:b5:40:05:59:d4:ce:99:db:96:fe:4b:41:74:
         5e:ad:03:fd:57:bc:c9:0b:5e:92:f2:eb:3a:4d:a5:43:f1:31:
         59:05:53:8d:b7:90:4c:38:06:17:0d:54:0c:20:7a:36:2d:25:
         83:e0:ac:7e:6a:67:62:7f:75:84:6a:9e:73:22:44:12:43:2d:
         43:44:8b:84:14:fd:66:2e:48:09:01:ac:c3:90:59:a6:04:f3:
         51:bf:0a:31:8b:97:2c:37:30:a6:ef:a2:ff:af:92:43:83:12:
         96:e5:cc:d0:7d:55:16:12:3f:a6:6b:68:14:55:71:76:a7:1f:
         fb:ef:eb:bf:5e:70:92:4b:4a:f4:c9:92:ea:02:75:04:cf:84:
         06:31:f5:ca:33:eb:50:99:3f:b2:fc:0b:43:2e:2a:e0:b8:26:
         b9:dc:4d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:09 2025 by rpki-client