Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File:                     7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier:          QVfyGAi9yxgJvFmP4XD16/Qm9HvJSVqBEYNJ/Bj/R/0=
Subject key identifier:   93:63:65:FB:BA:0E:9D:43:A8:8B:08:F5:F7:2C:A6:08:11:0F:B0:FD
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer:       /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial:       019511A27A69CBF36E2113B9909182B6D0CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number:          0864
Signing time:             Mon 17 Feb 2025 02:00:15 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:15 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:15 +0000
Files and hashes:         1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: 6XdWj+psYY22pFCedin8/BllCh2EkLyCq4z+LVmYlAQ=)
                          2: X1JkS3uwHtAkqyPH5ViWJPHV9Uc.roa (hash: txiqMZuBc/HjQ/EutSSi10aRPrL/flvGPy+EKHQ4msY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:7a:69:cb:f3:6e:21:13:b9:90:91:82:b6:d0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
        Validity
            Not Before: Feb 17 02:00:15 2025 GMT
            Not After : Feb 18 02:00:15 2025 GMT
        Subject: CN=936365fbba0e9d43a88b08f5f72ca608110fb0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:be:5d:4a:a5:54:cb:bf:cc:ca:5c:8b:7d:3f:
                    3c:ad:80:03:5d:d7:da:bf:c8:84:7a:4e:44:d6:72:
                    79:d6:f1:4a:bd:61:6a:73:db:c8:ab:e7:5c:d0:4a:
                    02:1e:38:ea:b0:33:36:1b:70:24:ca:83:60:8c:25:
                    5d:c7:34:d1:3c:45:9b:8d:26:72:d5:e7:2c:68:f3:
                    3e:31:22:5b:b2:0e:97:60:29:99:3e:5b:02:34:8a:
                    af:75:38:1d:00:5e:4b:9e:44:ff:c5:96:51:33:c5:
                    64:b4:b3:97:be:64:55:87:e8:7f:d7:3b:a6:f2:c1:
                    1f:4c:d2:bc:33:e2:b1:00:4d:9d:c8:c7:bd:ad:f1:
                    e9:f1:e7:4c:e4:a0:de:c6:cc:2f:ff:6e:a9:5a:66:
                    7e:da:34:8b:30:38:a7:29:90:cc:bd:21:1e:11:9d:
                    a9:98:85:c9:8b:f2:df:dc:83:c3:e7:4c:01:6a:de:
                    9e:10:64:f1:6a:e0:6c:b5:9e:32:67:61:a6:a0:83:
                    58:5a:04:84:e5:8d:fe:47:c6:0b:f1:fe:7a:c1:a5:
                    cb:30:ab:62:09:09:ab:21:a7:6c:94:e8:24:68:84:
                    15:6f:f6:d8:05:2d:07:37:8b:56:f3:54:5c:05:22:
                    c0:e6:c4:14:9a:3e:d5:49:06:68:6b:bb:bc:98:62:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:63:65:FB:BA:0E:9D:43:A8:8B:08:F5:F7:2C:A6:08:11:0F:B0:FD
            X509v3 Authority Key Identifier:
                keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:43:fe:4d:37:71:e4:83:d0:0a:74:2d:06:d7:15:07:6b:d3:
         ff:ca:d5:25:a1:07:5f:9d:86:bf:bc:e7:0f:6d:ab:25:65:9b:
         14:53:83:34:bd:76:fc:39:a6:94:98:b6:72:50:51:07:b4:1f:
         b1:ec:7e:05:c1:d3:60:89:ef:4e:16:e5:d4:b2:0f:be:af:4c:
         e2:30:cc:c3:de:d6:be:51:81:3c:e8:a4:a2:24:20:74:2d:88:
         7e:7e:5e:f7:a2:bd:99:85:b2:1c:97:36:5a:a2:52:0b:98:7f:
         e8:f3:33:74:3c:5f:3c:95:6c:ad:09:40:7b:ba:ec:2c:d7:b3:
         51:8c:d9:7f:cd:c8:a4:23:a8:41:19:2a:82:bd:c0:3b:e8:dc:
         e7:25:7f:87:f3:67:51:8c:ac:e7:13:f7:b1:ce:94:99:c8:4c:
         ba:c4:34:11:25:b5:81:02:c7:af:00:31:3b:05:fe:3b:bc:4c:
         24:b3:4d:ab:66:ed:b3:6b:4c:9b:71:8c:be:59:15:6f:ad:f0:
         97:30:c6:15:59:be:82:21:da:5c:47:f1:45:43:98:39:aa:ce:
         7f:13:5c:b5:14:05:64:cc:c1:01:ab:3b:14:4f:e8:81:83:fb:
         87:37:9a:a6:74:d5:eb:83:f6:c8:94:a6:81:58:68:cd:86:8c:
         41:d6:fd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:04 2025 by rpki-client