Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
File:                     mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft (raw, json)
Hash identifier:          uIZvIza6cnDll7VGOksAGS5LSy3v+87oe5dL8PnDeD4=
Subject key identifier:   BB:E6:90:DD:9B:E5:38:C7:6D:3C:D2:F1:A8:0C:38:8D:CC:49:8E:7C
Authority key identifier: 98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43
Certificate issuer:       /CN=98ccb184d128384e4f767d85258e0dea73f18e43
Certificate serial:       019510C7B466A6C11052D991EBC2D18CB0CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
Manifest number:          0B66
Signing time:             Sun 16 Feb 2025 22:01:18 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:18 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:18 +0000
Files and hashes:         1: XmG_f-d3gNbPjbSDpmMbIo-fVYM.roa (hash: Fqg1Y9uWeIH+04MjOxb6IraF8tekNjl9/R9LcKgfLEw=)
                          2: mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl (hash: jEvM4ycWX2/g1cD34WcWHss0Se3jeECWGHciDXX5HtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:b4:66:a6:c1:10:52:d9:91:eb:c2:d1:8c:b0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98ccb184d128384e4f767d85258e0dea73f18e43
        Validity
            Not Before: Feb 16 22:01:18 2025 GMT
            Not After : Feb 17 22:01:18 2025 GMT
        Subject: CN=bbe690dd9be538c76d3cd2f1a80c388dcc498e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:41:21:b1:3d:cf:4b:ec:ef:f1:7a:fe:18:
                    69:3c:3f:58:02:cd:1f:7f:37:88:2a:6f:68:0f:fc:
                    ab:fc:fd:03:39:b5:11:93:1e:ca:2f:7f:f9:f3:94:
                    0b:8f:d8:c1:b8:6c:9a:3b:82:3d:15:f6:06:4e:be:
                    81:99:c7:b1:21:94:f7:a0:cd:c3:af:82:b0:5d:42:
                    21:32:17:6e:14:b9:54:4c:5b:13:c9:40:e3:08:b6:
                    fe:b5:40:c0:71:de:f5:90:a6:c8:39:6d:f1:d1:3b:
                    9b:4f:3b:e8:2e:68:21:aa:ec:e1:63:ec:0a:45:34:
                    3a:b4:f3:83:4f:4e:70:cd:1b:f3:36:9a:cd:ac:94:
                    99:99:b9:7a:1b:cd:95:b2:e9:12:c7:f9:09:55:f9:
                    61:f6:da:57:11:72:10:fd:4f:33:97:96:92:db:9d:
                    77:75:d2:1c:7c:7b:58:dd:63:09:05:06:b4:03:82:
                    60:2e:2b:33:21:60:81:48:28:06:c4:d2:8d:59:55:
                    ae:18:06:36:6a:74:8a:5e:37:63:78:04:e5:e2:bc:
                    08:65:f6:d9:22:c4:1e:d7:c8:7b:98:d5:ea:d9:6d:
                    d9:56:90:3b:ba:1e:e0:43:69:09:a2:e6:42:76:13:
                    89:de:f9:3f:48:d1:51:5a:56:53:2d:93:a0:ef:f6:
                    a5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E6:90:DD:9B:E5:38:C7:6D:3C:D2:F1:A8:0C:38:8D:CC:49:8E:7C
            X509v3 Authority Key Identifier:
                keyid:98:CC:B1:84:D1:28:38:4E:4F:76:7D:85:25:8E:0D:EA:73:F1:8E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/37253d-02a1-46df-9413-580068df0fd1/1/mMyxhNEoOE5Pdn2FJY4N6nPxjkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:90:18:03:5e:16:6b:1d:d9:b1:6e:e8:e4:4a:aa:58:98:ea:
         ac:ea:fe:ad:5e:c4:ab:21:96:75:a9:f9:fe:9b:e9:47:48:47:
         4a:ec:0c:4b:34:16:1d:6a:93:40:ba:bd:3b:b6:29:58:63:e4:
         58:22:f1:e5:48:fc:23:51:6a:98:de:78:2f:d7:3f:16:d1:a0:
         bb:aa:f8:22:f4:ae:b8:3f:00:e2:57:d8:86:2e:8a:13:b9:42:
         35:5f:19:ea:dc:4f:b9:1d:9b:cd:2f:16:28:90:a0:53:cc:a1:
         b5:80:e8:b4:44:0c:7a:0f:ac:f6:06:c4:5c:61:11:d0:97:20:
         70:2c:2c:2c:35:b9:1d:81:3c:20:27:81:99:3b:0f:f7:1e:21:
         ca:f0:fd:b7:85:4f:06:9d:1d:6e:1e:f0:32:5d:21:d5:c2:3f:
         1e:91:14:e0:ce:8c:df:c1:f9:04:b4:8d:ce:cb:e5:71:84:d0:
         20:3d:e8:fe:ee:53:60:fb:fc:ad:d4:9f:7c:fe:f9:29:8b:cf:
         d1:3b:98:6d:06:8f:df:36:93:ee:7e:2f:1a:00:29:04:68:0c:
         31:eb:9b:0c:c5:77:09:47:ad:9f:42:18:cd:9b:f4:10:07:de:
         9f:ca:d1:0f:4c:e7:ec:a2:45:c2:61:ae:b6:bb:9e:8b:3b:37:
         70:e3:4b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:11 2025 by rpki-client