Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
File:                     1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft (raw, json)
Hash identifier:          McROk3mFGlULb5h6xk/4ILGjDP9pjkDU//tMLh0cpBw=
Subject key identifier:   02:04:96:21:A6:3B:2C:76:AE:DE:F5:51:12:E3:02:FE:FF:67:93:A8
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Certificate issuer:       /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial:       0194C49A3613796D9AA9C138350E732E3AF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
Manifest number:          2E
Signing time:             Sun 02 Feb 2025 03:00:28 +0000
Manifest this update:     Sun 02 Feb 2025 03:00:28 +0000
Manifest next update:     Mon 03 Feb 2025 03:00:28 +0000
Files and hashes:         1: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl (hash: 6tbK5FsrW3mS0axVANjVzq9o3I7GQSSY7VjRYXq3GK4=)
                          2: 1HxfapABCT9f2Gi5FEEd5TTonAI.roa (hash: r74LeOGcVT48Sbc9JuiH8jNwqtPW9xH2+O8jIbbYSCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:9a:36:13:79:6d:9a:a9:c1:38:35:0e:73:2e:3a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
        Validity
            Not Before: Feb  2 03:00:28 2025 GMT
            Not After : Feb  3 03:00:28 2025 GMT
        Subject: CN=02049621a63b2c76aedef55112e302feff6793a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:fd:1c:e0:82:d1:49:1f:cc:0d:4d:28:35:
                    d4:0e:cd:b8:d5:73:36:f6:d4:de:cc:51:dd:bc:a5:
                    5d:30:66:d9:13:63:53:73:fd:dd:bc:68:af:dc:fb:
                    2e:23:74:b4:36:11:47:ca:94:b6:5d:a8:2d:2c:62:
                    cf:ae:b8:6b:3e:08:18:90:10:f2:c3:8b:b5:a4:e3:
                    35:a5:d8:04:0b:b0:6b:3b:48:ee:cf:28:f9:c9:a6:
                    c6:e7:1d:51:d2:b4:78:4a:37:28:d6:43:24:d7:fc:
                    d4:3a:fe:c2:a1:f9:50:ee:8a:01:fc:03:5e:25:8a:
                    69:8e:fe:e2:ee:79:26:ff:28:2f:fd:fa:31:aa:83:
                    50:b7:ba:45:dd:50:46:0e:dd:dd:63:f0:e2:fd:e6:
                    7e:8a:fe:98:21:55:c0:da:66:c4:89:7a:27:54:24:
                    ae:64:15:e6:79:d6:96:64:55:8e:35:3b:0b:c8:ab:
                    22:e0:a3:da:ee:23:73:35:e9:5f:78:e8:0e:30:31:
                    25:0f:e4:56:7b:d0:bd:f5:a5:ea:25:17:6c:39:84:
                    d0:22:6c:1b:21:9a:e1:a3:55:32:6a:d8:52:14:61:
                    b2:03:f9:8b:f7:0e:f7:66:56:ee:53:4d:2a:dd:31:
                    75:de:ff:5f:f6:3a:54:97:cc:e8:9e:cf:48:cf:58:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:04:96:21:A6:3B:2C:76:AE:DE:F5:51:12:E3:02:FE:FF:67:93:A8
            X509v3 Authority Key Identifier:
                keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:62:16:ea:57:68:5b:47:3b:75:26:3e:72:1b:27:cb:f0:f1:
         61:c0:08:d1:f7:69:82:05:d3:73:bd:25:7f:97:92:61:9f:0c:
         6c:d0:f9:0d:e3:88:8e:b1:e1:a6:ed:45:2c:5a:a4:31:af:36:
         e8:ce:82:91:1f:46:6f:20:10:ef:a7:66:42:88:6a:4d:36:3e:
         a5:45:4d:55:f5:1a:ac:8b:1d:5b:49:6d:dc:42:c0:ed:e9:19:
         2d:8b:e8:72:31:ab:0f:34:26:8e:a9:50:34:5e:a0:30:c4:e1:
         b7:97:67:1e:fb:9a:0e:8b:49:35:d0:f3:ca:00:f9:75:3a:b8:
         e0:d9:80:72:d2:ba:e8:f3:41:0b:d2:8a:56:88:77:92:9d:80:
         47:60:79:8f:c9:65:1a:9a:75:de:ed:2c:d6:6d:9d:e5:45:a1:
         9d:74:78:92:91:55:be:ca:ab:f1:9e:04:b4:21:03:ff:44:f8:
         ff:96:f1:30:07:1b:0a:49:85:e7:d5:40:2b:1f:ea:28:75:94:
         96:26:24:86:d8:14:e9:33:45:2e:32:fa:2a:9b:7d:30:a0:ec:
         66:d8:da:d6:96:94:d8:d5:ae:75:55:cf:c6:c2:be:e1:f6:5f:
         27:cf:18:14:4e:ac:36:45:12:9e:9d:de:d0:12:10:c4:ec:b9:
         fa:0b:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:36 2025 by rpki-client