Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
File:                     51ZNDMfaBfpYz72MKpQ1yzNizeI.mft (raw, json)
Hash identifier:          ecgZ7BBLY3kg6OYaif0Sm6P3+jHpMagOhs7m3jCM2kY=
Subject key identifier:   38:A3:89:36:AA:23:66:A8:06:D9:D2:07:F4:D4:D2:54:A7:1F:68:32
Authority key identifier: E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2
Certificate issuer:       /CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
Certificate serial:       019512108C1EB0257DB2AD966576FC801D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
Manifest number:          03F1
Signing time:             Mon 17 Feb 2025 04:00:29 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:29 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:29 +0000
Files and hashes:         1: 51ZNDMfaBfpYz72MKpQ1yzNizeI.crl (hash: ot1oQRFdR/74X0Mri8jQILk/QcjlREbmYvt+v2cps5A=)
                          2: Ylfj2CG1V0DaK4f8uH_BBUtoGWA.roa (hash: CAUuMYHSplNovMOYBe0Qjx/057sd/Jrw0wK6ui3RBo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:8c:1e:b0:25:7d:b2:ad:96:65:76:fc:80:1d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7564d0cc7da05fa58cfbd8c2a9435cb3362cde2
        Validity
            Not Before: Feb 17 04:00:29 2025 GMT
            Not After : Feb 18 04:00:29 2025 GMT
        Subject: CN=38a38936aa2366a806d9d207f4d4d254a71f6832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:5d:6c:71:87:ed:c7:5d:df:08:70:53:24:
                    a9:a4:77:3e:73:c1:5f:80:c8:64:82:e0:5a:0a:e7:
                    b0:4b:c2:53:f9:97:e3:ec:e0:81:3e:36:5b:8a:68:
                    7d:aa:d5:50:6e:2c:86:4c:d4:b3:d6:f8:ff:0a:4b:
                    f4:f2:62:83:3d:bf:e1:09:c1:b1:37:88:12:c4:78:
                    8a:9f:18:bc:a0:30:a6:f9:39:01:c9:f6:dc:43:4a:
                    a5:f4:84:07:29:60:b1:ba:09:c1:f2:93:d1:3a:8d:
                    3b:d0:fa:40:67:95:24:1a:1b:42:56:ce:58:b4:71:
                    68:db:f5:67:05:04:0a:5e:b9:f0:d3:12:cf:9d:2c:
                    38:e1:78:fe:a9:1a:5c:d4:eb:34:ce:cf:fb:cf:57:
                    bc:f0:3b:17:31:a0:da:05:5b:f3:54:99:1d:76:12:
                    fc:1e:d4:b4:dc:da:94:e5:b5:22:e4:ab:c8:81:68:
                    d5:d3:75:1e:48:bb:8d:ca:f3:8e:97:82:17:1b:3e:
                    7f:6e:53:e0:d3:59:59:3b:80:dc:8c:6e:24:ea:f7:
                    30:da:de:ea:a2:1c:6a:7b:e2:44:24:6f:6c:e9:54:
                    bc:1a:d3:04:73:f9:94:3a:19:8b:cf:ea:fd:d0:9d:
                    db:70:26:48:0c:be:07:b4:b0:44:a3:d4:6c:ed:51:
                    5c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A3:89:36:AA:23:66:A8:06:D9:D2:07:F4:D4:D2:54:A7:1F:68:32
            X509v3 Authority Key Identifier:
                keyid:E7:56:4D:0C:C7:DA:05:FA:58:CF:BD:8C:2A:94:35:CB:33:62:CD:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51ZNDMfaBfpYz72MKpQ1yzNizeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/42cfae-e29d-4d94-ba52-c41d99f17fda/1/51ZNDMfaBfpYz72MKpQ1yzNizeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:95:e6:42:4d:72:19:e4:cb:81:40:bd:18:4f:98:fd:3d:75:
         6d:64:c1:f7:6a:42:92:8a:bb:80:87:69:dc:5e:6f:cf:cb:c9:
         ed:6e:47:90:bd:c7:8c:0e:34:47:e7:24:ea:a3:1d:ad:74:a5:
         f3:64:ff:3c:2b:31:f5:5a:1f:72:51:0f:07:7f:8c:b3:12:ba:
         0e:1f:42:80:ea:f7:c8:df:9e:cf:31:a8:a3:b7:20:3c:76:73:
         76:50:e2:37:82:60:25:88:8b:06:e8:f7:14:4d:2b:00:c0:55:
         00:d1:77:32:d7:1f:39:f9:e9:2d:c6:80:82:bb:e6:0d:b1:98:
         25:4a:36:13:f8:e3:d0:7a:88:bb:5f:79:44:62:7e:08:fa:09:
         5b:66:f9:c6:cf:44:fb:b0:80:7a:9a:0e:6b:e4:18:bf:86:cf:
         dd:85:16:c1:2c:1b:e9:2e:22:a5:1a:54:16:0e:fd:6b:d7:f5:
         f8:58:9e:94:21:b6:16:1b:86:af:26:17:b3:17:88:08:83:56:
         62:88:08:77:32:08:e4:df:6d:73:86:8f:a2:6a:0a:92:1d:68:
         5c:1c:03:5b:e6:58:8a:9f:28:dd:ca:84:2e:e3:ba:f7:5e:5f:
         4b:25:05:fa:3d:0a:4c:93:b5:96:33:20:95:41:a4:c2:69:f6:
         6b:2c:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:24 2025 by rpki-client