Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File:                     oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier:          7xWX8B/CnCVJmvxAmk1IUVj4Bo53K4gPiQAi4DzRQzU=
Subject key identifier:   EB:FC:90:6F:DA:D2:8E:9A:FB:0A:C6:DE:75:1D:86:9E:BF:44:AC:BB
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer:       /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial:       01951134C68DEA1386A5BC8DE48187B7BF8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number:          0C31
Signing time:             Mon 17 Feb 2025 00:00:26 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:26 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:26 +0000
Files and hashes:         1: o9hMDi-VrcUI4pB3FZBa-_jIwnc.roa (hash: avmrJ2rsXtwjFy7tu4gv+fivfWYGTorP5jQUfY03fLE=)
                          2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: rzwNTVT2X/bZqML/jOuN64M3FSxWBa8rcbAkCnBlaf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:c6:8d:ea:13:86:a5:bc:8d:e4:81:87:b7:bf:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
        Validity
            Not Before: Feb 17 00:00:26 2025 GMT
            Not After : Feb 18 00:00:26 2025 GMT
        Subject: CN=ebfc906fdad28e9afb0ac6de751d869ebf44acbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:29:fc:6f:4b:e2:94:2c:fc:f0:51:ea:4e:
                    e0:5a:7a:97:e4:4f:74:c8:ed:9c:3f:f2:fe:c0:da:
                    ca:47:74:86:54:2a:74:b3:bc:e7:7b:f8:dc:63:ef:
                    91:8c:a4:eb:c0:47:dc:4c:18:39:d0:f0:87:3d:c0:
                    c9:ba:31:72:68:07:aa:0d:bc:f7:5e:86:14:77:f3:
                    45:87:af:d3:2e:3d:e4:57:c3:c1:f6:50:68:6d:02:
                    0e:ab:67:55:47:a2:0d:da:17:3a:1b:85:8f:28:ec:
                    7a:55:15:eb:81:15:a1:1e:41:7d:8f:3a:84:81:26:
                    31:15:a5:25:64:1d:93:6e:9e:bb:04:e8:9f:30:97:
                    bd:b7:16:4f:37:ea:7c:c1:51:df:66:b3:d5:51:6a:
                    6e:18:47:33:35:8d:e9:67:71:3a:b6:b8:19:f4:95:
                    e9:5e:99:a9:04:ef:31:bf:df:76:80:52:3a:7b:07:
                    08:ca:65:a1:39:40:7d:35:41:d7:f4:ce:a8:bb:8f:
                    b3:62:84:77:95:54:2e:62:b0:c3:73:0d:87:6e:09:
                    64:17:56:ec:de:1c:56:0f:b8:26:a8:e7:d1:e8:7a:
                    4a:ca:9d:e0:3a:5b:89:eb:3a:88:cd:7d:c5:cf:a8:
                    a3:f9:c9:8a:d7:24:a9:1d:26:ef:0e:fa:ee:47:50:
                    18:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FC:90:6F:DA:D2:8E:9A:FB:0A:C6:DE:75:1D:86:9E:BF:44:AC:BB
            X509v3 Authority Key Identifier:
                keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:58:87:91:c9:9a:09:27:ed:8d:58:f4:09:28:63:f1:92:23:
         1c:4b:aa:78:41:48:23:db:03:2a:a1:05:56:59:48:88:ff:63:
         7c:7b:14:3a:ec:51:58:cf:dd:aa:02:bd:56:6e:ef:ef:e8:7c:
         19:b7:46:64:9c:d3:b9:aa:9c:35:bd:0b:c9:9f:f9:b7:59:ce:
         29:17:56:69:2b:f0:44:f3:cd:7d:f5:fd:f3:fa:81:5b:6d:52:
         2b:ce:5e:13:e6:3d:d1:50:ad:94:46:ef:15:4d:f9:c6:9b:b0:
         e3:9e:2f:3a:10:ef:75:23:d9:cc:6e:05:4b:ee:ec:00:8a:b0:
         8d:9d:14:12:5e:7f:91:7b:78:aa:42:c5:a2:3b:81:f4:3a:60:
         29:ef:d1:3a:c7:cb:34:5e:b5:e7:e1:20:98:1b:a0:fc:d4:31:
         6a:fd:fa:96:5d:70:27:7e:69:4f:50:eb:85:04:f3:9c:50:20:
         5f:c2:e5:55:a6:7e:73:e4:fa:e9:a0:ad:1f:dd:fc:05:00:87:
         b0:70:6f:7c:7f:66:93:65:1b:07:0b:fc:c8:b0:c4:8e:bc:f6:
         25:e6:70:2a:9c:e9:62:9a:e2:9a:65:a2:dd:aa:e3:05:af:c1:
         d4:0e:18:99:f5:c2:4e:79:2d:c8:c1:92:0a:c4:d7:65:d2:9f:
         05:cb:1f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:20 2025 by rpki-client