Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File:                     Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier:          uUHyYEGEo7gp7nP0i08Ms3yREMxopCgaRvF30TyYoOk=
Subject key identifier:   C8:E5:43:A6:9E:85:84:57:4E:9A:F3:CC:57:AE:B9:53:CA:1E:5E:E5
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer:       /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial:       019510FDDBFB31D4942F422129A2ED1FF44D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number:          1131
Signing time:             Sun 16 Feb 2025 23:00:27 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:27 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:27 +0000
Files and hashes:         1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: fc9WQPfvpAMUJCdNNMhdrhki3qyjprVlQFpFRgdOrFM=)
                          2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fd:db:fb:31:d4:94:2f:42:21:29:a2:ed:1f:f4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
        Validity
            Not Before: Feb 16 23:00:27 2025 GMT
            Not After : Feb 17 23:00:27 2025 GMT
        Subject: CN=c8e543a69e8584574e9af3cc57aeb953ca1e5ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:57:96:42:d3:ee:a5:01:7f:f3:b5:f9:bf:
                    0e:00:d8:f7:52:7c:10:1e:a0:d4:d6:1f:40:11:a9:
                    83:c0:0e:f4:f0:2b:67:25:e6:4a:57:23:c2:cc:9d:
                    75:78:f9:ed:7d:9c:24:43:41:f9:5d:ab:8f:54:ea:
                    8d:f7:92:ff:e2:b9:29:cb:c1:dc:da:bc:fa:aa:9c:
                    58:8b:ee:97:86:58:44:9f:85:ea:c8:f0:e1:30:79:
                    d4:4f:d3:b0:87:72:79:85:0e:78:76:fb:52:07:3f:
                    4a:41:4c:7e:4f:d1:53:6a:e1:bc:71:5a:7c:0c:40:
                    9e:15:1f:9e:3b:92:a1:03:fc:ce:a3:6b:da:da:59:
                    91:97:62:cd:b5:4f:00:9f:20:6a:d7:b1:bf:47:7f:
                    c8:11:9b:7a:5a:48:ce:82:2d:f3:a3:5d:27:e4:fc:
                    49:91:80:83:b2:5c:ea:99:1a:81:5f:4e:da:ed:45:
                    d4:21:73:8d:cd:d1:28:84:b0:76:6d:a7:e6:bf:23:
                    ef:10:86:eb:31:0d:36:44:89:9d:65:60:bc:b5:f8:
                    46:4c:0b:c8:c3:d7:c0:25:3d:b0:31:7f:16:44:19:
                    63:e2:a7:d0:e7:00:e0:ba:5a:4f:b7:f4:c8:2d:d6:
                    f8:77:d0:87:a1:40:96:a9:ef:d2:be:cd:51:39:0c:
                    d7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E5:43:A6:9E:85:84:57:4E:9A:F3:CC:57:AE:B9:53:CA:1E:5E:E5
            X509v3 Authority Key Identifier:
                keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:e8:41:57:d6:c8:a5:c3:d9:53:30:20:e6:30:c6:a1:a4:c3:
         a2:6e:47:ec:fc:1d:47:5f:05:5d:8f:a0:ad:e5:05:00:6f:12:
         bc:64:c3:3b:6a:28:bf:c4:a4:ef:06:28:2f:7c:6d:42:c2:2b:
         ce:7d:00:59:67:e1:a8:58:68:61:e2:0e:e4:60:18:27:08:75:
         7d:17:2e:d6:7e:46:ad:8d:07:a0:10:4a:13:62:e1:40:47:03:
         e3:b5:11:f3:fb:53:cc:fc:da:8d:fe:d0:94:88:0f:1b:d4:f4:
         ad:31:c8:51:42:05:d1:3b:67:6c:2f:56:60:da:88:4b:67:c0:
         89:47:42:04:79:aa:a7:b6:44:54:2a:ab:bb:09:93:6a:5e:77:
         41:4b:ef:18:43:a5:91:c8:0f:6e:d1:06:b4:d9:a1:5e:f1:44:
         05:1d:8f:1a:b9:e0:7d:b1:9d:75:7d:3d:09:59:21:6a:31:22:
         e6:e0:31:1f:19:cb:bb:f3:a5:2b:bb:0c:16:e1:7c:38:a7:04:
         7b:64:a0:e3:23:e6:ad:73:7d:6a:77:28:7b:a4:b1:9c:5c:9d:
         cb:e0:03:dd:57:a6:2f:aa:85:86:d3:a5:56:0f:8c:f7:4b:d7:
         9b:81:51:04:e8:45:5f:3a:57:0b:c3:03:4c:47:9f:a0:0a:0f:
         b5:71:78:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:36 2025 by rpki-client