Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          T9wXSm+p+6CUGD/MkR3db8UDszo5ZnRtFlmN0yaCAsA=
Subject key identifier:   35:3A:77:C0:5B:01:31:DD:85:F0:AC:61:B8:22:A7:E9:C3:0A:4C:2E
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       0195108FE8191670E7D93A412EF19227F2A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          0AF7
Signing time:             Sun 16 Feb 2025 21:00:21 +0000
Manifest this update:     Sun 16 Feb 2025 21:00:21 +0000
Manifest next update:     Mon 17 Feb 2025 21:00:21 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: bD8y1WXQiQaooDIDv9T6s/IOEeC1ge8JSkwlLrvx988=)
                          2: _HSn7eAJ1-GN-PARSBNdWZcI_CM.roa (hash: PSxIhhf7j8l1h9bP9LYjz403TkZ/7uIEMgwPHzFFKaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:8f:e8:19:16:70:e7:d9:3a:41:2e:f1:92:27:f2:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: Feb 16 21:00:21 2025 GMT
            Not After : Feb 17 21:00:21 2025 GMT
        Subject: CN=353a77c05b0131dd85f0ac61b822a7e9c30a4c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:f5:41:3c:cc:01:b7:68:74:48:e1:21:34:
                    18:fd:0c:74:e8:01:a6:a3:26:fd:3f:06:17:98:46:
                    10:e6:bc:56:99:af:f5:25:9e:6f:fe:04:17:3e:85:
                    1c:61:82:9c:34:5d:e4:d2:11:20:89:ed:3a:81:27:
                    70:b8:0f:af:73:f0:b7:61:e4:32:07:47:9d:b1:f7:
                    91:cc:20:f9:aa:ce:2a:2d:f4:12:e3:f7:ca:84:6b:
                    69:3f:ba:d0:4c:8c:c4:15:ee:4c:83:e3:7d:01:09:
                    15:de:d7:a9:42:c8:55:23:61:15:25:36:17:86:0e:
                    a3:f7:c0:43:89:c2:b2:c1:f5:ae:0c:1b:dd:34:db:
                    56:37:ef:09:f2:0e:f9:24:5a:75:70:07:12:17:ad:
                    05:d4:0e:4e:35:fd:d0:5d:9f:7b:b2:ea:37:33:f4:
                    eb:0d:f4:59:0a:59:01:75:7f:8f:48:58:82:e6:e9:
                    44:f1:25:d9:7f:9b:99:fe:61:d6:6d:c4:f3:62:9c:
                    56:ad:dc:f2:97:21:26:f5:5f:c9:34:48:8f:67:c0:
                    fb:c5:f8:0a:d0:13:4a:62:40:5d:6b:c2:e7:62:27:
                    84:0f:a3:5c:6a:d7:29:e9:40:a4:02:98:b9:c1:19:
                    c7:02:36:32:66:2e:67:02:5b:97:4b:94:bb:53:64:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3A:77:C0:5B:01:31:DD:85:F0:AC:61:B8:22:A7:E9:C3:0A:4C:2E
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a3:5b:4f:60:63:b7:f8:e2:8d:7f:94:a2:c7:b6:70:db:fd:
         23:f1:cc:98:18:e5:e9:fd:5f:8b:66:cd:02:20:07:cf:52:37:
         4d:b5:ff:69:d9:78:28:c2:fe:e6:92:90:a1:9a:7f:c9:23:1a:
         66:13:83:23:f2:42:52:83:99:65:30:ee:94:be:8e:58:df:2e:
         6c:84:37:f8:fc:e0:34:51:0c:f7:3c:5b:6a:a8:d5:29:d8:13:
         e5:66:44:f3:80:4a:ad:57:91:de:86:4c:48:4a:72:54:66:64:
         3c:54:b0:99:20:b8:d3:e8:ee:9e:47:65:4e:6a:99:b3:e2:45:
         79:89:69:3f:2b:a2:28:d4:ad:80:ea:94:b3:48:b9:d8:3b:a2:
         5e:8e:c2:ed:bb:80:88:5b:18:bb:22:c1:80:d5:d7:34:b6:8e:
         3d:0f:3f:9c:2b:d8:28:fa:94:b0:97:ec:7a:7b:50:cb:d1:8f:
         ec:e6:1f:cb:94:21:5c:ef:d0:aa:ee:d5:69:9d:7e:5a:68:58:
         a3:cf:67:3f:4e:cb:56:06:61:c0:cf:62:15:ef:17:64:9c:ed:
         28:25:df:5d:90:29:39:c5:07:c9:64:c6:bf:3b:75:a5:73:77:
         54:53:11:4e:9d:2c:54:96:f0:f7:3c:e9:8a:0b:02:77:0e:0e:
         7c:be:25:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:03 2025 by rpki-client