Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
File:                     g103QIoiXxqJZPjXK8mdm75TMjQ.mft (raw, json)
Hash identifier:          r7PhbJ1DJ2YuvPB9MfmkycqJkctk9/DGlX7lc5RrKFo=
Subject key identifier:   0F:64:98:83:17:41:D4:FF:86:AE:73:9A:CC:D0:74:C8:71:9A:A7:88
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Certificate issuer:       /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial:       0195903D7739DE58BB9488B92071F8B1DA88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
Manifest number:          1468
Signing time:             Thu 13 Mar 2025 16:01:42 +0000
Manifest this update:     Thu 13 Mar 2025 16:01:42 +0000
Manifest next update:     Fri 14 Mar 2025 16:01:42 +0000
Files and hashes:         1: g103QIoiXxqJZPjXK8mdm75TMjQ.crl (hash: 8XXjYE/R5q/1+sYmNHlyAGdAEGWeLw9/YItLPwqrmIA=)
                          2: wmXlcNkh_2vesQLMJed5vd6SqTE.roa (hash: yFr4o4FxK8GJrbTrCTeUvkik35biGf8xB3yfWuA7Ue8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:3d:77:39:de:58:bb:94:88:b9:20:71:f8:b1:da:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
        Validity
            Not Before: Mar 13 16:01:42 2025 GMT
            Not After : Mar 14 16:01:42 2025 GMT
        Subject: CN=0f6498831741d4ff86ae739accd074c8719aa788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:bc:0c:8f:d1:16:d4:69:8c:e9:93:8b:a6:
                    a4:f2:2d:6d:d7:db:88:9b:cd:b2:c4:1a:d2:7a:96:
                    b7:ac:e8:66:d0:8d:39:58:16:73:fc:1f:c8:06:cb:
                    d2:65:d6:e9:b0:ca:9a:7e:6d:d5:bc:09:7e:99:b3:
                    2d:a7:81:c6:35:bd:6c:fb:58:ed:50:56:6f:71:cb:
                    3c:46:e6:f5:3e:5c:58:e2:c6:5b:86:48:ea:ad:7c:
                    9e:72:58:e2:d4:f7:96:e8:53:54:83:5b:ba:5e:c3:
                    8f:6b:84:c1:36:96:2f:48:45:72:61:01:71:5e:ca:
                    95:47:30:cb:0b:f9:f7:eb:2a:25:43:ce:a3:e3:7d:
                    0b:19:60:91:5b:16:e5:f6:a6:db:e3:c2:8d:91:44:
                    d2:d2:f7:fd:b4:e1:da:ed:eb:5c:f1:8e:f6:f9:26:
                    f3:d8:45:76:8d:cb:3f:9e:b4:06:6a:26:ae:56:b6:
                    bc:86:46:ff:88:02:09:7f:09:2d:22:c7:f1:b2:d8:
                    92:d4:d6:8c:0c:dc:0c:69:d8:8c:dd:0f:3e:15:33:
                    51:b5:a3:77:86:4d:08:13:31:10:2c:99:aa:49:bd:
                    ba:fc:a4:91:19:9f:61:ac:7c:1f:21:05:4f:32:0c:
                    db:d2:11:c9:89:3a:c5:99:7b:0f:f7:8f:b0:f8:c7:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:64:98:83:17:41:D4:FF:86:AE:73:9A:CC:D0:74:C8:71:9A:A7:88
            X509v3 Authority Key Identifier:
                keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e0:24:ac:51:f6:0f:3d:e6:be:a9:24:ce:7a:11:3f:12:cd:
         73:96:f6:6f:72:25:dd:31:b0:b9:d6:5a:e9:98:7e:b6:2f:fd:
         22:94:01:e4:82:78:81:fa:5c:b3:79:17:0f:75:b7:38:d0:20:
         45:68:90:69:e4:cc:03:54:44:09:98:3f:58:4f:b7:90:66:44:
         35:ec:a2:e1:00:fa:de:6b:b1:24:cd:0c:66:88:07:4b:4d:6a:
         87:37:b6:c1:8a:bb:16:8e:f3:d3:67:46:a1:ed:9b:81:7b:98:
         8b:25:e7:c7:09:6f:59:ce:d2:67:65:af:ea:18:5b:f8:9a:5d:
         74:1f:19:be:64:a5:16:69:67:74:da:e0:f8:fd:6a:57:d9:78:
         7e:a1:32:01:77:fd:8b:4a:b1:6b:45:9c:d4:94:74:03:84:8e:
         d8:e2:4d:5a:14:b8:71:34:41:e3:1b:f9:d4:3f:c7:16:40:53:
         54:f8:87:6d:3e:51:67:6e:31:b7:91:2b:92:04:b4:87:01:c8:
         6b:aa:92:db:d6:a6:a7:53:f8:dd:7a:43:a5:fd:51:f2:9c:84:
         b5:6f:69:b6:d7:70:f6:8b:71:78:e9:b5:da:dd:78:5d:d4:55:
         6d:e3:5a:1e:d0:8a:da:a3:d5:95:00:5b:38:15:92:9f:d4:cf:
         12:68:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:15 2025 by rpki-client