Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File:                     iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier:          MalbM1CRbnXs5nKeqpSDM2R80UmOHdRrTThkHDcfGaE=
Subject key identifier:   72:56:D4:37:64:97:15:0C:62:21:D0:42:05:8B:27:C3:F9:12:34:61
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer:       /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial:       019511D94FDDF5EB8DBE628156F9FB8CDD30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number:          1455
Signing time:             Mon 17 Feb 2025 03:00:09 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:09 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:09 +0000
Files and hashes:         1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: ZloYymMX02mbf/AK5ndv6NMpKsCUcDeKCbkfaz4JDL4=)
                          2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:4f:dd:f5:eb:8d:be:62:81:56:f9:fb:8c:dd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
        Validity
            Not Before: Feb 17 03:00:09 2025 GMT
            Not After : Feb 18 03:00:09 2025 GMT
        Subject: CN=7256d4376497150c6221d042058b27c3f9123461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:75:e5:ba:e1:e2:77:ea:e7:03:ed:48:29:
                    6d:89:59:5c:b9:2d:bd:15:98:0e:f0:44:12:a2:b2:
                    f2:40:b4:53:6c:92:3f:7f:d9:0f:f8:27:38:3b:bb:
                    86:fe:66:51:d4:03:e5:88:5c:d3:b2:46:0e:dd:a0:
                    16:dd:66:1b:60:53:d0:b9:ef:69:5d:a9:a4:f1:48:
                    05:5d:32:cd:9d:1b:06:ac:d4:1a:ed:a3:0e:b6:a9:
                    2b:2d:f1:31:f4:32:8e:d9:31:dd:df:15:3e:15:8e:
                    e5:dc:98:13:b0:b3:7a:0c:8e:d9:89:14:e9:d4:c2:
                    ab:ba:bd:16:fe:c4:e3:c4:88:c3:5f:54:9d:5d:f8:
                    7c:7e:51:12:b8:70:ce:f6:ac:f1:57:f9:3d:2e:78:
                    ba:23:72:81:05:d5:87:a9:82:57:2d:e1:f2:bb:73:
                    bd:1e:a0:04:45:8e:92:a0:62:d0:df:de:da:3f:b0:
                    3c:f3:42:d2:03:b5:25:60:8d:86:17:fc:63:35:3d:
                    d1:16:e3:fb:79:5e:9b:38:4e:66:73:53:c1:b3:07:
                    7b:2a:69:77:68:af:39:41:10:a5:52:3d:06:a8:49:
                    1e:78:14:6b:96:ec:03:42:58:bb:8b:73:3a:e6:e3:
                    d6:58:d4:04:a3:82:db:7f:31:90:11:fb:39:89:ed:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:56:D4:37:64:97:15:0C:62:21:D0:42:05:8B:27:C3:F9:12:34:61
            X509v3 Authority Key Identifier:
                keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:81:f0:4e:4b:09:41:5f:42:ba:14:11:4e:30:3a:8f:5a:39:
         87:84:2e:a6:b1:d6:7e:3a:e4:77:cb:81:02:f1:09:6d:4d:06:
         77:e9:17:ca:8a:6f:44:af:06:83:5c:65:61:bd:12:6c:ff:4c:
         95:d0:cb:38:39:a2:b0:7d:05:83:91:6c:f9:06:5e:8b:b9:b0:
         99:69:af:c1:e0:0b:fb:c8:50:44:9a:a4:e2:77:99:7b:93:93:
         53:71:58:da:c5:f4:6d:fa:6c:43:44:b9:d8:60:af:fe:bf:57:
         36:d9:f1:78:ff:be:72:2c:03:4a:86:7c:5c:3f:7a:48:58:00:
         db:86:0c:42:7a:ba:50:fd:30:e5:60:af:d0:d6:45:f7:18:fb:
         33:2f:1f:e1:45:49:3e:a8:0f:af:e1:f5:bd:0b:b9:75:2e:25:
         c3:4e:9e:6d:bf:ba:01:21:6f:f4:e9:71:2f:5a:3a:61:b9:9f:
         cd:9f:2d:97:8f:52:f3:df:ef:5b:c4:88:91:04:5c:77:ef:44:
         77:e2:5b:69:b2:72:c0:1d:4f:b6:53:b7:15:ec:72:cf:0e:c3:
         6c:9c:87:ac:8c:5c:00:56:21:2d:d9:c6:07:41:74:4d:8e:5c:
         09:44:1e:80:1e:10:a3:07:fc:15:71:c6:f2:88:8a:fa:df:70:
         b8:fb:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:41 2025 by rpki-client