Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
File:                     yu79CETrE5qyH4DUByzguO3MBrU.mft (raw, json)
Hash identifier:          npnz9m6nGsHe4aK6h24CkzYno2bJ+KU8C/9XmzRfIRs=
Subject key identifier:   56:FB:29:FA:1A:0C:9B:E8:77:54:DD:26:B9:79:3F:3E:A4:A5:E2:22
Authority key identifier: CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5
Certificate issuer:       /CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
Certificate serial:       0194C463B3F6918814015C15182C0A9F0E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
Manifest number:          7F
Signing time:             Sun 02 Feb 2025 02:00:55 +0000
Manifest this update:     Sun 02 Feb 2025 02:00:55 +0000
Manifest next update:     Mon 03 Feb 2025 02:00:55 +0000
Files and hashes:         1: Zja22H7huKyd4DPgiFnlD1La7Es.roa (hash: AXLErsCzJc/qr3Tna9lN0B3Ap4Vz9K2Svk3Dy2hJER8=)
                          2: yu79CETrE5qyH4DUByzguO3MBrU.crl (hash: YrrN2AxCKHJs39Vh6M2UUV399XFaP4KLE7WwIJiA8Mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:63:b3:f6:91:88:14:01:5c:15:18:2c:0a:9f:0e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caeefd0844eb139ab21f80d4072ce0b8edcc06b5
        Validity
            Not Before: Feb  2 02:00:55 2025 GMT
            Not After : Feb  3 02:00:55 2025 GMT
        Subject: CN=56fb29fa1a0c9be87754dd26b9793f3ea4a5e222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e7:60:11:39:f0:04:b6:8d:be:43:cc:b6:16:
                    0a:ef:29:24:4b:ca:85:fe:22:7c:ac:e7:b5:c2:b2:
                    98:00:f4:1d:6f:1d:c8:31:1e:45:0a:a4:1d:6c:f2:
                    62:89:60:1a:b9:65:f4:12:d7:fd:94:5e:ca:e3:3c:
                    58:fd:cb:77:bb:3d:69:eb:5a:11:42:03:4f:da:ed:
                    69:56:24:12:dc:b5:44:84:53:e1:bc:86:57:cb:a5:
                    d7:a7:a2:b3:e3:4a:d8:13:33:6e:75:dd:71:46:de:
                    93:05:a8:10:b1:6f:11:01:fc:c9:7e:3c:51:6e:16:
                    13:47:c1:d9:6e:66:26:2e:02:75:78:17:dd:fb:d4:
                    9c:c1:8f:6c:bf:0e:cd:31:f9:5c:e2:50:11:fa:e5:
                    8c:1b:3a:cd:00:0f:32:ea:20:ae:ce:3c:9e:48:11:
                    08:34:07:91:54:34:80:3f:a4:21:34:1c:18:9c:48:
                    03:e0:b0:3b:5a:ba:ef:cd:5f:9d:f5:75:04:33:6e:
                    9b:a7:eb:e5:93:af:d3:83:a1:a7:13:85:19:0d:f6:
                    ea:91:37:f3:4d:f6:a0:da:a3:25:38:57:fc:fb:d8:
                    7d:f4:78:4f:87:f2:6a:7f:93:28:39:39:46:6d:e1:
                    2f:b4:c0:fa:1d:0f:a7:40:50:5b:a6:c7:e0:f3:a9:
                    c2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FB:29:FA:1A:0C:9B:E8:77:54:DD:26:B9:79:3F:3E:A4:A5:E2:22
            X509v3 Authority Key Identifier:
                keyid:CA:EE:FD:08:44:EB:13:9A:B2:1F:80:D4:07:2C:E0:B8:ED:CC:06:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu79CETrE5qyH4DUByzguO3MBrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7f569f-cc3c-429e-bd1d-b4b97f11c3dd/1/yu79CETrE5qyH4DUByzguO3MBrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:dd:74:32:c9:00:16:67:71:54:b0:aa:ca:ec:2f:a2:b2:82:
         48:32:8c:ed:f1:31:ab:be:76:21:a0:43:8a:08:5d:90:59:f8:
         d6:97:ff:aa:d2:11:f4:f6:01:c9:69:c7:d6:cc:4e:6c:21:9d:
         06:f3:ea:3d:0c:0c:a1:bb:03:11:b9:a2:58:4d:d1:a4:3e:2f:
         88:59:6d:b1:51:b9:98:1a:0e:56:e6:1c:57:13:9c:76:0d:a7:
         20:15:65:57:3c:1c:c7:26:7f:d2:84:83:d4:64:b2:76:7d:92:
         94:d6:bd:b2:d9:47:3b:8d:45:dd:3f:df:5a:9e:3d:2c:f1:fd:
         3f:91:5b:7f:87:30:a1:58:e2:eb:35:5f:67:1d:67:64:e1:70:
         60:9f:38:8c:f6:b9:75:43:c3:2b:0a:8d:ad:f8:bf:a5:92:1a:
         f9:dc:ab:c1:d0:3d:a1:72:a0:b2:6a:f5:0d:eb:42:60:e1:00:
         03:85:76:56:4f:da:ea:92:e2:60:da:8f:e8:c0:24:bc:e0:01:
         b3:40:7c:8e:10:66:28:97:97:b7:3f:c6:67:9b:f0:d1:59:af:
         9b:c7:5b:86:10:08:ea:ba:cf:06:5e:7e:f4:f1:87:88:62:55:
         e1:c9:50:08:dc:43:a6:af:6f:ff:73:5e:e1:f2:73:9c:6e:8e:
         70:49:d3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:50 2025 by rpki-client