Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
File:                     kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft (raw, json)
Hash identifier:          X/enfLLDmEEZhFeiGLb8VA4qZ1gsqFe0GCl7KjRSxLQ=
Subject key identifier:   10:D9:02:AB:82:B4:95:F9:1C:AD:34:74:EC:19:47:F2:4F:51:67:90
Authority key identifier: 91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1
Certificate issuer:       /CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
Certificate serial:       01958B4DE5D17658D2F7B3F12060C7D889A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
Manifest number:          1330
Signing time:             Wed 12 Mar 2025 17:01:32 +0000
Manifest this update:     Wed 12 Mar 2025 17:01:32 +0000
Manifest next update:     Thu 13 Mar 2025 17:01:32 +0000
Files and hashes:         1: SX3vKCIesg7brXNXKPon4jGBLVQ.roa (hash: QbCrUZtkCCzMgLc9gxL+FBpDYE7YV20lMwm2mk5wzSk=)
                          2: kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl (hash: w+P+1gc832GBfXcA42don+giwDBFSeSA14TtGIzqsUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:e5:d1:76:58:d2:f7:b3:f1:20:60:c7:d8:89:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914b7d1e6e72d55c8d1c4a3e8241d71dcf8e3bf1
        Validity
            Not Before: Mar 12 17:01:32 2025 GMT
            Not After : Mar 13 17:01:32 2025 GMT
        Subject: CN=10d902ab82b495f91cad3474ec1947f24f516790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:9f:e0:12:dd:25:8c:13:d7:f0:6c:ae:49:
                    ea:8a:02:d3:19:9c:f9:0e:de:88:5a:12:12:ac:51:
                    1d:02:cd:ab:52:27:ca:fa:14:84:b1:17:ef:a4:09:
                    d0:c2:c9:56:1a:9c:31:6d:70:da:e8:33:fb:82:62:
                    a9:d5:0f:8d:75:2c:75:dc:76:c7:3d:03:eb:a0:a9:
                    36:2d:5c:9d:7e:2b:00:1f:5d:ca:18:56:1b:27:a9:
                    61:d0:cc:e7:61:ea:e0:8b:ed:61:5e:d7:9a:94:2d:
                    c2:cb:55:25:c7:d4:ad:cb:e8:8b:15:da:5a:74:92:
                    29:6a:77:0f:ed:47:5b:a6:c9:db:aa:c0:c3:57:7e:
                    9f:d2:0b:33:a1:62:ad:1b:71:a3:16:b0:6f:7b:88:
                    56:a5:d9:e4:6d:52:89:4f:3f:99:2f:5b:e1:fd:36:
                    cf:35:6a:bd:04:6f:56:5e:45:ad:b9:c8:96:2a:e0:
                    af:6b:03:08:c0:0b:2b:dd:ae:b7:8f:0e:13:15:7f:
                    6e:cb:74:cf:53:1e:8c:11:53:2a:1d:a1:2e:ad:4d:
                    34:ef:0f:4e:49:dc:3a:37:b1:02:df:47:9c:02:15:
                    99:cf:2b:4a:68:b4:3a:e2:c0:aa:6d:9c:60:69:31:
                    f4:00:be:8b:47:dc:ef:3b:35:85:3d:5c:7d:19:1c:
                    96:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D9:02:AB:82:B4:95:F9:1C:AD:34:74:EC:19:47:F2:4F:51:67:90
            X509v3 Authority Key Identifier:
                keyid:91:4B:7D:1E:6E:72:D5:5C:8D:1C:4A:3E:82:41:D7:1D:CF:8E:3B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8349e4-69cc-4140-a744-abed74415b8f/1/kUt9Hm5y1VyNHEo-gkHXHc-OO_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:72:c9:40:ea:53:10:55:55:95:80:e0:31:c9:6b:bf:49:93:
         29:7c:e7:c5:a8:8e:38:79:1e:96:95:35:b7:b6:cc:ff:1c:3a:
         c8:d0:ec:c4:9b:ab:9d:50:44:21:44:e7:16:b5:46:76:f2:3f:
         72:26:25:63:4a:d0:ee:bd:cf:e5:de:08:2a:a0:0d:e2:75:5a:
         2e:3f:52:c0:57:00:f1:73:ab:09:52:92:03:21:a4:4f:47:d6:
         3b:e4:34:e3:9f:ca:c9:07:58:6c:8c:c9:00:b9:99:0b:a5:3d:
         fa:cb:f7:4e:a6:9e:d7:0f:51:db:8d:25:c3:75:da:ab:97:39:
         d2:91:bc:0f:9b:26:eb:d8:2d:36:5f:a7:b0:3a:b1:e1:d8:9d:
         db:51:eb:3a:01:2d:30:91:fd:f6:b5:e9:c4:b8:78:6e:da:1f:
         0f:7e:4b:16:d5:bc:41:72:30:ee:dc:d3:04:2a:68:70:b9:9b:
         a6:13:22:92:e7:0b:70:32:cc:b9:dc:27:f3:51:42:8e:64:fe:
         ea:41:e6:50:d2:70:69:9b:dc:48:ec:50:63:12:3c:08:29:f6:
         0c:20:06:e9:ba:7a:54:14:e6:11:49:a9:b9:ab:74:68:99:6b:
         e1:af:94:fa:07:ef:f8:51:03:b8:a0:33:7d:78:65:f1:3b:14:
         65:d1:d9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:56 2025 by rpki-client