Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File:                     qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier:          iueKIrDbhc4Unaapm7c3sXqtdmT8foHfSE1J9a5XQiw=
Subject key identifier:   68:5B:4B:93:78:F9:51:08:57:96:C5:DF:28:03:64:DB:EA:65:D0:BC
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer:       /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial:       01951210AF219B65EA9EE67126C810534586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number:          0342
Signing time:             Mon 17 Feb 2025 04:00:37 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:37 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:37 +0000
Files and hashes:         1: EIr__RLMMt-7cOeUxPceAyVLfLA.roa (hash: I7nOwl/EmoWFHPn01B2Q9SwyfzZiNKdHb9+3iK0TA1M=)
                          2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: D95ljxZFPkoOzLi2EEFqnj8l93U/iKSf35OpfDh2S8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:af:21:9b:65:ea:9e:e6:71:26:c8:10:53:45:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
        Validity
            Not Before: Feb 17 04:00:37 2025 GMT
            Not After : Feb 18 04:00:37 2025 GMT
        Subject: CN=685b4b9378f951085796c5df280364dbea65d0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:a4:dd:7c:c9:1b:ca:ef:41:b1:fe:ff:27:
                    b5:8e:40:fb:cc:6d:01:8d:53:f3:49:a6:3f:20:4b:
                    01:de:0a:85:85:a6:33:0f:4e:d0:f5:9c:69:04:a5:
                    e7:58:93:f5:1d:c8:a3:63:e8:a0:54:a1:6a:43:e9:
                    61:c6:b8:58:ae:37:64:67:3c:67:60:83:43:61:9f:
                    a8:37:03:a0:9e:e6:6d:49:d0:7e:2c:35:54:b9:69:
                    a2:37:86:c0:f7:33:91:09:47:77:e1:5e:93:94:b6:
                    73:82:12:e3:bf:d0:5d:2c:b0:52:e5:d3:3d:3e:22:
                    36:41:60:05:a5:f6:14:cb:2c:89:17:2f:3d:a1:f6:
                    d2:cf:0d:a7:e7:0d:68:6f:da:b0:7f:43:31:53:44:
                    f6:db:a2:b2:3b:a6:e0:9d:5a:e0:42:54:d5:45:8e:
                    b3:32:20:36:40:08:28:0f:fb:ac:52:ac:88:41:d8:
                    f0:63:33:bb:c2:dd:cd:95:e4:b9:ed:fc:a6:48:f5:
                    6a:83:0b:e1:00:f5:a3:85:21:68:1a:75:74:fe:75:
                    7b:a0:b0:91:4e:ec:c8:52:b5:00:e8:2d:7a:82:16:
                    03:34:f3:e8:f6:f0:6d:4f:a7:38:96:66:6f:c8:60:
                    3e:68:70:0c:e8:38:b8:de:2e:38:e9:bd:03:1d:58:
                    11:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5B:4B:93:78:F9:51:08:57:96:C5:DF:28:03:64:DB:EA:65:D0:BC
            X509v3 Authority Key Identifier:
                keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:76:d9:3e:38:58:90:c5:c2:ea:fc:e6:ad:fa:b4:ea:c0:02:
         3a:13:40:3b:0e:2e:ec:a0:7d:48:13:48:4c:47:07:9a:ae:7f:
         9f:df:57:7c:33:99:4f:7e:ee:c7:30:dd:4f:41:67:7e:cd:c4:
         29:93:3d:1e:10:3d:99:1e:99:4c:16:1e:38:ef:0d:7c:0c:8c:
         85:ac:bb:2b:a3:a3:c4:ce:a7:52:84:8a:c9:94:02:90:bc:11:
         eb:ce:ab:21:f6:68:af:d0:f0:3d:2b:47:dc:e5:53:d4:45:29:
         fb:d7:19:a2:06:70:a3:fa:6c:33:cf:32:a3:da:db:67:39:ef:
         0e:c1:98:5b:8a:91:62:00:ff:32:e6:5d:04:f1:26:6c:4d:22:
         d3:e0:2f:e7:ca:82:80:10:21:4f:6b:1e:8c:b2:97:05:d7:5c:
         1e:69:7a:2b:24:22:0a:d9:aa:3e:a6:99:ed:db:ed:bf:77:99:
         22:2f:87:31:28:02:df:fc:52:60:8f:19:6c:4f:da:ec:cb:82:
         b8:6a:c7:1c:76:cd:75:51:97:d8:a3:f7:ef:a7:4e:2b:91:86:
         fc:4b:50:64:ed:6e:ee:f7:50:b7:1c:65:ce:c7:e5:da:00:74:
         50:4b:fd:07:e1:27:c1:42:a5:fd:2c:5e:9d:af:6a:e9:db:d1:
         73:0a:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:48 2025 by rpki-client