Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
File:                     weOkSujPAkPx3_4mhOPdWo_IXXk.mft (raw, json)
Hash identifier:          3koeez2wNtHfh7ssW3hCw+ZGLg2CdacaJy83AaHiX6o=
Subject key identifier:   10:58:27:C6:B3:4D:72:58:7F:3F:77:97:E4:E2:E3:BB:4E:2B:69:13
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Certificate issuer:       /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial:       0194C4D0E026768447C1072988CD860FE3AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
Manifest number:          12A3
Signing time:             Sun 02 Feb 2025 04:00:10 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:10 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:10 +0000
Files and hashes:         1: 6vU4Y-FLIeFLtxbYrYQxP7rEkJw.roa (hash: OiM+asEBFnJBn2ul9evzYMK3DJnJ0TrJLx139d4J6Rk=)
                          2: weOkSujPAkPx3_4mhOPdWo_IXXk.crl (hash: WvzOGvqyCZAPbU+Qc965JlRJgk+PZ7OA6qb9+SYROVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d0:e0:26:76:84:47:c1:07:29:88:cd:86:0f:e3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
        Validity
            Not Before: Feb  2 04:00:10 2025 GMT
            Not After : Feb  3 04:00:10 2025 GMT
        Subject: CN=105827c6b34d72587f3f7797e4e2e3bb4e2b6913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7e:0a:73:98:fb:8d:89:3d:6c:56:d5:da:1e:
                    08:bc:6a:e6:71:45:53:a2:0e:8e:34:1f:8a:9a:0c:
                    ed:b7:df:25:0d:d6:48:7c:5e:de:22:0b:71:89:0f:
                    b8:b4:10:db:79:93:de:af:fb:f1:27:8f:ff:ee:d9:
                    fb:f2:92:26:c5:2f:26:40:4d:ce:cf:ee:6c:c4:9d:
                    ad:37:ad:4a:08:18:30:f4:4a:6c:0a:a5:f5:f0:59:
                    b0:a4:ea:01:a0:8f:11:74:16:5f:48:77:62:3e:e8:
                    99:7f:c3:1c:83:e2:a1:53:5a:ab:86:26:4e:37:b6:
                    53:71:6b:6b:72:f6:59:78:ee:dd:a8:9b:59:ea:ff:
                    3d:95:96:e7:7b:9d:12:33:8c:e4:ac:c7:79:89:52:
                    94:4b:d1:e0:98:a1:fc:bc:7e:a7:dc:69:a7:4c:9c:
                    04:f3:65:4e:a8:e0:83:f5:b0:9c:00:de:61:a8:82:
                    0c:71:dd:f6:12:bc:bc:f4:d0:fd:37:d2:29:f1:91:
                    8e:4d:1a:93:82:9a:dd:75:2e:22:29:a6:1f:9d:aa:
                    4d:77:70:63:12:3c:cd:9a:9a:e5:69:a6:47:eb:7b:
                    36:93:45:41:c5:67:d3:99:65:be:47:e3:cf:f6:f6:
                    33:72:3e:5a:50:5c:6a:48:96:0d:15:ae:37:5a:33:
                    cc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:58:27:C6:B3:4D:72:58:7F:3F:77:97:E4:E2:E3:BB:4E:2B:69:13
            X509v3 Authority Key Identifier:
                keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:91:b5:7a:88:08:59:b4:40:9d:65:3e:d6:46:d3:41:11:
         6b:77:fa:23:2a:c4:79:f5:05:47:3a:c1:29:91:52:d9:dc:09:
         3d:68:86:41:d6:47:58:ff:a0:80:e2:12:c5:3a:47:bb:e5:b3:
         fa:bf:ce:18:16:7a:2d:15:64:d2:95:ea:33:2d:87:ce:b8:f2:
         a3:75:71:8c:55:e1:d5:eb:5e:0c:bb:9e:4f:f5:61:40:12:ec:
         6a:db:49:9a:c4:0c:c1:60:9c:a5:49:fb:c2:d0:e1:12:cf:39:
         18:4d:b8:58:9f:d5:bf:6d:d4:3f:bc:50:08:26:98:c2:dc:93:
         f1:66:6f:b0:88:75:85:2d:90:e0:02:84:e7:e1:a9:cc:b2:23:
         d5:6b:f1:09:8e:36:50:94:30:3c:44:89:ba:0a:34:1b:34:51:
         f9:d3:fc:56:a2:1e:e5:cc:80:ec:f9:11:9f:21:c4:90:fa:bb:
         80:f9:4b:6d:04:b0:2b:63:1a:39:ce:3d:70:a8:97:e0:99:4a:
         4c:86:78:12:6b:53:59:17:3b:29:13:a2:f9:fb:34:1e:af:9b:
         b2:df:77:24:55:d1:a6:86:d5:cf:90:ec:ee:d2:3e:65:e2:d7:
         3f:f0:bb:4f:1f:0c:41:74:94:99:ea:3e:19:22:47:91:d8:63:
         41:9e:8e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:07 2025 by rpki-client