Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.mft
File:                     v0K4S67twsRj3jf6TRRiR_PhS6E.mft (raw, json)
Hash identifier:          bHSAJbvPKYvGuDJ7wWXvgCLNOWDfLpHxKYpRTLpzq6s=
Subject key identifier:   6D:AB:41:9E:C1:22:57:11:74:6B:C6:BA:A0:21:DA:3C:1B:37:B6:B6
Authority key identifier: BF:42:B8:4B:AE:ED:C2:C4:63:DE:37:FA:4D:14:62:47:F3:E1:4B:A1
Certificate issuer:       /CN=bf42b84baeedc2c463de37fa4d146247f3e14ba1
Certificate serial:       019579B4EB598BC2620A9A74667E398A2C73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.mft
Manifest number:          0683
Signing time:             Sun 09 Mar 2025 07:00:54 +0000
Manifest this update:     Sun 09 Mar 2025 07:00:54 +0000
Manifest next update:     Mon 10 Mar 2025 07:00:54 +0000
Files and hashes:         1: v0K4S67twsRj3jf6TRRiR_PhS6E.crl (hash: 8gLqIJdpzMQhdzvSe169LBm0ih7EFS7p561xMipylqw=)
                          2: z3cpAcwzNwvV9AKvmRvNJG_LZnE.roa (hash: 7Vpbgk+uh3xjUDJDPkW52/aM1co/xcHFVzxeA+KZtTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Mar 2025 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:79:b4:eb:59:8b:c2:62:0a:9a:74:66:7e:39:8a:2c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf42b84baeedc2c463de37fa4d146247f3e14ba1
        Validity
            Not Before: Mar  9 07:00:54 2025 GMT
            Not After : Mar 10 07:00:54 2025 GMT
        Subject: CN=6dab419ec1225711746bc6baa021da3c1b37b6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:21:6f:28:b5:d5:7f:67:a7:9e:e0:13:d0:
                    6b:2a:55:5c:c7:59:02:5c:09:e4:d4:74:7a:e7:77:
                    44:49:ee:ac:64:d2:b6:43:ab:58:31:cd:31:26:83:
                    ef:44:f9:54:2b:3c:59:1a:06:bf:b7:1c:58:3a:95:
                    66:73:eb:14:57:8e:67:61:29:1c:fe:bf:01:08:ae:
                    09:29:1d:25:ab:74:22:58:76:fe:d4:3c:13:4d:9a:
                    85:c9:07:3d:47:7c:5c:5c:08:8c:dd:63:a7:ca:9c:
                    e8:c3:50:22:c1:d0:f8:75:6e:95:27:34:16:3b:a0:
                    84:32:c2:cb:92:56:96:2b:0a:79:b6:04:4a:d5:96:
                    02:ef:b5:c2:53:01:dd:d4:ac:12:ce:52:3b:8e:9a:
                    5a:1c:07:9c:ea:c0:6e:d0:53:16:62:53:00:9a:2a:
                    e9:8b:fb:84:b4:92:cb:bb:bd:58:a6:91:c6:2b:30:
                    f7:02:0c:7c:c1:f8:88:cf:04:37:8e:3a:0e:ae:50:
                    33:c2:43:e7:cd:83:7d:5e:a5:a5:24:ce:da:0d:3e:
                    0e:69:1c:47:f2:03:8c:e5:22:52:cd:45:fa:80:4a:
                    5a:8a:41:b8:b7:8e:2e:b3:c3:f7:4d:a1:4e:1c:c4:
                    5c:d1:76:a4:ac:8e:9a:89:a6:ae:f2:27:f7:64:93:
                    5e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AB:41:9E:C1:22:57:11:74:6B:C6:BA:A0:21:DA:3C:1B:37:B6:B6
            X509v3 Authority Key Identifier:
                keyid:BF:42:B8:4B:AE:ED:C2:C4:63:DE:37:FA:4D:14:62:47:F3:E1:4B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0K4S67twsRj3jf6TRRiR_PhS6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cda7c2-807f-4323-b3d7-962fe097f4b1/1/v0K4S67twsRj3jf6TRRiR_PhS6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:40:2d:d6:9c:0b:98:53:5a:3d:46:8d:82:b0:71:37:32:ce:
         9d:80:1e:5a:e2:06:af:85:f5:59:54:32:70:15:62:e5:e5:18:
         ba:16:45:c6:73:c7:31:e0:0c:9a:3b:85:c5:c0:f0:ec:6c:ba:
         32:56:d5:fd:1f:2c:88:fe:39:bd:49:00:cd:66:e9:17:eb:b4:
         54:05:64:e9:c1:0c:64:4a:2d:59:2a:5e:0a:6f:19:23:d3:a3:
         34:3f:0a:97:bc:6a:d1:42:c1:a4:b3:bf:df:bb:d5:c5:e8:6c:
         df:0b:b3:65:ab:8a:27:b0:45:4c:d4:51:92:9a:72:f8:35:1f:
         00:e2:a4:47:fe:e0:73:64:52:8b:d6:b3:61:de:03:ca:cd:17:
         c5:d3:88:ff:64:6a:40:a4:b7:97:c7:49:e9:32:7d:d3:72:d6:
         4c:da:a2:7f:24:9c:77:ef:40:45:64:ad:29:74:ea:3b:22:4f:
         0a:19:c1:d2:60:c7:3e:40:df:f4:5f:49:99:74:60:ce:ea:f6:
         10:66:45:c8:38:29:a6:07:af:26:8d:47:2e:63:f4:67:d0:88:
         16:8c:d9:79:32:a0:3a:24:d3:d0:88:47:2f:ab:f5:03:09:a5:
         de:07:9a:c9:a4:9b:61:4f:32:34:a0:3e:98:f5:6b:1e:4e:8e:
         4f:0e:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:48:46 2025 by rpki-client