Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
File:                     B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft (raw, json)
Hash identifier:          +eluaAxNEbwlXI7d8TC/cXdbsvPVs4v80FFoYZzBqr0=
Subject key identifier:   91:2C:23:12:93:8B:60:29:B6:DF:25:18:33:AF:E2:3C:E6:0A:7D:9B
Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
Certificate issuer:       /CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Certificate serial:       019511A2541E035AEBD0250956B3F66936E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
Manifest number:          0B78
Signing time:             Mon 17 Feb 2025 02:00:05 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:05 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:05 +0000
Files and hashes:         1: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl (hash: ySBmFu0UgTSCtA74JiRC6hou6KnC9BXwVKK5gWrG3+s=)
                          2: bKjmtKZ3Q_dbBV89_TPqXOrr9l8.roa (hash: fkweW281SglBT4coSKgBxiwmush3g6XftqB0c+xmAws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:54:1e:03:5a:eb:d0:25:09:56:b3:f6:69:36:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad
        Validity
            Not Before: Feb 17 02:00:05 2025 GMT
            Not After : Feb 18 02:00:05 2025 GMT
        Subject: CN=912c2312938b6029b6df251833afe23ce60a7d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:53:09:01:59:9a:fa:73:21:ac:44:27:0f:
                    76:26:c0:11:e8:3d:fd:56:71:64:c5:3d:42:b7:41:
                    af:a8:89:14:d9:f5:53:94:0f:24:16:00:03:a3:1a:
                    3e:76:ed:5a:5e:85:2a:8e:ce:fb:7b:a3:96:a0:94:
                    a3:c9:15:39:e9:c1:8e:d9:80:92:35:f8:29:cb:a9:
                    e8:56:52:3c:9d:59:a1:4f:5a:ea:e0:c2:b6:62:f5:
                    1a:26:2c:ef:bb:ce:a1:e2:e2:c6:a1:8f:00:94:7b:
                    c7:94:e3:b8:38:d2:6b:0e:ca:06:7f:f0:e3:93:20:
                    4d:1c:c9:cb:9d:0e:59:89:ce:7d:91:b2:85:0f:23:
                    86:6a:b0:f3:5c:89:f8:df:76:71:07:5a:64:b0:9a:
                    34:08:56:ad:ab:47:3d:ca:7f:cb:4a:ec:74:97:a4:
                    da:ed:19:ed:d5:88:35:2c:3d:8e:5f:77:30:1d:c9:
                    72:d2:42:04:82:16:07:84:d1:83:06:16:0f:95:c5:
                    af:7b:b7:8b:6c:3e:71:b7:e3:b8:79:d4:a1:f9:99:
                    70:f5:36:4d:b5:2f:b8:1d:4b:ea:00:78:bf:f5:25:
                    6d:c9:b1:34:38:56:2f:62:58:db:83:c8:a5:ae:65:
                    d3:fd:ca:3e:72:c3:3c:82:bb:82:91:4c:10:92:17:
                    f0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2C:23:12:93:8B:60:29:B6:DF:25:18:33:AF:E2:3C:E6:0A:7D:9B
            X509v3 Authority Key Identifier:
                keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c3:3e:17:10:05:b6:db:a4:88:36:38:fa:06:6b:8a:1b:57:
         c3:26:49:93:a3:a0:47:b0:ba:4d:ff:c9:92:20:35:cc:14:9e:
         42:6d:99:99:ed:4a:a9:da:9e:42:fc:92:1c:92:5b:72:ff:2c:
         39:50:e0:97:0a:78:1a:9b:d0:dc:65:c4:a6:be:2d:67:16:15:
         8e:8a:dc:39:89:71:a1:97:24:f0:99:a6:ef:c2:03:cf:78:ea:
         80:55:f9:83:0e:21:19:cb:75:a2:29:af:08:56:c8:0c:db:e8:
         c4:85:40:43:c4:5d:18:ea:fe:35:51:7e:26:da:e2:8b:ac:59:
         f5:96:f7:65:48:7e:13:c6:37:60:29:e9:97:ca:89:aa:0f:2c:
         11:54:bd:44:1e:d7:55:7a:37:a2:b3:33:ea:cc:9d:be:5b:b1:
         ae:b4:81:bf:4e:e6:e3:48:48:10:bf:e2:b4:22:a8:1c:b3:23:
         30:1e:c6:c1:a2:53:13:10:f0:db:d9:93:e5:a6:28:a5:81:c1:
         f7:03:ac:61:89:89:d3:c5:89:e1:07:e9:57:b6:92:32:4b:83:
         46:f4:36:07:b0:d7:35:db:94:f7:fe:c1:db:08:20:ff:96:ca:
         02:2a:ce:19:8a:46:4a:95:a5:09:e2:e9:66:74:66:67:2b:28:
         1c:3e:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:04 2025 by rpki-client