Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
File:                     u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft (raw, json)
Hash identifier:          7CGZG1wNIMALjGSBejlVm5sR7dowvbPA/zHIUJXiI8c=
Subject key identifier:   F7:B2:C5:62:38:89:76:C6:EE:49:2B:B5:1B:DC:4A:74:3C:EC:8E:8E
Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
Certificate issuer:       /CN=bbf3a257f99528c3a924d269d1af438185c2006d
Certificate serial:       0194C319C7868A1F5E6EB7879563F25229B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
Manifest number:          94
Signing time:             Sat 01 Feb 2025 20:00:33 +0000
Manifest this update:     Sat 01 Feb 2025 20:00:33 +0000
Manifest next update:     Sun 02 Feb 2025 20:00:33 +0000
Files and hashes:         1: 8Ul6EUbN8nuEp2NFtsX4pXAa4zQ.roa (hash: u/XlwlTOr3fAGl4u3pexiEWOyuIeoTxqTTJ1V4qZ94U=)
                          2: U35k_6mHZDW7ja-KdEmuh0b9HC8.roa (hash: /YyzICWvOSy7AUnfxntu8KYaBOI2O+xiSNMqk4LtmgY=)
                          3: ipGUG_FnLVv5_qna9Q8OOQESFEo.roa (hash: bBouB+XiilYfz2SXBgYGlCjeKLkIpw0oZUoVzWF6Um0=)
                          4: u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl (hash: vQ88UmU2x2T7G9NpnJmpww4AAnBN4TbfMqgy1cKaEpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:19:c7:86:8a:1f:5e:6e:b7:87:95:63:f2:52:29:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d
        Validity
            Not Before: Feb  1 20:00:33 2025 GMT
            Not After : Feb  2 20:00:33 2025 GMT
        Subject: CN=f7b2c562388976c6ee492bb51bdc4a743cec8e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:1e:e4:16:8d:fc:1e:c8:fc:45:d3:1f:ba:
                    58:44:c2:ea:39:31:fe:d0:05:60:e2:54:5d:0f:52:
                    96:70:29:b2:17:62:b1:e3:54:aa:c1:4d:bb:49:44:
                    9a:c4:90:bb:72:74:8c:e6:ac:c9:9a:94:b8:ef:bb:
                    2d:53:08:47:d2:b2:8d:f7:a4:73:45:7c:7d:dd:2e:
                    ce:3d:33:1f:d8:d7:58:79:4d:97:c6:f5:2a:f7:53:
                    7f:c9:6c:e2:28:4d:22:ee:1d:96:70:ed:fc:e7:8a:
                    87:9b:02:7c:c3:2a:45:0d:96:02:61:22:4e:15:12:
                    b9:5a:be:e9:ef:ba:08:20:ba:b1:16:e4:f2:53:13:
                    ca:86:63:08:b3:00:4f:ef:31:fd:d6:e0:19:6c:c2:
                    ab:e1:f7:50:8f:71:6d:8b:84:5b:c1:9d:af:4b:0d:
                    8e:ad:b6:16:90:13:25:32:c9:fb:c8:02:c1:23:42:
                    de:1c:bb:41:df:15:6b:04:a6:46:52:a1:f4:ca:d5:
                    56:4b:73:1d:36:e0:64:61:b1:1f:fe:30:3d:0d:95:
                    d5:31:88:67:10:ad:2f:09:c7:04:29:ed:c9:6c:07:
                    2e:82:7d:50:e0:40:97:17:50:09:17:79:20:27:53:
                    55:c6:e6:fb:b1:71:a5:6f:59:ca:1f:7f:1c:8b:55:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B2:C5:62:38:89:76:C6:EE:49:2B:B5:1B:DC:4A:74:3C:EC:8E:8E
            X509v3 Authority Key Identifier:
                keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d7:fe:39:2e:ea:fc:7b:fd:bd:fd:57:c9:d0:d9:96:d1:07:
         67:b0:86:26:af:4d:55:38:68:72:6e:0a:31:1d:ef:ea:f8:87:
         07:16:86:1b:7d:07:13:d4:07:08:c3:65:0b:4a:5b:fe:91:1f:
         d2:93:17:6d:ef:62:51:f1:a6:9f:15:71:22:4d:4a:b4:25:54:
         1b:65:bf:55:32:94:83:d1:5c:4f:74:9b:62:38:a6:84:0b:57:
         44:ba:ad:19:ce:a2:ed:33:49:ce:ed:80:17:16:fc:03:b4:8a:
         81:6b:10:58:f2:e0:e3:ed:4b:05:20:2f:39:1c:ae:db:57:59:
         b6:b7:fb:d1:e3:17:1b:11:86:c9:91:a9:04:73:15:a1:7b:6e:
         02:cf:38:cf:6b:bb:69:db:8a:96:80:63:82:71:f7:49:06:93:
         54:f2:db:10:60:54:9f:0b:0d:25:48:e0:aa:17:01:bd:fb:56:
         ef:2b:0c:aa:54:70:3b:45:f9:43:e2:df:5b:4a:dc:e0:6e:57:
         d7:a1:7d:44:2a:f7:95:1d:b2:1e:3b:a2:c8:e6:ab:55:db:70:
         66:b1:fc:6b:7f:e0:a7:03:7a:0f:9c:ec:5f:37:b8:dd:b7:41:
         11:5d:4a:ae:7d:af:71:39:50:a7:71:75:e2:6c:3f:fe:0a:ee:
         cb:54:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:46:29 2025 by rpki-client