Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
File:                     sVS0YRuM6ChydbxHppr6N4tBQL8.mft (raw, json)
Hash identifier:          7lvnpj3pxipcLfy1OilQKLaTsivlxZUNRtnBJJfvVEA=
Subject key identifier:   A2:78:D2:F4:55:DA:DF:42:E3:6C:5B:BE:C5:E3:F9:D9:7B:A3:F6:6A
Authority key identifier: B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
Certificate issuer:       /CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Certificate serial:       0194C3BE9CDC9B1E055BE5C7B29CEA8C17DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
Manifest number:          B0
Signing time:             Sat 01 Feb 2025 23:00:36 +0000
Manifest this update:     Sat 01 Feb 2025 23:00:36 +0000
Manifest next update:     Sun 02 Feb 2025 23:00:36 +0000
Files and hashes:         1: _cD4yVpG6lnwIeREBiUBwAEeAKA.roa (hash: jnUyAI5YI7WapRKSFkmTN6SUzj6iHT0vp3PMP0QrWlQ=)
                          2: sVS0YRuM6ChydbxHppr6N4tBQL8.crl (hash: xuuhYiv+pIVbgRw1A8ZBVjljctlrtFHDkO/tuWe2enE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:be:9c:dc:9b:1e:05:5b:e5:c7:b2:9c:ea:8c:17:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b154b4611b8ce8287275bc47a69afa378b4140bf
        Validity
            Not Before: Feb  1 23:00:36 2025 GMT
            Not After : Feb  2 23:00:36 2025 GMT
        Subject: CN=a278d2f455dadf42e36c5bbec5e3f9d97ba3f66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:19:cc:fb:4b:14:a6:63:cc:1e:89:e6:07:
                    0e:5a:7a:0b:4b:a2:a5:fb:aa:27:ff:cc:bd:0c:7b:
                    77:d1:50:d9:be:5b:a5:f4:f6:58:e4:20:4d:fe:1f:
                    d2:51:da:09:4b:1a:ee:69:1c:80:1e:b0:0b:bb:5a:
                    e2:a2:35:40:f9:4a:ab:bb:0a:24:8c:b6:65:70:b1:
                    2d:58:9e:bc:32:8e:90:3d:af:f2:80:87:b9:fa:03:
                    e1:d5:d3:48:6c:15:47:b8:9e:9b:a0:8c:32:26:5e:
                    63:7e:17:4b:41:ed:f7:27:9e:19:7d:20:d5:36:ad:
                    59:65:d7:05:ed:66:92:f4:f5:57:3e:ca:f6:95:ad:
                    41:6a:2c:c0:77:d4:ad:d9:44:8d:8d:b1:f8:9a:79:
                    48:58:22:01:4e:23:24:3c:cc:e5:f9:40:b6:22:da:
                    22:72:18:d3:49:33:03:87:fc:51:ff:d2:57:ba:bd:
                    f2:83:12:68:86:46:74:3e:0d:30:df:ad:e0:38:11:
                    d7:f1:5d:d7:3c:41:ce:03:00:95:70:e5:0e:09:5d:
                    97:95:65:ee:e1:d5:52:f2:90:ae:08:c1:5a:2b:52:
                    2b:59:f7:09:50:e7:ff:9c:8a:26:ea:c9:90:bc:23:
                    eb:af:fb:93:82:4d:a0:d5:d7:e7:5b:d1:52:c4:38:
                    27:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:78:D2:F4:55:DA:DF:42:E3:6C:5B:BE:C5:E3:F9:D9:7B:A3:F6:6A
            X509v3 Authority Key Identifier:
                keyid:B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:44:d4:3b:e3:4a:6f:42:25:ea:4f:cf:0b:bc:ab:16:5d:0a:
         0f:42:ec:49:73:d1:b3:c3:5d:fd:e1:0d:82:01:57:86:09:3f:
         f7:7d:0d:36:c7:e5:72:74:73:5f:c3:e6:39:6a:7d:62:53:a2:
         f9:e9:e1:9d:2b:61:ed:c7:ae:4c:64:36:73:4e:21:1a:dc:e5:
         9d:a1:58:99:85:3c:ee:78:c8:fc:9d:f2:94:b5:6e:04:fc:bf:
         21:6d:c9:0e:8a:0d:31:db:bc:87:93:89:14:30:bb:8f:76:68:
         e9:86:3e:3e:4a:5e:d0:86:c5:c3:3d:fb:94:ea:a4:55:ca:0e:
         a1:52:78:6f:57:45:43:42:d8:95:34:18:13:b8:a9:da:53:3f:
         1b:4c:fc:af:41:00:d0:0c:f6:73:db:ba:dd:db:fe:92:32:4f:
         eb:1e:90:6b:85:2c:2e:97:2a:27:b7:e1:73:51:ba:95:46:f7:
         44:4c:ae:a9:a3:9b:9b:d7:e7:70:26:8b:6d:34:56:de:77:22:
         48:d5:02:ed:f5:84:d2:65:6a:a3:8d:4e:e1:b9:a8:27:72:04:
         fc:36:c5:8b:90:51:c0:e6:b5:ec:17:78:4b:df:c4:bf:a5:78:
         e9:3a:d3:84:2e:40:65:6d:61:eb:8d:37:ff:39:8b:01:a9:d5:
         fe:49:2f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:53:19 2025 by rpki-client