Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
File:                     05SToXmX0x6NWqbMyaa9dX8VwDA.mft (raw, json)
Hash identifier:          7lEiSPDQhMb2hCujFuYg1Ojs2HsLCyvloWT5INpUHDE=
Subject key identifier:   F5:D9:EF:0A:C2:C0:F0:F5:0E:34:79:81:B7:CE:E2:C3:CE:0D:E1:D6
Authority key identifier: D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
Certificate issuer:       /CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Certificate serial:       01950FEB11262BA794CF7781A47C519EBAAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
Manifest number:          1455
Signing time:             Sun 16 Feb 2025 18:00:18 +0000
Manifest this update:     Sun 16 Feb 2025 18:00:18 +0000
Manifest next update:     Mon 17 Feb 2025 18:00:18 +0000
Files and hashes:         1: 05SToXmX0x6NWqbMyaa9dX8VwDA.crl (hash: oLt5Db7wciJxPYeOUWETiHH4e9LpppAUyPPEZWrNpvI=)
                          2: 0FFuSWeP_xnZLwOhaaaPqbHXLc4.roa (hash: R/kohk8zDnLTG4mp1rru94qAndg3iws6yZ+eZfkkPz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:0f:eb:11:26:2b:a7:94:cf:77:81:a4:7c:51:9e:ba:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
        Validity
            Not Before: Feb 16 18:00:18 2025 GMT
            Not After : Feb 17 18:00:18 2025 GMT
        Subject: CN=f5d9ef0ac2c0f0f50e347981b7cee2c3ce0de1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:3f:c9:68:fa:fd:be:9c:f6:7d:6a:6e:2d:
                    86:4e:de:a7:b5:ac:4a:6a:d6:f0:a3:39:0b:75:6a:
                    36:42:ac:02:b3:b4:7a:5b:88:16:a0:1b:42:ee:25:
                    c5:2a:c3:88:78:85:cc:49:25:fb:83:9f:f2:fa:50:
                    88:75:c8:2a:13:2a:23:8d:b9:1d:c6:44:9c:38:ae:
                    2a:00:d8:8e:9c:99:3d:c9:0f:1c:9a:5c:c4:3f:82:
                    53:e5:2e:3f:19:f1:94:58:49:5e:24:47:46:a0:b6:
                    ad:99:3a:f2:4e:67:6c:a5:a1:70:ef:91:75:32:ba:
                    56:1d:8a:56:2b:73:2c:0a:9e:c5:b6:87:53:61:b9:
                    f8:dc:90:c4:6e:ba:63:b8:4c:3c:3d:84:5d:40:d2:
                    fb:83:26:80:a4:76:e5:6d:a5:22:96:c8:54:49:23:
                    7a:bc:d1:07:b2:6f:45:6c:42:45:4d:c1:1f:50:f0:
                    4e:7f:4c:57:37:59:a8:68:5a:04:b7:fb:98:f0:e5:
                    39:2d:8c:6d:d3:38:a9:38:11:9d:fc:6f:9c:e7:9c:
                    93:19:7c:fe:30:80:8f:ad:93:d7:bd:46:1d:ea:bc:
                    bc:61:11:ac:ab:77:7d:32:fc:39:21:00:26:20:27:
                    e2:21:0d:f3:68:7f:a5:62:45:45:51:88:3c:8e:63:
                    1b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D9:EF:0A:C2:C0:F0:F5:0E:34:79:81:B7:CE:E2:C3:CE:0D:E1:D6
            X509v3 Authority Key Identifier:
                keyid:D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c1:20:9b:7f:6e:24:54:80:fd:50:6e:0c:95:1c:35:84:e4:
         af:96:46:e8:90:f0:38:3b:1e:a8:75:20:aa:b5:a5:b0:28:64:
         fa:dd:06:d7:19:58:e0:40:2b:3f:2b:99:81:aa:af:04:ca:f6:
         89:00:3b:14:3f:af:ba:a3:de:ed:25:17:f0:39:f5:e2:16:c0:
         1c:89:5f:ce:40:f8:74:2b:fc:1f:03:1e:8d:11:99:0a:7e:6e:
         10:d1:d7:c9:30:97:c8:1c:ad:5a:47:7e:8d:11:d1:ce:d7:1d:
         22:85:21:3f:02:ad:50:61:d5:70:71:a3:c5:12:8d:7f:c0:37:
         1d:b2:25:a2:d1:a2:7b:2c:7f:60:45:74:e2:c2:92:cc:48:61:
         2c:7d:5c:1c:4f:fa:46:b3:16:24:ca:86:8a:a0:1e:97:84:2c:
         a0:94:0d:1c:90:92:fd:d9:e9:6d:35:98:8c:ea:14:d1:16:30:
         ca:64:4e:7c:53:ff:56:32:d1:14:04:ba:74:a9:3d:37:a0:56:
         a7:64:1a:29:a4:e8:71:a3:56:e9:a9:98:4f:29:aa:e7:da:f4:
         cc:01:d4:72:3c:f8:b3:f1:80:03:a9:68:02:1a:02:b9:9d:1d:
         57:0c:a1:59:3d:cb:3c:ba:12:f5:0f:61:cd:ba:58:e6:c6:77:
         61:40:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:09 2025 by rpki-client