Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
File:                     Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft (raw, json)
Hash identifier:          WESBt8PdHQOvhU8ghkMJWgigMgFHqM1V1AQxwf/3LX0=
Subject key identifier:   E4:E2:9C:43:D2:54:97:35:D6:74:F7:C2:E2:3C:35:0A:AD:53:2A:0B
Authority key identifier: 45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5
Certificate issuer:       /CN=45bbb0c37704bfd558849c6549af9734e7d14be5
Certificate serial:       019510C6F3757269ADECA4642FBAC1D5F264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
Manifest number:          038A
Signing time:             Sun 16 Feb 2025 22:00:28 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:28 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:28 +0000
Files and hashes:         1: HrWHZLwLz9SHQNWDWAqLUzhWNgM.roa (hash: +TAR64SkVojwAPPcj29LtZXZh5haH9rqB2EiQmQF6cY=)
                          2: Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl (hash: bMdQ/d3XRmj34EGjeQM8iTor2RfSxf2m4qsZInJdg9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:f3:75:72:69:ad:ec:a4:64:2f:ba:c1:d5:f2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbb0c37704bfd558849c6549af9734e7d14be5
        Validity
            Not Before: Feb 16 22:00:28 2025 GMT
            Not After : Feb 17 22:00:28 2025 GMT
        Subject: CN=e4e29c43d2549735d674f7c2e23c350aad532a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:4b:20:86:33:cb:d3:be:cd:d8:63:89:0e:
                    5f:6a:7d:f4:01:79:d7:00:16:4f:6c:a1:5b:ff:c5:
                    2d:75:0d:23:43:46:01:29:70:bf:2e:74:97:62:7a:
                    84:84:04:0d:8a:32:0a:bc:91:2f:a0:d7:97:db:53:
                    a5:cf:75:00:24:0c:48:be:82:6e:8d:56:51:c5:a3:
                    03:d3:b6:94:84:88:3a:f9:69:50:88:87:d0:87:61:
                    d5:8b:6f:4b:ee:12:00:5d:96:8b:58:c6:0a:86:74:
                    99:99:c0:c7:4d:5b:e8:df:9c:02:cd:20:12:5e:13:
                    aa:eb:fd:00:07:48:70:00:a3:4f:a1:91:af:af:54:
                    99:b2:57:36:6b:30:c1:d6:74:6e:a7:0c:b6:50:80:
                    87:12:fb:d9:78:d4:df:be:45:42:d2:ef:f6:d7:59:
                    59:c0:51:ee:99:51:dd:5b:3f:9a:25:3c:a5:89:9b:
                    4c:9d:32:af:fc:36:47:57:d6:3b:2b:b8:49:fd:b2:
                    1a:00:e2:31:d5:57:b8:1a:af:14:a3:e1:5c:7d:d6:
                    70:63:df:9b:3b:50:c9:89:6f:a7:ac:9f:93:ea:72:
                    2d:1e:aa:3e:b1:90:ee:8a:bf:ed:e8:8e:4e:52:ac:
                    49:7d:aa:14:2c:d0:2b:7e:d2:d8:a2:ca:f8:12:dc:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E2:9C:43:D2:54:97:35:D6:74:F7:C2:E2:3C:35:0A:AD:53:2A:0B
            X509v3 Authority Key Identifier:
                keyid:45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:65:7c:e3:0c:50:ad:56:46:19:de:7e:50:57:ce:f6:65:d2:
         cb:80:2a:49:3d:37:c9:03:03:b4:56:81:57:b3:ac:50:f6:dd:
         1e:87:05:06:40:22:d2:2a:f5:a8:e5:67:31:33:52:11:04:83:
         41:67:71:47:fb:b1:4e:92:3e:66:95:64:a0:ae:3f:ae:8c:d6:
         32:bc:7a:57:c4:b4:18:20:0d:ac:b5:54:76:11:55:1d:03:ba:
         36:93:44:6e:6e:76:c8:78:e5:94:dc:a9:87:92:ff:df:80:b0:
         a4:c7:53:69:b5:88:fd:c2:b5:7d:5c:0d:f7:15:12:92:0e:1f:
         de:56:ca:cb:5b:30:e0:7d:34:65:30:4b:88:a6:64:44:ec:cb:
         5d:f8:cd:e4:36:30:2d:08:a8:12:dd:7f:9e:cb:f6:f9:36:29:
         3c:83:4d:1e:78:55:c0:01:03:51:35:0d:48:a9:fe:05:ae:b9:
         65:e1:e1:a3:72:9c:37:d4:f8:85:cf:dc:31:b5:8b:7e:1c:81:
         70:99:02:e0:4a:36:c5:b6:d8:44:2e:e3:a8:10:b0:19:09:6e:
         bb:61:b3:6f:94:6b:bd:3f:ae:3b:28:7c:6f:a5:59:03:7c:cd:
         07:9d:85:79:12:2a:58:10:f8:d8:83:a9:65:f8:5c:89:0a:45:
         4d:cb:07:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:26 2025 by rpki-client