Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
File:                     vW-jeiSDz1efqGJQEZrAEzR1qtg.mft (raw, json)
Hash identifier:          zKTSXfjW/qsk9e99HAXQ81IVGsO2SaKHfw4FAAow5jk=
Subject key identifier:   E6:08:05:9E:6C:FA:A8:86:CF:7D:F2:28:65:9B:0F:08:D9:A3:CD:B9
Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
Certificate issuer:       /CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Certificate serial:       01950EA1B7A8E8B4AE8DCB46982E57740679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
Manifest number:          0D54
Signing time:             Sun 16 Feb 2025 12:00:34 +0000
Manifest this update:     Sun 16 Feb 2025 12:00:34 +0000
Manifest next update:     Mon 17 Feb 2025 12:00:34 +0000
Files and hashes:         1: 0YW6ttYVKOeqcJ5zyrGvaeUR2pw.roa (hash: NFpGYrDr9CdBDfnq5tg4cuAB0v9WLl3xgZZRL1xqhAY=)
                          2: 33xoh2Mhe12KC-0rM7-N2OC8juY.roa (hash: WHxjyT3+EtMIryAC/JwnPc9urARuQ9qJ9/o50uStOZk=)
                          3: QPyAJIUON4G4tX46dieXV6CSDPw.roa (hash: mWn0PQCuoeDc/wLK7pLB85zcCXi6wOqEnTUyXmjEFZw=)
                          4: vW-jeiSDz1efqGJQEZrAEzR1qtg.crl (hash: 7+qW+lO/s+MObPw1+trEw5+LWy1liaJtCsP7nWCDVdA=)
                          5: ytHgJTSko6lE6q80ot6eCy_M1Uw.roa (hash: pUNQ4etbz9JSqETlm90fA/PxT0T+M8EEPtzIOUXQbV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:0e:a1:b7:a8:e8:b4:ae:8d:cb:46:98:2e:57:74:06:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8
        Validity
            Not Before: Feb 16 12:00:34 2025 GMT
            Not After : Feb 17 12:00:34 2025 GMT
        Subject: CN=e608059e6cfaa886cf7df228659b0f08d9a3cdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:62:34:fd:03:7a:f2:cc:7e:69:60:b5:3b:
                    4f:b8:ea:b7:81:77:23:81:37:22:ec:98:a7:57:0c:
                    66:0a:ba:2f:3f:14:18:6c:c1:b7:2d:39:02:54:52:
                    43:b3:9a:7b:49:bd:8b:67:85:2c:d3:72:d2:81:a7:
                    1c:64:0e:40:bd:98:87:13:b0:51:50:e0:5d:e1:09:
                    24:1f:56:43:67:b0:96:1c:fd:d3:c1:d7:8c:e4:a0:
                    a7:af:42:0c:f3:bd:a1:69:1b:1b:41:05:43:e7:61:
                    52:6d:35:a3:81:35:44:aa:8d:73:5b:52:18:01:c1:
                    83:8a:5f:05:44:07:db:9a:e8:b6:d0:b9:15:bc:a2:
                    38:79:77:7a:c0:92:4f:0f:d1:bc:78:a7:da:bc:d6:
                    6b:48:ac:a2:2b:33:48:b2:e7:9a:64:94:41:4c:78:
                    6b:cd:18:88:bd:1c:6a:38:f6:87:0f:b3:54:83:32:
                    86:41:04:3f:bd:f5:42:7d:b0:d8:7e:0d:88:54:a5:
                    19:7b:68:c9:43:9e:47:b9:e0:c1:bb:dd:b4:25:b6:
                    52:5d:39:3a:3f:73:68:dd:a2:f4:14:da:de:a8:48:
                    01:d7:38:0c:10:e2:0a:d6:40:08:0c:49:df:76:f1:
                    c1:6b:fa:b0:6d:b6:45:c1:1b:3d:a4:76:87:67:90:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:08:05:9E:6C:FA:A8:86:CF:7D:F2:28:65:9B:0F:08:D9:A3:CD:B9
            X509v3 Authority Key Identifier:
                keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:15:0b:77:61:7e:bb:1c:db:bc:3b:72:6f:8d:89:ea:d9:a9:
         b0:26:9e:32:4f:7c:d1:2f:b9:ba:84:18:1b:b8:77:77:ac:53:
         3b:74:68:94:22:04:5e:6e:aa:e9:5a:60:18:cf:a5:d0:bb:da:
         17:3f:19:88:29:cd:04:07:10:61:6f:fc:cc:74:2e:55:e4:de:
         0f:d2:e6:1a:c8:29:36:ff:b1:53:33:c9:58:a1:db:37:41:f5:
         fc:21:46:24:a0:cc:74:42:5c:2e:e5:8c:3c:4d:59:07:d9:97:
         c6:5b:d0:b7:fd:bd:de:f4:56:42:4f:1b:8c:e9:63:9c:8b:ad:
         b6:dd:91:5d:c7:26:e1:f4:07:f5:8b:b9:70:32:bb:d1:9a:0e:
         17:73:a3:48:f2:0b:f3:e1:8d:ac:df:de:07:17:7b:0c:33:f0:
         15:38:3e:5c:92:53:96:a1:bf:03:75:d3:04:a4:93:bf:65:64:
         b1:d2:60:e6:2a:b6:6c:18:81:b3:8d:4f:b1:47:9d:b9:3e:96:
         bf:01:a5:91:3d:66:a1:4b:01:21:e0:0e:e9:d4:5f:56:73:9b:
         d5:bd:af:71:cb:a9:9d:4d:71:e0:74:81:0b:77:46:81:89:b5:
         c0:e8:af:87:9e:6a:77:a3:98:3f:67:55:72:1f:38:9d:ed:cb:
         c0:7b:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:26 2025 by rpki-client