Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft
File:                     wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft (raw, json)
Hash identifier:          39qg3Z87KDREvSidbh3axp+aJl2i1+3QOK5Ar7pjaw8=
Subject key identifier:   EA:24:F5:DE:20:D3:E1:5C:7B:ED:47:33:16:08:77:14:84:54:C9:2F
Authority key identifier: C1:3A:8D:7E:35:49:FA:DF:56:B4:E8:3F:A4:9C:16:B7:3C:99:40:B5
Certificate issuer:       /CN=c13a8d7e3549fadf56b4e83fa49c16b73c9940b5
Certificate serial:       0194C350D825FF4207C85EADAB3F68105EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft
Manifest number:          142B
Signing time:             Sat 01 Feb 2025 21:00:42 +0000
Manifest this update:     Sat 01 Feb 2025 21:00:42 +0000
Manifest next update:     Sun 02 Feb 2025 21:00:42 +0000
Files and hashes:         1: _As1hISE4fUwVCAvs0BVnXhQCD4.roa (hash: zJ5RP70+pw8LBg5tY/zUbPYLP4843KODSCoOJ4Zx6TY=)
                          2: wTqNfjVJ-t9WtOg_pJwWtzyZQLU.crl (hash: Bb7tM45jiTBvljhRjKbnVbd+w7evLg9Dwf7OSH0HAOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:50:d8:25:ff:42:07:c8:5e:ad:ab:3f:68:10:5e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13a8d7e3549fadf56b4e83fa49c16b73c9940b5
        Validity
            Not Before: Feb  1 21:00:42 2025 GMT
            Not After : Feb  2 21:00:42 2025 GMT
        Subject: CN=ea24f5de20d3e15c7bed4733160877148454c92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:d9:5f:7e:c7:1c:4c:89:f4:ee:7c:c3:66:
                    85:f8:56:c6:31:d0:3a:3a:af:d2:9c:3b:a7:7d:63:
                    db:83:52:8a:7f:47:b3:18:b0:89:c8:9f:5b:eb:c7:
                    33:3d:24:c6:67:17:e1:f9:28:8c:30:ae:01:2c:4b:
                    4c:81:7e:46:d6:c2:4a:b4:75:5b:c0:51:47:79:06:
                    12:a3:2d:7f:65:da:30:83:71:8d:d4:97:69:96:55:
                    c5:93:9a:73:05:c0:41:d4:68:fe:c6:a5:92:61:75:
                    4b:94:b3:12:02:43:37:b8:ff:ad:63:88:e7:08:1b:
                    bd:fd:42:82:38:46:4f:51:fe:15:22:74:bf:ee:cd:
                    57:9e:bc:56:e6:af:c9:35:aa:2c:1b:13:13:96:5c:
                    0a:8d:c4:92:bf:69:9c:d3:c2:bd:65:22:67:8e:d8:
                    b6:bf:54:4c:0f:20:54:83:c7:eb:19:c9:97:26:f4:
                    42:f5:64:80:4c:01:dd:18:86:4c:9f:5a:4c:a2:e5:
                    ed:50:06:f8:7f:7c:b5:94:1c:9f:df:fc:65:a9:31:
                    f5:f3:77:4a:4b:8f:f8:66:bd:b8:f1:8d:c5:d8:2c:
                    10:fa:48:c4:77:3f:51:9a:08:ec:3a:c9:6e:30:f2:
                    36:f2:88:4f:f2:49:25:d9:76:47:46:04:25:e9:c5:
                    f0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:24:F5:DE:20:D3:E1:5C:7B:ED:47:33:16:08:77:14:84:54:C9:2F
            X509v3 Authority Key Identifier:
                keyid:C1:3A:8D:7E:35:49:FA:DF:56:B4:E8:3F:A4:9C:16:B7:3C:99:40:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:da:df:21:cc:0f:7f:3b:f8:0c:1a:5f:72:22:a3:28:14:4f:
         5b:0e:08:26:dd:ea:53:6a:6e:e9:3f:23:d8:df:65:5a:92:91:
         3f:9a:65:e0:92:58:a9:7c:6d:12:b0:b4:0d:68:79:5d:e6:93:
         be:cb:d9:93:37:dc:20:65:4a:27:a7:7b:73:4d:de:e1:07:ff:
         69:dd:1b:00:71:52:e7:55:ff:e0:41:e5:fe:f2:37:15:69:e0:
         fe:fd:75:dd:12:a1:09:1e:2c:b9:e0:0b:18:e7:56:e6:cd:c9:
         90:2f:7b:63:6a:20:40:31:e1:db:82:ba:ba:9f:28:76:c8:5d:
         66:a1:02:05:62:eb:27:e9:fd:93:26:cc:46:6f:0a:69:d0:00:
         98:c0:79:a0:71:f6:67:4d:33:0f:12:35:59:18:32:bb:14:ff:
         39:8d:50:a9:17:ad:a7:c7:f7:84:3c:e5:e4:1c:9f:16:93:fb:
         74:8e:ce:9f:0b:40:02:4a:05:54:a4:c7:c9:7a:7c:b5:23:e4:
         c8:6c:8f:cc:c6:87:de:df:64:5d:a4:b5:6e:2b:3b:4f:34:fb:
         3c:38:2a:11:b5:10:f2:6b:43:26:4d:c6:18:a3:7a:a4:c9:e2:
         09:4f:48:7c:e1:25:cf:e4:e0:51:d4:45:0e:4e:67:89:35:1b:
         47:75:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:50:06 2025 by rpki-client