Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
File:                     OvdxDfit1ku5aI4PRYG-pn5ALGY.mft (raw, json)
Hash identifier:          kOZDQwipZqNo3e4q1/6foVliBQf7sBJAOWvuJzmh0H4=
Subject key identifier:   1A:EC:65:AC:8E:01:8F:E1:AD:42:4F:B5:DA:D9:B6:AA:DA:74:15:1D
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Certificate issuer:       /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial:       01958C6105ED2A289942243BCD6211A19427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
Manifest number:          09CD
Signing time:             Wed 12 Mar 2025 22:02:03 +0000
Manifest this update:     Wed 12 Mar 2025 22:02:03 +0000
Manifest next update:     Thu 13 Mar 2025 22:02:03 +0000
Files and hashes:         1: 1-5V6RXgQOXjxU3mO34q_0PmmYk4.roa (hash: UBzppXP3Ubih2qJBoeebTWZSAjaul2dwW+uHzrrKrpI=)
                          2: EyL9qIdoOkum4j70O97owcKKNdo.roa (hash: CPup2t2Dcwh/1Zx2zcdDGMOwGKKSbKozTe/yHf2vibg=)
                          3: FlLUDtJLemuN_BKbJN1fJcTs1uc.roa (hash: 3dx+bvVn8Sv+QH7LBpP0VRkLuWwRZFyVuuQwWb9qaTw=)
                          4: OvdxDfit1ku5aI4PRYG-pn5ALGY.crl (hash: u+RuZRbSJUVw2UkybrpUUoVUQBVGh7/+6H7WGuWBd3I=)
                          5: mdUceimjZwfVVG0REiUEooQJhAE.roa (hash: LzFwucR3C7CoRMDtQiS0SQDDS6RSOm6dTPZ+EmCdgOw=)
                          6: ozrTdpe1V6nWhIXc_uPJkbB3Ha8.roa (hash: 4/0gezw7oO9+Mipv3nHjnHIMLwCz0D23SE1aqFovk9Q=)
                          7: pz30gP5HXmvVhezEbR2M9x5jpYg.roa (hash: zMuCQqFnbVDZWipMHPrJQB2cNPEYXwDyxtFSxkBu5H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:61:05:ed:2a:28:99:42:24:3b:cd:62:11:a1:94:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
        Validity
            Not Before: Mar 12 22:02:03 2025 GMT
            Not After : Mar 13 22:02:03 2025 GMT
        Subject: CN=1aec65ac8e018fe1ad424fb5dad9b6aada74151d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:02:96:07:7e:8b:b5:a4:4b:aa:ae:18:7b:
                    3f:a7:44:1c:8c:88:b8:b3:f4:fe:ca:4a:77:c9:61:
                    93:5c:9e:c9:ff:4e:56:37:db:a5:a4:79:80:57:27:
                    bf:ff:de:b2:bd:5e:ad:aa:de:d7:bd:50:3f:fe:22:
                    1a:9c:47:9a:61:dc:43:7b:63:37:5b:c7:6b:94:b2:
                    b3:cb:91:34:c2:be:ce:26:98:5d:fb:82:19:c5:49:
                    9f:82:39:59:16:ef:c3:ca:b5:14:a2:3d:43:22:64:
                    55:f2:09:8e:ba:b2:07:20:af:98:a4:99:95:d8:95:
                    da:65:97:77:6c:fc:4f:ec:a7:c7:f3:c4:bf:e9:0e:
                    7b:ec:aa:f0:0e:7e:ab:d2:ed:f2:23:f6:bf:c3:a6:
                    db:d0:fd:d6:15:68:c9:93:86:ab:de:de:4c:a8:29:
                    de:32:2b:be:ed:30:9f:74:ad:2a:8b:22:30:bc:21:
                    7e:13:fc:c5:d0:f1:b1:88:49:3b:8e:11:98:19:85:
                    c7:ef:5a:b3:bb:59:24:9f:8a:9e:91:0e:07:03:4a:
                    98:67:67:01:0e:07:34:c0:60:b3:27:53:8e:06:1f:
                    cd:7c:fb:62:80:1a:bf:c6:58:9f:e3:e6:5e:d0:7a:
                    c3:f7:a8:64:11:d5:59:c5:ed:7d:5d:9d:78:20:04:
                    4c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EC:65:AC:8E:01:8F:E1:AD:42:4F:B5:DA:D9:B6:AA:DA:74:15:1D
            X509v3 Authority Key Identifier:
                keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:d3:ac:fc:85:c7:be:c9:f5:2d:48:57:3d:b6:a9:5c:bb:
         f0:e7:1a:e8:ba:fc:f8:68:5b:8d:2f:10:d4:20:9f:05:55:5e:
         e5:6c:6e:47:db:50:09:33:bf:85:d1:d0:79:7a:01:8e:5c:2f:
         41:7e:9b:aa:b9:1f:00:84:35:d8:63:a8:e3:51:65:d3:1a:10:
         96:88:21:0a:15:9b:bb:1b:bd:5a:1a:2a:86:af:64:5f:f9:f8:
         5a:93:69:b7:26:68:7a:e6:18:76:75:e4:c8:9e:19:df:cd:f4:
         d8:dd:6b:74:00:03:d3:0a:97:18:40:e2:20:41:83:13:61:34:
         29:8a:df:18:56:f8:45:4e:70:c9:25:7b:06:84:50:9d:ed:cf:
         09:fb:13:8d:b6:6e:e2:33:44:4a:eb:df:52:dc:6d:2b:a2:6a:
         dc:ff:4f:c1:c1:07:2b:09:bd:f5:da:34:74:98:73:77:9d:97:
         b0:23:95:47:e2:b3:54:4d:60:0e:a7:93:96:f0:6e:0f:41:af:
         3f:4c:82:1f:26:b2:af:db:6a:34:2e:d7:ab:34:50:df:e2:50:
         6f:72:25:d8:32:4e:a1:00:c3:35:84:67:09:25:68:4d:a7:0a:
         aa:26:c9:40:3a:b4:b0:03:de:35:be:f2:a3:50:a6:89:0a:1d:
         c2:3c:48:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:50 2025 by rpki-client