Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
File:                     O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json)
Hash identifier:          gOnD1SFFMd8hs0IWU8r4Cxb04/WQN8jVQFpGSDyNCl8=
Subject key identifier:   0F:A5:07:86:93:2C:A3:15:BB:59:90:AB:0D:B3:FB:75:2E:03:CB:70
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Certificate issuer:       /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial:       0195116BCEDF76D85A282C25EA3FF56A4876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
Manifest number:          0950
Signing time:             Mon 17 Feb 2025 01:00:32 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:32 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:32 +0000
Files and hashes:         1: B_LnlrHFLDYdboiRTTX-o67316g.roa (hash: /s1mWUis0Ft8zGqbhZQCKScqMXaiERmijyCGapgBJDo=)
                          2: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: LbvLBajQIwVthRbZk/a7niYfinMSKG525ggfqHzlczE=)
                          3: t25kiIn1E1JaqushvudH22_Oin8.roa (hash: MldHzVCGVwkubjlvJvGtIUqXljxX6Z5QiyeDzunyRNg=)
                          4: x5hcCT_pnCegVho4bWAxZzf2qpw.roa (hash: Dn/NH4vuyRdNLuvR+t3zMheYrsd6ixnhzcIiKC8V59s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:ce:df:76:d8:5a:28:2c:25:ea:3f:f5:6a:48:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
        Validity
            Not Before: Feb 17 01:00:32 2025 GMT
            Not After : Feb 18 01:00:32 2025 GMT
        Subject: CN=0fa50786932ca315bb5990ab0db3fb752e03cb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:d5:a1:8c:89:1b:47:20:24:b8:c6:f3:4f:
                    6c:f0:77:4a:81:e2:28:23:1f:0f:33:e3:af:44:25:
                    f6:f1:22:a4:b1:a2:6a:55:13:a5:12:9d:08:50:53:
                    2f:4d:4d:d8:35:2f:10:cd:ca:7c:9e:9d:ed:53:a1:
                    c1:09:72:21:ae:c0:c5:e1:89:1a:33:05:dc:64:cd:
                    28:20:5f:0d:95:09:b1:48:88:3c:f3:72:ee:53:2e:
                    01:c7:79:ae:b0:30:a1:4b:ae:22:4d:b9:bc:25:70:
                    12:16:56:e2:29:f5:1f:99:70:da:15:7a:38:44:dc:
                    7e:38:34:bc:0f:bd:f1:a4:ab:c0:78:7c:71:6b:0d:
                    b4:3d:b3:d8:b5:71:87:03:2b:6b:0b:43:43:d9:8d:
                    72:1e:d8:b1:be:ff:f4:48:18:cd:9f:1f:27:16:86:
                    fe:ef:17:0e:c9:0e:b6:d8:08:f8:33:60:b3:54:46:
                    b4:23:80:a2:c9:a2:5f:9a:5a:00:e9:ed:ff:d4:59:
                    f4:f5:a4:e9:a1:50:42:bf:2b:9c:3f:3b:e8:4c:e5:
                    4f:fa:a5:30:82:ff:6a:02:f3:b5:6c:b8:7d:5f:fb:
                    6b:65:9b:61:66:9b:4e:ea:40:92:9e:df:16:38:b9:
                    e7:21:56:08:c3:51:a3:a0:9a:f2:65:3b:0c:ae:4c:
                    06:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A5:07:86:93:2C:A3:15:BB:59:90:AB:0D:B3:FB:75:2E:03:CB:70
            X509v3 Authority Key Identifier:
                keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c2:f2:d2:eb:a6:23:b8:3e:3b:69:38:6c:f1:60:4a:a8:19:
         7d:90:00:bb:14:1f:a1:65:b6:f6:d0:94:a7:37:76:33:8e:95:
         ef:2f:7f:65:78:1c:22:13:10:98:65:0b:6e:99:f8:b3:d2:7c:
         dd:b1:56:77:36:8f:e6:c1:76:c2:bf:82:98:fa:7c:8b:5a:4d:
         25:cc:af:a8:a2:25:f7:5a:44:40:8b:2e:0e:a6:df:cd:c2:10:
         bb:13:97:8d:dc:88:50:34:8a:b1:a9:8c:22:70:93:9b:21:e6:
         9a:ca:ac:04:3b:13:4a:dc:35:09:25:d1:d0:1b:f4:dc:9f:25:
         4e:82:4f:35:49:eb:26:ba:3b:c7:b7:81:86:50:17:9f:bd:b2:
         1a:b2:40:8c:de:5f:95:29:02:eb:a6:c7:cd:af:6e:5c:40:99:
         18:0e:3d:37:d3:4c:36:25:65:53:91:86:10:93:a8:4f:a6:6e:
         18:32:da:1a:5b:7e:31:2a:a9:19:50:8e:77:8b:02:b6:44:01:
         75:10:56:3b:c8:55:86:8c:25:f6:e8:95:09:0e:22:be:ba:c8:
         5a:98:c0:b9:71:a7:e7:fb:d5:5d:42:a1:91:f3:25:94:ce:2f:
         3c:df:e2:9e:98:52:dc:c8:ce:96:a2:45:00:de:e4:85:73:75:
         bd:b7:23:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:29 2025 by rpki-client