Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
File:                     1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json)
Hash identifier:          FDAPiSRkBl1d/7d9q4m+CCWyDuNzLRGHZcHul403yJQ=
Subject key identifier:   6E:CB:E9:86:76:C6:C6:16:07:B4:7B:55:AA:58:17:85:34:FB:E0:05
Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF
Certificate issuer:       /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
Certificate serial:       0195903CCED340B8FCCFE86BF89DFAE526B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
Manifest number:          0C37
Signing time:             Thu 13 Mar 2025 16:00:58 +0000
Manifest this update:     Thu 13 Mar 2025 16:00:58 +0000
Manifest next update:     Fri 14 Mar 2025 16:00:58 +0000
Files and hashes:         1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: S4/6r7U9d4Z/hUDC3UKDeegCTa/EorcsMqxyzkE0+cM=)
                          2: V3GGR6tZOX8NXj-Nj8u0fPOASnM.roa (hash: fnJsN5ItuitKZWqq5Moq534O7yJjjzxAogwkbaeTNUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 15:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:3c:ce:d3:40:b8:fc:cf:e8:6b:f8:9d:fa:e5:26:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
        Validity
            Not Before: Mar 13 16:00:58 2025 GMT
            Not After : Mar 14 16:00:58 2025 GMT
        Subject: CN=6ecbe98676c6c61607b47b55aa58178534fbe005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:92:00:13:9f:fc:51:12:f9:33:aa:32:fe:
                    b2:18:28:31:78:80:7a:19:b9:38:ae:84:77:23:bb:
                    a7:ef:62:99:b1:c8:9d:79:99:d8:16:e5:42:2d:5f:
                    32:ff:80:e9:14:42:16:43:e1:f4:7d:81:69:6d:35:
                    fc:72:18:2e:e3:d6:3e:ce:af:59:2f:2b:57:d0:ff:
                    1f:3e:be:f7:1b:2c:cc:6b:30:d3:80:ad:d3:89:f0:
                    c7:2e:d5:6e:12:fc:af:25:77:69:2a:c1:3d:2c:cc:
                    2c:3f:8a:d5:a5:73:80:35:bb:9f:f9:02:3e:1c:9f:
                    7d:69:83:04:9d:7f:84:47:8e:0b:9d:43:9e:12:70:
                    5a:e9:2e:ae:bf:4b:6c:94:d7:73:8e:f6:bc:de:36:
                    69:07:c1:66:92:80:77:d1:99:f1:14:b7:84:c5:4d:
                    c9:8f:ee:a0:b5:1c:ad:75:e4:8b:df:68:65:af:99:
                    47:ae:8f:71:bb:c2:a9:d5:f3:ce:1c:50:8a:be:ea:
                    63:92:bc:e3:b1:0c:64:b0:75:d6:00:f3:eb:8e:e4:
                    8f:1b:f3:cd:6b:da:29:a4:fe:e1:ad:bb:2f:07:9a:
                    e8:54:62:5f:91:15:3e:33:55:91:fa:34:a5:4e:38:
                    29:92:37:07:ec:73:1d:ed:08:ad:98:f8:4b:8c:d6:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CB:E9:86:76:C6:C6:16:07:B4:7B:55:AA:58:17:85:34:FB:E0:05
            X509v3 Authority Key Identifier:
                keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:27:80:8a:1a:c0:ba:95:17:c4:f3:20:2c:be:03:22:44:
         6f:3a:41:38:6d:b4:d8:9e:7b:eb:d4:2f:12:5f:81:12:e1:47:
         e1:a6:59:f1:15:7a:f8:45:d2:aa:88:17:6b:b5:7e:26:f4:af:
         11:f6:3e:23:0c:63:86:1b:8b:2f:8f:d1:ae:42:cf:e9:5c:96:
         ac:43:8e:36:24:3b:e8:9e:c6:68:c0:a7:32:fc:db:b9:a4:bb:
         1c:1e:96:ca:34:2c:32:26:15:f4:fa:ab:26:c2:1d:87:04:f9:
         f7:9d:2f:de:04:c1:c6:de:3f:18:5f:19:bf:d1:da:d0:13:b9:
         3c:19:64:7f:96:77:c5:7f:80:8a:0b:bb:18:e8:58:f4:4c:02:
         0f:49:49:39:8a:e4:47:ee:29:bd:48:1c:19:c2:0a:0d:f5:fd:
         a2:e9:1e:1a:c2:0f:26:a5:ab:da:81:f8:9f:f4:2c:42:bf:1d:
         18:99:33:34:ad:ae:ad:b7:db:88:e5:ec:a5:77:b4:66:18:bd:
         c7:21:df:0e:0a:84:8e:75:72:68:33:8b:37:6c:2d:77:99:3f:
         2d:6c:a4:25:b3:cd:6a:b0:49:1f:f7:6d:79:46:aa:cd:b3:27:
         a7:72:ce:d8:9a:0a:31:59:f1:aa:6b:d3:e9:42:e8:33:a8:90:
         bc:b8:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:05:01 2025 by rpki-client