Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
File:                     C-vO5NIzea7YGuz_x6dCs1rN3bM.mft (raw, json)
Hash identifier:          VHO424FcWpl9hxdd9Q6hVkCzKdbPyfmuYjWbut14j4U=
Subject key identifier:   B9:F9:0D:CF:A5:B5:AF:CE:AD:4C:FA:9B:5B:78:0B:C6:FD:69:46:60
Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3
Certificate issuer:       /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
Certificate serial:       01951157360AF1F52DFC4ABFFC42EF0ACF08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
Manifest number:          0420
Signing time:             Mon 17 Feb 2025 00:38:02 +0000
Manifest this update:     Mon 17 Feb 2025 00:38:02 +0000
Manifest next update:     Tue 18 Feb 2025 00:38:02 +0000
Files and hashes:         1: AUtsyV4GoOAXKw9J3JJYlvWZMCo.roa (hash: /0BCHflij9PTsqkAVxlV2lPjueYr2KbGYcBxxZ+N59s=)
                          2: C-vO5NIzea7YGuz_x6dCs1rN3bM.crl (hash: vFGF9a31zrzdMyQXG8Sr7/xRzEGg7eeM6BpnLLIwLEY=)
                          3: mV1hZytX8BcNK6MuHKBDE6HH6LY.roa (hash: Izn1ppuqIeq4brUj4agoXptLWgkQ3/6X3t/Q9E4R05U=)
                          4: tsJwFZrDXIRwjLakU6dbnqENzD0.roa (hash: wlsUyedxgDvePxXhoMuofoRM97SDv+ta+Oc6E/8MG7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:57:36:0a:f1:f5:2d:fc:4a:bf:fc:42:ef:0a:cf:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3
        Validity
            Not Before: Feb 17 00:38:02 2025 GMT
            Not After : Feb 18 00:38:02 2025 GMT
        Subject: CN=b9f90dcfa5b5afcead4cfa9b5b780bc6fd694660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:b8:d7:35:8c:fc:79:02:68:e2:fb:00:e8:
                    c1:e9:3e:f5:61:15:e6:a3:37:45:4e:64:ba:2a:f1:
                    3d:55:3e:9a:09:0f:ed:bc:87:3d:5b:1b:a6:5d:b8:
                    e0:65:9a:88:fe:f9:aa:24:72:4a:fb:9b:56:a3:16:
                    53:76:7e:e2:35:9b:18:b5:d7:68:3e:7b:34:03:56:
                    ba:8d:58:21:68:c1:72:97:2e:65:57:82:c6:0b:ef:
                    03:4f:d5:e5:0a:f5:0d:56:f0:5a:13:44:2b:02:1a:
                    2f:fc:a7:6d:e7:1b:84:dc:d0:a1:f4:b1:b9:0f:ad:
                    80:8f:a8:8a:d7:6a:08:ec:dd:70:91:f9:8e:1e:51:
                    7b:03:1d:c5:f5:0b:c0:61:e4:6b:a0:a3:55:e0:f2:
                    08:73:5a:1b:1f:2d:a3:cb:64:fc:ba:05:8b:2e:7d:
                    c4:8b:d9:16:3a:3f:51:c4:66:0c:be:b5:32:e5:c3:
                    12:a8:3d:57:d7:2b:49:a3:47:0c:00:6e:6a:8b:1e:
                    c1:e7:44:fa:66:24:72:83:1e:dd:27:38:36:cc:3e:
                    37:d3:34:b9:88:74:b0:bb:50:5e:32:2f:00:e6:23:
                    12:e6:b6:61:18:35:68:03:39:92:ec:c9:c8:2a:bb:
                    d8:8c:eb:9f:72:aa:6b:44:61:de:84:4e:9c:26:9a:
                    17:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F9:0D:CF:A5:B5:AF:CE:AD:4C:FA:9B:5B:78:0B:C6:FD:69:46:60
            X509v3 Authority Key Identifier:
                keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:a6:8a:c2:1d:dd:57:7a:80:a4:67:15:d2:8f:89:47:e0:88:
         84:87:a8:98:76:db:af:b5:21:50:12:6a:39:05:42:a2:04:4f:
         ee:83:33:46:a1:00:a1:2e:8c:2f:48:dd:d7:5a:7e:50:c4:cb:
         24:0c:bb:bd:b9:e7:a7:5a:ec:6a:a5:9e:42:58:85:04:11:08:
         b5:a2:b1:8c:1d:85:e7:e5:c2:a8:d4:4b:d3:93:19:6e:73:f1:
         87:78:23:37:00:ae:b1:de:ea:5d:04:2f:cd:d8:76:f9:a3:84:
         09:f3:2f:5e:ac:78:65:58:e1:08:42:c8:b1:33:5c:21:19:8e:
         12:b2:97:87:0a:c3:7b:f7:c4:6e:c6:5d:49:da:25:49:2f:ea:
         ee:3b:39:f9:fe:8d:be:4b:1e:24:c1:35:a7:fa:97:5d:38:53:
         0a:c3:13:8c:4e:ec:c1:14:f3:fb:8a:e9:74:4e:af:54:88:1c:
         12:bb:b3:4e:04:04:69:84:cb:35:69:cf:6d:c2:9e:6e:5c:6d:
         9f:f4:73:47:e0:a2:79:ec:47:de:28:fa:4e:9f:89:cb:e7:0f:
         53:b1:f8:b1:f9:97:c2:17:e2:b3:76:e2:e8:6a:99:3b:63:15:
         db:79:f1:fa:54:2e:58:3a:c7:a4:24:da:a8:44:8c:e9:d8:2d:
         3e:34:96:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:54 2025 by rpki-client