Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
File:                     80Q_W1x41o5znU-m_q_dJDsFKks.mft (raw, json)
Hash identifier:          KbOnVPyl+q3g0h4J4au6XBOjQtXQQlnktBkDBwm9iRI=
Subject key identifier:   9D:51:01:B2:CA:6F:61:C2:80:DB:E4:60:D3:74:2F:D0:F2:01:33:E9
Authority key identifier: F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B
Certificate issuer:       /CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b
Certificate serial:       019511D9A418F12726880DFAA661828C25C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
Manifest number:          083F
Signing time:             Mon 17 Feb 2025 03:00:30 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:30 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:30 +0000
Files and hashes:         1: 80Q_W1x41o5znU-m_q_dJDsFKks.crl (hash: DhF7MkzexBphlrtuisg4j5TwFt4Hbj8IORNTHlAU7T4=)
                          2: k43rjk9OXsHM4eUp9ryidMIYrpg.roa (hash: nZ1oPuvx4yZUz9X/0NNanuY6VfbmWETyxMR7qm4VS+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:a4:18:f1:27:26:88:0d:fa:a6:61:82:8c:25:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b
        Validity
            Not Before: Feb 17 03:00:30 2025 GMT
            Not After : Feb 18 03:00:30 2025 GMT
        Subject: CN=9d5101b2ca6f61c280dbe460d3742fd0f20133e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:9b:3b:6a:bc:2a:18:11:ed:6d:46:8e:1f:
                    30:eb:2a:e2:bf:72:6e:dc:0e:f3:fa:f9:c1:6b:48:
                    dc:6d:6f:fb:1a:1d:06:b1:1c:f6:be:e3:96:dd:30:
                    ec:16:7e:b0:b6:c6:18:20:0b:84:94:56:55:d3:19:
                    7c:50:24:32:ac:10:b6:6b:60:4e:e3:b9:48:2d:61:
                    33:3a:32:6d:02:4b:c2:79:18:cb:14:94:ba:2a:28:
                    29:7c:57:1c:4d:66:dc:58:a2:1a:63:77:b6:ef:65:
                    ea:42:c4:c1:89:53:2c:f7:6d:4f:93:f8:58:1d:ad:
                    87:65:e4:d0:8c:82:32:96:1e:80:ec:47:95:14:cb:
                    96:b6:da:7e:db:3b:0c:b5:78:77:d6:c7:1b:0b:12:
                    58:e3:52:05:70:ff:bc:2b:b1:d4:a9:1d:66:f4:b4:
                    80:7a:52:cc:c6:6d:28:f2:2a:88:fd:eb:93:ca:c1:
                    46:5b:cb:fc:b6:e0:03:d3:09:4c:d8:7b:53:d8:17:
                    18:31:2e:c9:3a:68:e1:30:27:20:26:57:8e:bd:e4:
                    2e:a5:3e:38:73:ef:20:cc:cc:65:cc:96:46:b3:51:
                    4c:55:24:21:77:93:f1:e1:97:09:4d:7e:75:b3:4f:
                    bc:d7:5a:d1:d0:c8:53:73:15:87:5c:fc:c2:63:b4:
                    77:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:51:01:B2:CA:6F:61:C2:80:DB:E4:60:D3:74:2F:D0:F2:01:33:E9
            X509v3 Authority Key Identifier:
                keyid:F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b9:4c:7b:17:0a:dc:c1:66:31:41:9c:2f:00:21:be:3a:56:
         f6:da:e5:22:4f:95:c3:66:60:2d:2c:ba:7a:76:f5:16:51:44:
         f8:f8:7a:b4:fa:8d:75:0c:21:b8:bf:25:35:c1:2f:b9:1c:0f:
         fd:aa:a7:1b:cb:2c:5b:05:b5:ff:d5:72:84:c1:70:af:99:d0:
         60:76:72:04:ad:d9:00:76:e0:93:27:60:35:7d:80:77:fd:b4:
         bd:81:df:2f:c7:2e:95:ca:e3:dc:ae:19:30:df:63:d1:1d:1b:
         7c:7c:ed:43:e9:56:a4:84:44:1c:95:d2:55:de:5e:8c:69:91:
         22:d5:4d:8c:4e:c6:7d:cd:d1:af:85:35:fd:a9:47:bb:13:75:
         5c:c2:05:bd:ea:aa:e5:08:54:09:1f:4b:21:6d:5b:20:ab:1c:
         cd:d4:9e:72:9c:2a:b7:e7:75:f8:13:76:29:b3:43:6a:3b:2b:
         58:a9:e9:6d:ca:e3:32:92:b0:5a:77:58:fe:dc:af:db:5d:fc:
         12:c3:9a:6e:68:80:8f:65:59:33:1b:92:1e:b6:44:8d:89:aa:
         71:4f:79:a6:e5:48:71:0d:49:20:2d:b8:25:7f:62:5f:d5:7a:
         60:d7:5a:25:51:da:21:65:69:df:7f:f1:45:ca:47:48:35:1a:
         c4:d7:08:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:00 2025 by rpki-client