Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File:                     0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier:          12/bUj1tE3ZCqTp78lKMpR6hxQx6lpo4cbXEcAeOQzw=
Subject key identifier:   07:2C:F4:58:CE:E1:31:F0:EF:14:57:B0:02:C4:88:72:97:71:FD:77
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer:       /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial:       0195116BD0BD337387F262E45FE96F6FFBE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number:          0416
Signing time:             Mon 17 Feb 2025 01:00:33 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:33 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:33 +0000
Files and hashes:         1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: IsvOMyA+qgqFyRg64rX0jHFUhpuu4Kc/6cyWTfxn/YM=)
                          2: wc2YTTqZu_ZfiRjMD3y02xaUsko.roa (hash: LM/FwSmelKssGweHrskFer212d31QKucqPggfsRe9io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:d0:bd:33:73:87:f2:62:e4:5f:e9:6f:6f:fb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
        Validity
            Not Before: Feb 17 01:00:33 2025 GMT
            Not After : Feb 18 01:00:33 2025 GMT
        Subject: CN=072cf458cee131f0ef1457b002c488729771fd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e6:be:54:80:61:79:c8:91:36:f7:db:38:ee:
                    fd:dd:32:94:9c:93:ec:23:33:60:e9:78:06:c0:a5:
                    f7:65:18:67:ef:03:05:12:6b:2f:c1:bf:be:db:b3:
                    68:c4:82:06:0d:d2:80:95:0f:c5:ee:9b:5a:82:4c:
                    56:81:85:27:3f:47:30:4f:f8:44:01:1d:8f:5f:c1:
                    a2:71:3b:7b:ee:53:9a:86:9d:22:0c:cf:57:ef:8a:
                    ae:96:56:d2:e7:14:65:09:10:9d:63:ed:84:09:ab:
                    60:17:49:f4:94:b7:75:b4:bf:23:44:8d:0d:96:6b:
                    21:81:b8:17:b7:6e:51:60:6b:2e:81:cb:95:c7:fc:
                    01:db:85:0a:3e:93:7c:6d:12:a0:64:1a:5e:f0:af:
                    c6:ff:7a:ff:e9:d3:1a:ea:18:98:53:3f:64:1c:e4:
                    34:d8:8b:f5:27:0a:94:a6:e4:41:5c:1d:16:99:e7:
                    29:86:e1:94:df:90:d1:86:79:ed:79:5b:a4:c0:39:
                    d7:58:f3:7d:a6:f7:aa:78:94:a1:28:0a:22:cc:01:
                    cc:95:a3:a6:2a:4a:a3:f1:59:8e:c6:d1:9e:4c:82:
                    c8:bc:5e:ca:db:5d:8e:94:fa:5e:09:9e:2d:20:7f:
                    61:ba:8a:58:5f:51:bc:72:97:3a:f1:9a:aa:cf:4d:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2C:F4:58:CE:E1:31:F0:EF:14:57:B0:02:C4:88:72:97:71:FD:77
            X509v3 Authority Key Identifier:
                keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:07:8f:e6:6e:17:6a:54:3a:28:3b:10:7f:6c:00:d1:e6:d0:
         6f:3d:60:a9:ff:f6:a0:1f:c2:20:d3:98:e8:1d:3f:a0:31:1e:
         74:2d:ac:bd:be:90:01:5d:6b:69:62:78:de:35:fd:53:42:a3:
         49:7b:8a:4e:2a:d4:9e:99:20:c0:1c:b6:80:80:41:5a:b1:cd:
         a6:e7:7f:6a:3d:51:ad:9f:a5:dd:b1:02:bc:59:4e:ae:08:50:
         b6:d5:ee:09:a0:78:df:8d:46:f8:e6:73:c9:28:ec:aa:fd:a0:
         e0:13:f2:8c:a6:b5:cb:f2:ca:ea:02:b5:a1:f8:27:f1:9e:68:
         d5:22:db:61:8d:6a:38:3a:1a:61:05:f8:b0:5a:3d:99:39:0d:
         a7:99:11:c4:b4:2b:d1:45:8f:29:5b:df:ec:19:2c:83:bd:e5:
         ef:77:01:fd:ab:5d:28:66:28:13:fe:ec:0c:98:b7:5f:e4:e2:
         b1:17:d8:9c:45:a6:54:6d:5e:84:dd:16:8b:63:0a:f4:b0:23:
         8d:f0:47:11:1a:7f:57:64:b8:81:44:55:dc:df:3c:a7:4d:3e:
         14:98:6e:95:a7:16:bc:ea:4d:c3:7e:cd:f6:40:ef:94:18:91:
         0a:4f:b8:c9:cf:b4:ab:98:2a:a8:f4:50:71:8f:47:1f:94:4d:
         c2:1a:a4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:57 2025 by rpki-client