Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File:                     0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier:          7UcyntI2xGVCYOwnheOQiG4lqMlF4MN7Typ+iO4hfI8=
Subject key identifier:   C5:4B:7D:90:74:4E:29:1C:13:AB:54:A7:94:55:F7:B2:FB:C9:DB:8A
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer:       /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial:       019510FDDB28D5C8B9BC0F2DC5BE32074532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number:          02C6
Signing time:             Sun 16 Feb 2025 23:00:26 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:26 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:26 +0000
Files and hashes:         1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: KJcxCoJs2sMAzba3EqzdBxONUiq2USMWy5pdEhzA6UM=)
                          2: 1-G5CHegTogIfJOzVSZ12ruOsd1A.roa (hash: WZqBI8pDVZog2pYstlONiupHgRaN9/CPeYVUUMcxtjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fd:db:28:d5:c8:b9:bc:0f:2d:c5:be:32:07:45:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
        Validity
            Not Before: Feb 16 23:00:26 2025 GMT
            Not After : Feb 17 23:00:26 2025 GMT
        Subject: CN=c54b7d90744e291c13ab54a79455f7b2fbc9db8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:e0:08:2c:9c:cf:60:0d:04:d9:7e:c1:b9:
                    44:58:5c:ff:b1:80:25:ce:6c:26:a7:1e:69:34:3b:
                    45:de:83:78:de:a7:02:2b:ab:a7:07:9f:96:a5:41:
                    83:c5:cc:03:c8:31:0b:b1:31:97:7d:ed:91:b4:cf:
                    33:2f:53:b2:ff:d0:a2:bb:bc:48:73:92:de:58:37:
                    50:a1:03:61:19:55:1a:7c:d0:4f:be:e5:40:87:e7:
                    5d:f2:1d:66:ed:21:9a:04:19:cc:b3:2b:86:fc:f9:
                    e7:a6:17:21:1a:eb:4b:75:9d:09:55:5d:75:7e:bd:
                    3b:cb:a9:b4:3f:c8:28:d6:03:33:1c:d8:50:c8:5a:
                    35:10:7f:5b:c7:a2:55:01:e0:c7:35:b8:80:71:9f:
                    93:79:af:dd:aa:8a:79:26:ce:09:b8:10:19:3a:3b:
                    44:0a:a9:ba:ff:03:c8:5d:00:57:c3:34:44:d4:9b:
                    7a:a5:1d:06:1b:94:e5:5f:3a:5a:66:13:fb:39:2d:
                    f7:68:e7:ea:87:17:27:be:78:a3:be:c0:8d:ee:90:
                    90:32:46:a5:30:c6:45:10:bb:ad:d7:51:5a:6c:c1:
                    d7:7c:76:31:7f:a2:f9:ea:01:50:5c:23:42:46:f4:
                    69:8e:7c:41:09:71:c9:18:16:ed:f1:dc:4b:b1:57:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4B:7D:90:74:4E:29:1C:13:AB:54:A7:94:55:F7:B2:FB:C9:DB:8A
            X509v3 Authority Key Identifier:
                keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:08:1d:83:31:6d:3a:3d:76:46:16:c3:36:72:11:e8:cb:7c:
         c1:03:6e:54:4b:00:89:e3:cc:e7:ca:e9:0f:34:cb:0c:71:e5:
         c3:90:63:cc:2c:d1:6f:9b:c7:6d:e7:93:35:12:e2:c2:c7:9a:
         35:79:d0:58:2d:42:6c:c3:cb:05:6f:56:16:cb:40:26:bd:17:
         59:b0:09:ae:2d:58:b9:b7:bd:82:dc:0e:a5:23:a3:a0:61:e2:
         64:09:df:57:ca:8c:52:02:7f:03:cb:db:3b:f0:d8:99:24:f2:
         37:4b:47:f1:db:92:d6:a0:08:ba:ff:fb:52:f5:b5:b0:59:a0:
         9e:71:52:a3:d0:94:af:43:70:94:e5:b3:84:a9:cb:72:60:47:
         9c:36:32:b5:e5:72:48:fa:8c:e9:bb:fc:3f:09:4c:d1:e0:87:
         b1:8d:b2:0e:26:4f:33:1d:99:c8:a0:0c:4a:ac:26:df:90:ce:
         c4:0d:9b:7c:20:ea:c5:00:62:e8:0e:22:9d:3d:fe:c0:5f:60:
         8f:e6:45:0c:70:c9:cf:55:59:bd:a7:33:95:cb:8f:f8:f1:8d:
         de:19:25:d2:21:92:a3:51:cf:69:b7:2a:81:db:4e:50:a8:ae:
         ed:c5:d9:ff:5f:5e:49:65:11:66:96:6e:d6:f3:5d:ec:18:1c:
         44:47:22:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:37 2025 by rpki-client