Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File:                     E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier:          ZRzsuVF8KlMoHJJsS7ZqV6nar+3Xpv1wjPJ+U8MOu3Q=
Subject key identifier:   47:82:12:4C:99:82:05:AB:77:D2:C2:6E:27:1C:5D:68:6A:45:A4:4F
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer:       /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial:       019510FE19D3C6962DBF69871B6A83DA44F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number:          0326
Signing time:             Sun 16 Feb 2025 23:00:42 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:42 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:42 +0000
Files and hashes:         1: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: dnsSOKxh42tOGvn4ISof1S2d644IiUSWfocIvWxq7Ro=)
                          2: JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa (hash: QG1yL1zcYsT8fBEaDP08SL61cVF4WfYEKH5BAPzFTBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fe:19:d3:c6:96:2d:bf:69:87:1b:6a:83:da:44:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
        Validity
            Not Before: Feb 16 23:00:42 2025 GMT
            Not After : Feb 17 23:00:42 2025 GMT
        Subject: CN=4782124c998205ab77d2c26e271c5d686a45a44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:96:19:12:80:06:51:db:42:31:a2:db:be:41:
                    fe:1d:97:51:66:c1:c8:28:66:3d:83:c7:f0:9c:2b:
                    5a:67:ff:b2:03:1c:02:36:1e:68:d2:b7:6a:e6:11:
                    4d:37:4b:a4:22:42:5b:56:cc:50:74:03:07:7c:6e:
                    ac:10:0b:dc:04:d6:a9:47:01:e3:fa:d7:3c:22:de:
                    1f:2e:b5:6f:34:c3:c0:57:f3:0d:fa:e3:4f:c5:f5:
                    aa:77:c8:1b:75:89:f7:b2:c1:a2:97:48:8a:57:f5:
                    03:f6:46:d2:68:6d:4c:91:40:2d:d9:cf:a5:00:09:
                    6e:33:cf:cb:a8:37:99:db:f5:25:b0:89:da:c9:f1:
                    13:5a:24:bc:4d:e6:3e:b7:7a:3f:73:0b:3a:b8:8f:
                    24:c7:2d:86:5f:cc:ac:50:5d:6c:19:5d:30:91:03:
                    e0:59:ac:18:d5:a5:92:bf:cf:54:a7:c4:90:f0:d4:
                    86:b0:ce:5a:3a:30:69:e6:a3:d2:09:42:a6:ff:92:
                    5c:da:ff:c4:4a:cc:86:c7:cf:5a:50:a5:e4:0d:cb:
                    9c:84:e2:db:87:6b:9f:2a:44:40:23:7d:40:9e:ec:
                    2e:7f:e5:58:2e:f8:8e:82:eb:0f:d8:2b:26:02:ec:
                    5a:ae:70:e0:01:3a:42:5d:31:f4:b4:08:ca:4f:21:
                    91:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:82:12:4C:99:82:05:AB:77:D2:C2:6E:27:1C:5D:68:6A:45:A4:4F
            X509v3 Authority Key Identifier:
                keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c6:90:17:92:c7:e6:64:54:57:42:13:ce:0a:b9:f5:3d:ec:
         16:7f:9c:f2:25:a3:49:f0:93:9d:d9:4c:05:32:94:a0:d0:72:
         fa:1c:fc:2d:f7:cc:f9:98:49:49:60:f2:be:9b:69:50:df:65:
         df:0c:bd:ac:9a:6c:3d:90:89:23:bb:57:54:53:2e:dd:84:cd:
         0a:99:4e:1d:f1:9f:84:a7:81:c0:23:22:68:21:9f:53:16:b5:
         47:1a:50:36:e3:82:7f:12:17:cd:4a:8a:1f:99:f4:88:c2:ef:
         bb:99:f6:50:61:f9:59:a1:f8:64:aa:f8:d0:dd:3c:ab:be:15:
         dd:f2:32:94:06:b8:84:4a:b4:91:3b:ae:40:4d:3b:26:15:d0:
         5e:39:40:71:60:d9:68:e6:1d:43:13:2c:c6:eb:ee:6c:d3:72:
         c3:6b:86:d9:f6:3a:b0:31:d2:4f:86:47:e0:9c:be:f5:9c:82:
         2c:ad:d9:64:a2:90:36:86:67:a6:79:d5:0b:f0:81:85:47:97:
         75:7d:42:48:73:92:dd:36:ed:91:10:3d:e7:08:fb:72:79:aa:
         d5:2a:b5:ba:bf:18:0c:9c:75:0d:1d:f2:0d:bd:a5:36:a6:8e:
         b8:3e:a9:9a:26:9e:b5:c9:2f:c0:a1:fa:6d:73:7e:fc:88:9d:
         f3:e3:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:37 2025 by rpki-client