Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
File:                     Co59_NIAyF6zysZvhZtxEKuZsQo.mft (raw, json)
Hash identifier:          vBfoZHJ6JWP1bJWH4tF7EhdAkKXZ4tIGTwnK9aBcUMo=
Subject key identifier:   F2:CB:13:92:E6:77:1A:34:B0:59:90:29:E7:70:90:75:3D:E6:7E:59
Authority key identifier: 0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A
Certificate issuer:       /CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
Certificate serial:       01964556C44DBAE2FFBD4CBB1F09A4897C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
Manifest number:          01D9
Signing time:             Thu 17 Apr 2025 20:00:36 +0000
Manifest this update:     Thu 17 Apr 2025 20:00:36 +0000
Manifest next update:     Fri 18 Apr 2025 20:00:36 +0000
Files and hashes:         1: Co59_NIAyF6zysZvhZtxEKuZsQo.crl (hash: 3YGr+5lML52a/D7bR/rydw3TOf5I4AfyRKQHp0GQhYg=)
                          2: ZnFCz6rKLcZRx4oWRqGX1WP5row.roa (hash: Fg68tw9/QoQIkz8jU0UgngyMGnhnkYCZ0zRagw9xxDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:56:c4:4d:ba:e2:ff:bd:4c:bb:1f:09:a4:89:7c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8e7dfcd200c85eb3cac66f859b7110ab99b10a
        Validity
            Not Before: Apr 17 20:00:36 2025 GMT
            Not After : Apr 18 20:00:36 2025 GMT
        Subject: CN=f2cb1392e6771a34b0599029e77090753de67e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:97:56:99:ef:0c:d1:e1:c1:0c:a2:f3:ec:
                    87:e3:f2:2f:37:c4:36:ca:91:03:cd:82:bb:77:a4:
                    a2:46:8c:3a:38:c0:32:5f:bc:46:d9:1f:e6:75:b4:
                    14:36:50:6a:91:7e:d7:b9:dd:96:50:66:d6:36:4e:
                    b8:49:d1:87:23:b3:26:6f:ad:a2:09:b7:5b:ba:80:
                    f2:3a:68:d4:9d:9c:2c:2c:30:84:ef:38:8e:78:1f:
                    3b:47:2e:e6:0f:82:b2:c8:95:f1:26:9d:af:5a:a7:
                    4b:06:02:08:4d:59:26:fa:0d:54:10:58:77:78:96:
                    21:16:cd:52:9f:f5:25:52:ef:8e:f4:98:38:e7:44:
                    ad:fd:3d:1a:be:95:03:8d:30:e2:4f:73:16:36:6f:
                    36:5d:7b:c2:cf:8a:3a:73:53:e0:da:a0:6a:bd:1f:
                    ad:75:96:90:f9:36:a2:1b:ba:bd:89:ba:70:7c:dc:
                    f2:b3:47:a6:5c:7e:96:a5:17:13:86:72:0d:71:5e:
                    84:1f:7c:88:f8:85:83:a3:df:a0:cf:63:80:03:c3:
                    f0:7e:cc:8f:e8:5e:d5:4f:be:62:09:dc:ed:ac:54:
                    93:10:6e:57:a4:78:f1:9a:e3:fa:c7:f9:8d:d4:53:
                    02:8e:ae:d6:2d:c0:f2:9f:d4:df:c5:c7:62:14:0a:
                    2e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CB:13:92:E6:77:1A:34:B0:59:90:29:E7:70:90:75:3D:E6:7E:59
            X509v3 Authority Key Identifier:
                keyid:0A:8E:7D:FC:D2:00:C8:5E:B3:CA:C6:6F:85:9B:71:10:AB:99:B1:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co59_NIAyF6zysZvhZtxEKuZsQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f9eff-b608-41df-91d4-a47eb9329597/1/Co59_NIAyF6zysZvhZtxEKuZsQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:59:48:a9:f3:86:64:98:97:1e:20:a0:3d:1e:af:33:81:
         a2:70:96:77:09:78:f2:93:ed:ec:14:ab:9a:aa:d1:f2:d5:63:
         91:e1:99:5d:a3:f3:b7:e2:44:16:e0:72:06:6b:08:c2:2a:f8:
         d6:64:a1:45:90:59:0a:23:d5:6e:db:13:e4:1e:6c:9b:31:33:
         c5:fe:65:2d:83:b3:13:55:b3:27:0a:52:d9:74:21:f6:73:9a:
         42:55:53:ab:7f:4f:c5:9c:65:fb:35:57:2d:1d:50:60:e7:c4:
         b8:8e:73:ec:42:1c:f9:7b:17:ca:50:34:5d:a0:7b:ce:56:79:
         eb:aa:63:f6:22:c5:49:cc:0e:6b:1a:28:9a:ee:a5:a4:b7:63:
         65:0b:d7:06:15:f2:99:2d:29:42:13:e5:25:5d:6f:90:69:cd:
         96:2d:4e:e7:b0:cf:81:b2:b8:1b:d2:06:2d:b7:12:a3:9e:be:
         29:c6:e2:a4:b1:7d:a6:9a:6d:34:3f:43:83:80:92:b2:60:64:
         81:db:df:4d:1a:56:40:7c:79:1c:22:6f:c2:fd:2b:44:cc:4d:
         d5:a8:70:bc:b2:52:71:9d:ae:13:54:f6:24:e3:70:81:c5:4f:
         0f:59:03:1f:1b:13:d8:f1:3a:fa:ac:a0:80:01:99:ff:88:97:
         e1:b5:d8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:20:00 2025 by rpki-client