Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
File:                     iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json)
Hash identifier:          Yi6NndAcvdK4ZOcJROzZ1L08eJu+IQURcmWk7PqaeN4=
Subject key identifier:   13:A7:12:C1:FF:70:B9:3C:FD:2C:B2:94:02:FD:2E:C7:DC:D2:D4:FD
Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
Certificate issuer:       /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Certificate serial:       019510C738746DADFD8DA31416CBB2CE3452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
Manifest number:          1459
Signing time:             Sun 16 Feb 2025 22:00:46 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:46 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:46 +0000
Files and hashes:         1: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: cLiH7udaSva9nLW21FCMGBwL8QUZL8vtkd2VsLGfBgg=)
                          2: vZncObou1n1Gou3XB_i7Ru4V5WA.roa (hash: iik1zhTFoCIgqbBLWbxX8UR2ffHIMvhG03bvL/Xp/YU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:38:74:6d:ad:fd:8d:a3:14:16:cb:b2:ce:34:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
        Validity
            Not Before: Feb 16 22:00:46 2025 GMT
            Not After : Feb 17 22:00:46 2025 GMT
        Subject: CN=13a712c1ff70b93cfd2cb29402fd2ec7dcd2d4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:d0:30:c5:ef:11:71:76:b8:58:a0:54:d0:
                    54:65:da:ce:e3:1e:00:fa:c1:19:1f:ef:97:16:54:
                    14:20:2a:3f:e7:84:86:6b:ce:f3:07:35:30:7b:fd:
                    4f:c4:ad:5b:57:a7:0a:6e:e2:ef:3c:69:78:6b:fc:
                    be:74:89:d2:c4:24:ae:6f:6d:ce:f3:18:25:de:f2:
                    0b:6c:52:ef:09:e9:9c:83:de:ac:d8:36:8c:44:61:
                    c6:0f:42:c8:83:e9:ce:f2:7e:b8:72:de:50:7d:b4:
                    c2:06:35:90:4a:53:76:53:92:be:2d:04:43:86:5f:
                    b4:c2:a3:c0:2b:02:ea:94:e2:e6:db:1b:2e:99:a4:
                    55:49:e4:f3:fa:d7:15:ee:2c:d5:89:2d:69:06:40:
                    11:49:f3:db:04:7f:a9:84:e2:68:a7:5c:93:5c:e2:
                    17:21:a1:76:22:b0:59:41:90:76:7e:fc:4b:8c:b5:
                    83:77:47:2d:6c:fc:32:d1:80:57:a5:ad:2b:5c:bb:
                    14:a8:c7:4a:f5:1c:58:48:9b:da:ff:de:a9:c7:a5:
                    2d:66:ae:4b:fa:ea:f2:3c:36:c4:ff:e0:a4:82:b5:
                    31:8d:56:8e:39:7e:bf:72:bb:27:76:10:65:49:3e:
                    40:69:4f:a7:9e:8b:6f:f6:63:ef:78:79:1f:0e:24:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A7:12:C1:FF:70:B9:3C:FD:2C:B2:94:02:FD:2E:C7:DC:D2:D4:FD
            X509v3 Authority Key Identifier:
                keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7e:36:25:40:01:75:2c:9a:92:fd:34:27:da:b2:d0:a3:41:
         64:36:c5:d8:c5:6f:f5:19:7c:cb:b3:eb:25:d2:27:e9:02:af:
         c5:b7:2b:72:54:30:48:74:9d:10:0f:1a:57:df:58:aa:b9:50:
         79:1b:b2:a5:9d:fd:bc:5b:7d:2d:1c:21:11:93:99:45:6a:a3:
         7a:da:14:94:b0:d4:d4:d9:14:b8:f0:39:d8:31:3f:94:f6:d0:
         d3:16:f5:21:19:0f:20:43:6e:74:ec:38:ef:91:fa:0c:86:e9:
         fa:06:ab:15:1c:29:95:8a:aa:f9:a1:3e:94:95:6f:91:47:84:
         00:6c:9a:3f:a3:b9:67:c9:7f:f8:75:1b:17:0f:71:98:1d:3e:
         9a:8c:4c:58:fb:68:be:42:d8:ef:f7:1f:0a:9a:15:f2:74:49:
         c6:4f:08:df:43:69:9e:ff:fb:a4:a1:87:40:dc:94:e1:3f:f8:
         91:78:73:53:13:25:75:02:d7:40:7b:46:8b:30:d0:38:cd:69:
         bf:be:c6:d8:04:1a:9f:01:b6:90:14:3b:6b:06:2a:51:81:b7:
         47:d6:31:64:df:29:f5:4b:26:30:1f:39:47:bf:a1:0b:0b:38:
         45:5c:1c:b0:8d:16:96:b0:c2:ca:5b:47:73:62:19:6b:14:f6:
         61:ac:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:37 2025 by rpki-client