Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
File:                     nyasnus6LPovbKP0E--5zf_pck4.mft (raw, json)
Hash identifier:          9Nt9LrmfWoKZlkXpFbhp5sliYJeWVudAHiA7VcKhjBo=
Subject key identifier:   4A:55:CB:DD:8F:1D:AA:EC:BE:A8:4A:59:69:52:DC:E9:5A:A3:CF:C6
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Certificate issuer:       /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial:       019510C71C9FF4021D3DC52CC7ECB5B39AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
Manifest number:          1469
Signing time:             Sun 16 Feb 2025 22:00:39 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:39 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:39 +0000
Files and hashes:         1: gFDYu-uhEM1jBAo3hw85Wh4IxBw.roa (hash: 7u75Gy2BAJ4DBJsB/vM91L7VubiXctkI6OGQbCkbAws=)
                          2: nyasnus6LPovbKP0E--5zf_pck4.crl (hash: 8P7/64esKoMuVt/bV7BwzfEHEPQX3pcmQF478/SYEE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:1c:9f:f4:02:1d:3d:c5:2c:c7:ec:b5:b3:9a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
        Validity
            Not Before: Feb 16 22:00:39 2025 GMT
            Not After : Feb 17 22:00:39 2025 GMT
        Subject: CN=4a55cbdd8f1daaecbea84a596952dce95aa3cfc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3b:37:e1:04:b1:7a:ea:bd:81:86:55:29:1c:
                    4d:6a:f2:9f:9b:44:34:b1:cf:82:5c:0d:60:5a:7d:
                    3d:ef:41:4a:6a:0b:e9:31:0c:54:a3:36:c4:05:74:
                    ed:06:29:a2:a3:b6:2b:af:18:d3:34:fa:78:3a:cf:
                    94:66:23:00:1b:6b:07:b6:eb:45:79:13:85:9c:0b:
                    5f:f2:bd:f4:c7:60:26:22:9a:9a:e0:f2:55:56:7a:
                    1b:eb:f8:c9:cc:0f:f8:d6:6e:22:17:47:15:f2:2e:
                    b2:a2:60:8a:37:fa:cb:5b:25:44:39:ee:40:1f:a2:
                    b3:8b:9a:8e:91:43:bc:56:f1:4c:13:7e:38:02:c3:
                    0f:41:f1:af:9a:81:ff:b4:82:c2:e1:88:98:af:ba:
                    80:56:39:3d:c8:92:4f:52:f3:e8:27:23:25:bc:05:
                    56:4e:9d:63:8e:9b:c6:38:b0:a8:8e:40:2b:5d:1a:
                    67:88:b4:c7:f7:a4:56:e5:a9:0b:76:df:58:29:6d:
                    8c:e8:1b:82:40:7a:c8:8b:d7:b4:ec:f7:2c:c5:6e:
                    28:b1:e4:e9:1a:9e:ab:99:18:d5:41:a7:8d:7c:21:
                    14:e8:c7:17:71:63:55:36:b7:dd:51:f4:a2:f2:e3:
                    08:55:b6:e7:b6:af:b7:6c:06:52:92:a3:34:72:0b:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:55:CB:DD:8F:1D:AA:EC:BE:A8:4A:59:69:52:DC:E9:5A:A3:CF:C6
            X509v3 Authority Key Identifier:
                keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:85:f9:d9:b3:05:a1:e8:e8:f3:f7:c3:e7:c5:d6:74:df:28:
         33:b0:0c:79:af:f3:1b:f5:4f:d9:05:45:4e:0d:0e:18:bd:ed:
         82:a4:e5:c4:5b:a3:7c:19:cf:2e:e4:f5:50:54:74:2e:c8:f4:
         d9:55:dc:a1:48:d3:89:f9:11:06:b2:88:a1:b3:e7:a0:3d:47:
         a1:1a:7b:4a:6d:c3:cd:eb:a3:a1:f4:26:1d:1e:4e:d4:98:1d:
         7e:d3:99:f1:05:c6:ec:8a:83:0d:d5:f7:0a:c6:8d:fd:47:48:
         d3:29:33:e0:6d:df:bc:20:bf:02:b1:d8:a7:f2:9d:9a:d8:21:
         c5:98:70:99:8a:00:76:9d:37:dc:d0:76:41:dc:56:1b:d9:77:
         7d:41:e4:4d:e8:a3:d9:b4:9e:8f:70:2f:99:20:3a:e0:66:84:
         bc:02:6f:5a:46:99:49:09:d2:21:76:b2:2c:9e:64:9d:37:04:
         3b:37:6c:96:57:5f:da:af:38:99:ed:b7:2c:87:84:e2:f1:c2:
         ec:90:8f:dd:59:be:a7:43:89:dc:c9:24:f2:09:5b:40:ff:43:
         9d:ca:c7:ed:11:69:8b:b2:fb:df:f2:d1:c1:36:0e:01:e1:6e:
         4e:3b:3c:fc:5d:c0:81:86:d1:5f:9f:3e:9e:af:47:63:47:62:
         8d:a8:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:49 2025 by rpki-client