Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File:                     yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier:          fnfcEZO95DfnKiIbDOp41F5luFCUoOuMgmiiTRwZXRw=
Subject key identifier:   FE:69:B7:D4:14:D2:75:02:03:71:2C:3B:26:CF:D0:1E:E3:84:04:5E
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer:       /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial:       0194C3BE95B718F5E367F48AAB533D216A60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number:          01D4
Signing time:             Sat 01 Feb 2025 23:00:34 +0000
Manifest this update:     Sat 01 Feb 2025 23:00:34 +0000
Manifest next update:     Sun 02 Feb 2025 23:00:34 +0000
Files and hashes:         1: VeB2JYEPPZXx0utNRLtg6FNWYsY.roa (hash: gSEi8VHhU2GnejHtbzAY1q6WOPbiaaKQKVxj7a98mY8=)
                          2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: NY+7l4A/yBYw6plbCvc+PFxnWutm7j/22wegyWfJfb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:be:95:b7:18:f5:e3:67:f4:8a:ab:53:3d:21:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
        Validity
            Not Before: Feb  1 23:00:34 2025 GMT
            Not After : Feb  2 23:00:34 2025 GMT
        Subject: CN=fe69b7d414d2750203712c3b26cfd01ee384045e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:ab:f9:a4:39:d4:4e:b8:ad:86:20:b3:99:
                    83:ad:5f:1e:bc:5a:3a:5f:e9:c3:48:89:02:05:a4:
                    ff:95:ff:aa:ce:d5:9b:c2:df:e5:de:0e:07:d0:4b:
                    17:43:1a:41:9c:72:5e:27:76:5d:d0:27:d3:0e:e9:
                    39:ea:94:2f:c8:03:db:1d:e7:3c:72:a7:1b:ee:9e:
                    91:d0:00:d0:d2:79:89:8a:84:e4:b5:b5:9a:d7:43:
                    2c:09:da:c2:5a:b4:26:06:66:37:6e:5d:df:a6:8e:
                    c7:52:31:2a:74:e6:42:b8:7b:c9:b5:08:45:78:c1:
                    e7:f5:b6:51:4d:b5:e0:6e:5f:bc:56:9b:0f:d3:d1:
                    87:59:f3:64:09:6b:4a:38:0b:c5:58:b3:7d:02:c7:
                    88:5d:d4:9e:78:cc:01:6e:78:61:1b:ed:e1:ec:a7:
                    21:a5:35:5d:92:8b:6f:98:c9:f9:e8:de:12:f9:d3:
                    96:c8:96:8b:87:8c:e5:04:11:f9:1c:79:ee:f5:da:
                    03:15:2b:46:2c:08:69:02:8f:3a:03:85:7a:d8:91:
                    83:d9:cb:28:fd:4c:29:17:eb:47:cc:87:eb:d0:a3:
                    c4:b7:f5:d6:35:56:2d:15:92:12:30:6a:74:f7:b0:
                    2e:8e:ba:bc:d7:85:f7:8d:cc:f9:7f:4b:60:67:11:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:69:B7:D4:14:D2:75:02:03:71:2C:3B:26:CF:D0:1E:E3:84:04:5E
            X509v3 Authority Key Identifier:
                keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:85:a5:c1:cd:fe:2e:77:81:7e:30:d2:ca:66:7c:58:01:13:
         87:8c:06:3d:d5:9b:a1:a4:73:3f:b6:ac:78:11:81:d0:59:6d:
         f4:39:da:d2:c9:f8:36:db:da:36:c9:57:82:29:de:56:01:37:
         03:7e:21:db:10:7f:bf:70:29:21:11:26:17:22:ee:ec:40:78:
         98:61:de:a1:2d:50:95:21:ba:74:8b:16:71:ac:cd:ac:b4:5d:
         05:37:95:2f:d4:f4:57:c9:72:85:62:be:36:12:df:2a:2d:6e:
         9c:9d:25:53:4c:2d:90:13:f0:b5:ee:ab:fa:cf:27:b9:7a:03:
         ae:82:6c:3b:30:f1:4e:2f:9d:8a:cc:3d:dd:fa:79:72:8b:aa:
         97:92:b6:1e:c1:2b:40:7e:d3:c0:10:72:ab:ed:6a:d5:51:9c:
         d8:5b:67:f8:6f:00:59:b6:e6:35:92:25:10:28:2e:17:ba:33:
         05:cc:0b:41:4c:a9:5c:fc:59:28:10:7f:0a:cf:d4:58:d8:82:
         60:24:9a:b0:aa:30:1e:88:8f:8c:2a:10:1f:96:22:72:92:48:
         c2:ae:ae:28:96:97:8f:f3:5f:17:31:b6:ed:ac:43:62:3b:65:
         dc:a2:f5:47:17:02:a7:d4:30:8f:e7:29:7e:75:eb:b0:45:9e:
         55:d6:51:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:23 2025 by rpki-client