Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
File:                     1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json)
Hash identifier:          eyN+XBTAAbTnfF5WSE/kvjW+rmgMS234UBFXdX6BWxE=
Subject key identifier:   4D:16:9D:C3:5B:A0:70:42:19:E0:33:CC:93:67:E0:E2:14:09:61:41
Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF
Certificate issuer:       /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
Certificate serial:       019510C7C73597056F30C61A2E14E09DBFAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
Manifest number:          0BF5
Signing time:             Sun 16 Feb 2025 22:01:22 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:22 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:22 +0000
Files and hashes:         1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: 5z+RWc0f37JOqcQUie0UWly7DsQvmM1ImSoKfn0gqa4=)
                          2: V3GGR6tZOX8NXj-Nj8u0fPOASnM.roa (hash: fnJsN5ItuitKZWqq5Moq534O7yJjjzxAogwkbaeTNUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:c7:35:97:05:6f:30:c6:1a:2e:14:e0:9d:bf:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
        Validity
            Not Before: Feb 16 22:01:22 2025 GMT
            Not After : Feb 17 22:01:22 2025 GMT
        Subject: CN=4d169dc35ba0704219e033cc9367e0e214096141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:8d:7d:ec:fe:7f:34:43:b3:c2:44:96:0c:
                    63:8c:d6:ad:06:e4:00:95:66:72:6d:e5:93:61:41:
                    d6:20:ab:b3:d0:67:07:aa:c9:d3:75:fa:2b:9b:cc:
                    cc:19:65:65:c5:65:83:56:a8:4d:e5:96:35:1d:6f:
                    2c:54:79:5f:6a:de:3f:ae:e0:46:10:26:3e:d8:b3:
                    f8:6d:59:73:96:72:a1:f1:86:f0:1a:f1:b7:3b:99:
                    eb:3b:1b:6b:8c:0c:09:18:b0:4b:11:73:eb:b2:7f:
                    9a:8a:b7:12:09:45:0a:2d:89:34:8c:aa:a6:51:8b:
                    6c:ae:19:03:20:1e:37:b5:a1:68:09:68:ca:b8:2a:
                    a1:a3:04:c1:52:8d:eb:86:7d:50:b1:79:05:c0:8b:
                    42:a4:96:2c:9f:89:2e:a1:ef:61:f2:a4:98:b3:ca:
                    f5:2f:10:1d:c9:ad:d9:06:0d:0a:73:a0:56:5a:07:
                    ab:ca:2d:c2:79:11:c3:9b:9b:f4:51:22:b8:9d:e8:
                    53:38:74:47:30:51:c5:b2:42:78:54:11:48:2c:2f:
                    3b:2f:8c:13:94:99:ca:f2:da:54:77:b2:57:dc:c1:
                    92:ce:40:89:76:10:76:1f:72:a4:4c:a7:a5:33:6a:
                    56:21:98:90:49:d7:0d:00:f5:d4:1e:9e:38:4f:4a:
                    d7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:16:9D:C3:5B:A0:70:42:19:E0:33:CC:93:67:E0:E2:14:09:61:41
            X509v3 Authority Key Identifier:
                keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:78:36:46:0a:07:a7:d6:96:26:af:dd:30:98:11:a3:7f:d8:
         19:42:3b:c6:12:01:4d:94:e9:2b:3c:c3:0a:25:45:90:15:91:
         95:c3:72:c6:2d:61:fa:6a:67:19:31:78:92:3d:76:5b:dd:03:
         d1:c1:72:2a:d5:79:25:69:58:55:70:99:3e:1c:eb:3a:ce:00:
         57:3d:ac:ab:ab:31:03:a3:89:81:d2:a8:72:a1:3f:c2:35:ba:
         66:6b:9d:b5:f4:29:ca:60:ba:f8:f2:8c:e0:35:db:a9:44:bc:
         58:8d:fd:fa:c5:5e:43:0a:2f:d4:be:3a:44:e6:1c:27:9f:a8:
         c4:45:4b:71:55:f5:9a:af:2d:61:da:bc:06:77:6e:ad:ea:4a:
         62:05:58:bd:31:ae:05:43:ae:e9:2e:59:b0:d6:e2:df:ad:d4:
         25:33:47:f5:e5:83:f3:15:b5:56:da:b0:59:4e:02:54:1e:d2:
         7d:f8:38:99:3f:1f:aa:ed:f3:9b:46:04:7f:19:60:e0:b4:ef:
         1d:f0:bd:d1:5f:be:a7:a7:76:85:48:82:7f:5f:96:e3:7b:18:
         99:d6:42:3e:bb:1e:1c:89:3b:b8:b0:59:38:71:97:8f:bf:00:
         a5:a6:96:ed:63:d3:0f:e2:cf:a5:79:f4:73:85:8d:5e:ae:2c:
         45:3b:32:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:52 2025 by rpki-client