Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
File:                     eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft (raw, json)
Hash identifier:          M93yhQGTsU90t+CHlCPEtoAlbZVS2OfGZ6LH9E4KP8I=
Subject key identifier:   3C:49:83:4F:FB:38:C5:0C:57:21:39:E2:34:EA:E5:9B:86:C0:E3:E4
Authority key identifier: 7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A
Certificate issuer:       /CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
Certificate serial:       0195121062C94C93B7F834F456795766C5E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
Manifest number:          048A
Signing time:             Mon 17 Feb 2025 04:00:18 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:18 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:18 +0000
Files and hashes:         1: eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl (hash: w6NbWLQ3pojfl94Hvd5YhHdKshpMGQIZzYj7By+13wA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:62:c9:4c:93:b7:f8:34:f4:56:79:57:66:c5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
        Validity
            Not Before: Feb 17 04:00:18 2025 GMT
            Not After : Feb 18 04:00:18 2025 GMT
        Subject: CN=3c49834ffb38c50c572139e234eae59b86c0e3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:dc:dc:9b:e4:cd:45:b6:8d:2b:d6:de:b8:
                    88:2d:28:ce:7f:8f:a2:2a:40:ea:ae:ca:37:63:94:
                    f1:60:f5:9d:14:1f:49:e4:eb:30:a6:9c:16:87:97:
                    2a:56:50:de:06:de:9c:14:68:3b:ac:ac:2c:99:ad:
                    c4:24:57:2d:30:12:d0:b0:6e:2a:59:83:49:6c:5f:
                    cb:c2:f3:db:e7:ac:4f:ab:f6:1a:7d:63:03:b6:d9:
                    87:73:1c:af:cc:3f:27:85:d9:8a:8c:df:3b:14:e1:
                    87:33:c2:ee:75:6c:87:82:70:c7:e7:5e:30:d2:a7:
                    ac:3d:59:26:40:3c:c7:a4:64:ce:8c:14:17:d8:19:
                    7f:82:e3:ee:3f:04:c8:aa:09:71:f0:c6:88:f4:ed:
                    ba:4e:f6:a2:7b:c8:4c:5b:ce:e3:c3:f4:ba:a0:65:
                    3e:7a:0f:55:71:f6:fe:53:6a:23:8d:d2:8b:dc:c2:
                    a4:fa:19:89:5f:18:15:8c:1a:c0:99:4f:ea:9f:f5:
                    37:a5:35:01:1e:12:f8:03:7a:2f:7d:37:b9:cf:7d:
                    79:6d:26:66:7d:ca:20:14:c7:26:19:97:60:6c:81:
                    a5:d9:57:52:82:57:3b:44:c4:68:4e:92:94:31:ef:
                    07:7a:2b:be:2d:4f:61:d0:5d:55:29:3f:e1:da:68:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:49:83:4F:FB:38:C5:0C:57:21:39:E2:34:EA:E5:9B:86:C0:E3:E4
            X509v3 Authority Key Identifier:
                keyid:7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3e:ce:bf:78:ec:2c:e6:a9:c0:fb:2b:d2:76:21:60:b2:e7:
         d4:fb:70:a0:51:5b:34:83:42:52:d1:8b:c7:b4:d6:f9:97:cf:
         8a:83:f7:ea:10:d3:d4:c2:3c:6e:7a:e2:7e:20:f8:c0:1f:2c:
         e7:d9:87:69:71:3e:97:2b:4f:90:5d:1e:64:94:b8:d3:dc:c6:
         a3:b4:0b:05:9e:0e:19:df:66:c3:c3:94:2f:05:e3:ad:90:aa:
         40:6d:fa:f4:ff:49:f8:68:49:14:c0:cf:67:14:6f:dc:8e:40:
         34:11:09:fb:c1:7e:65:f1:ce:4d:13:f9:95:33:96:e0:33:d7:
         89:47:c5:69:ba:64:ef:bb:32:40:be:84:7b:03:ae:f3:6c:17:
         9e:97:f3:e3:34:c0:cf:04:d3:67:42:cc:4e:d2:bd:7e:35:7f:
         6f:a3:17:3b:1a:39:12:44:ae:83:61:f6:c0:0f:1c:a9:67:3b:
         89:b1:d9:59:34:1f:cd:99:1e:d0:e4:d6:46:2d:70:2b:c9:cb:
         1d:ed:94:a2:7e:10:08:51:cb:1c:1e:b6:03:ed:42:fb:49:a0:
         3f:24:34:fb:48:a8:21:65:86:a7:84:2b:23:bc:de:fc:0e:81:
         4c:99:37:a1:e9:17:9b:9e:48:55:10:b7:f7:6d:a0:c7:81:0b:
         b7:8c:7f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:43 2025 by rpki-client