Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
File:                     qPuDH1vWwMILjgm-URwhvn3F3ro.mft (raw, json)
Hash identifier:          DgF1F+oPmepUH1mLd6bF31ysexu9nx9tvFN7mSLiFy8=
Subject key identifier:   82:2F:A2:E3:30:44:80:9D:1A:16:C3:04:A9:2A:05:DD:2E:BE:F1:34
Authority key identifier: A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA
Certificate issuer:       /CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
Certificate serial:       0194C463A5DB552897A33FA39112E9768E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
Manifest number:          0413
Signing time:             Sun 02 Feb 2025 02:00:52 +0000
Manifest this update:     Sun 02 Feb 2025 02:00:52 +0000
Manifest next update:     Mon 03 Feb 2025 02:00:52 +0000
Files and hashes:         1: eVNnviqiIdPY1BUvp61D_AbFKTc.roa (hash: zPSI/g0bx6X/hvEByyb1M6C4zHIhQAKfdMZa4T5kVWA=)
                          2: qPuDH1vWwMILjgm-URwhvn3F3ro.crl (hash: FgiXU9A1kHvaQhlEE3jIyiWvzG2STn8rVmzONxWm/AM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:63:a5:db:55:28:97:a3:3f:a3:91:12:e9:76:8e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
        Validity
            Not Before: Feb  2 02:00:52 2025 GMT
            Not After : Feb  3 02:00:52 2025 GMT
        Subject: CN=822fa2e33044809d1a16c304a92a05dd2ebef134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:2c:00:13:20:c4:4b:db:57:76:c2:20:ea:
                    01:66:b5:2a:3b:b1:58:9f:da:ba:04:b0:a5:e9:15:
                    55:9a:8a:b6:ea:fd:df:5f:82:09:68:3b:c3:99:d5:
                    c7:2e:a7:a5:b1:3b:04:05:ab:22:8f:92:9d:8a:10:
                    23:0e:16:90:5a:0e:ea:c0:ae:92:5a:f9:bc:e0:f5:
                    28:5e:88:c9:03:ac:d5:49:c8:46:ed:d0:e0:aa:74:
                    54:1d:6e:24:17:a4:14:5b:dc:53:23:10:28:01:34:
                    8a:af:fe:ec:ee:ae:09:38:b8:e3:5c:ba:6b:6f:fc:
                    25:95:17:d5:14:3d:e4:11:78:31:78:39:53:47:e2:
                    58:57:1c:d5:30:f5:e7:d4:03:51:80:1e:fa:07:a3:
                    23:f1:b1:03:e2:a3:28:92:96:47:5c:57:7e:2a:90:
                    2f:44:75:64:bd:5a:2b:b3:64:71:18:ad:cd:ef:21:
                    b4:47:4e:e6:74:f8:b5:71:27:6c:4f:38:1c:d8:40:
                    fb:82:04:1b:a0:b9:12:7d:e9:9a:29:d2:ed:3d:65:
                    f8:ca:b9:b7:dd:bc:90:11:1d:af:48:da:96:e7:7b:
                    c2:40:76:44:55:fe:2c:3d:64:a4:de:b7:d1:f1:0f:
                    32:42:22:f3:19:12:fa:91:e6:9e:20:04:63:1c:71:
                    ec:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2F:A2:E3:30:44:80:9D:1A:16:C3:04:A9:2A:05:DD:2E:BE:F1:34
            X509v3 Authority Key Identifier:
                keyid:A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:20:46:bb:56:6d:86:8f:bb:62:4f:b5:fc:07:36:14:76:57:
         7c:19:fc:d3:69:cd:17:a0:fa:0c:c0:07:c5:a1:cb:64:4e:54:
         19:65:3d:03:26:fc:f4:ef:c4:cf:25:7e:13:3c:82:ed:1b:37:
         6e:90:79:7f:24:fa:74:11:df:5e:5c:9f:07:27:6c:26:29:ac:
         4f:29:ad:bc:7d:ca:c5:01:98:82:c8:7a:62:a8:55:f6:bb:f7:
         cd:c9:93:98:f8:11:d2:92:c9:98:4d:88:b1:e8:e3:00:e8:59:
         63:c8:e4:8a:fa:60:09:37:1c:6f:ac:91:eb:0f:7c:00:65:c7:
         0b:55:88:29:d7:15:42:ef:db:6c:b2:93:b3:92:9d:34:36:0a:
         0e:be:4b:55:64:9b:93:4a:b5:59:6d:60:36:3a:44:95:79:0c:
         9e:1b:19:59:68:58:47:92:ff:91:53:46:28:a0:08:58:58:94:
         7e:3b:be:91:3f:30:12:12:30:f7:31:d3:e2:31:31:44:0a:27:
         98:4c:5d:a3:9c:7e:ab:ee:33:47:6e:f5:1d:d2:74:b9:16:3f:
         4f:a6:16:a5:a4:22:65:19:af:f2:f7:15:4d:67:3d:b8:7a:4e:
         5e:44:4b:ef:1c:11:b3:64:ee:b2:f9:e2:52:25:75:f4:fc:5e:
         a9:9b:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:56:51 2025 by rpki-client