Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
File:                     J7ITMhmYnmoy1xFY0IUqUW62958.mft (raw, json)
Hash identifier:          DTXr8OAd0j3qKesOuEmcg4TAAIBls60wGUfSXNM+974=
Subject key identifier:   6F:F4:1C:BB:7F:9F:A3:DD:48:FE:58:5E:55:EA:24:30:0E:17:0A:4F
Authority key identifier: 27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F
Certificate issuer:       /CN=27b2133219989e6a32d71158d0852a516eb6f79f
Certificate serial:       0194C350B5B76A6890EADA01D5A51D46FFC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
Manifest number:          10B3
Signing time:             Sat 01 Feb 2025 21:00:34 +0000
Manifest this update:     Sat 01 Feb 2025 21:00:34 +0000
Manifest next update:     Sun 02 Feb 2025 21:00:34 +0000
Files and hashes:         1: 9yA1BkRviJoFuz4ovXK7z_9dmsQ.roa (hash: TmOG+5LxnyALDVOkw9CXFcKpknkNr7jhmiggKOWlYA0=)
                          2: J7ITMhmYnmoy1xFY0IUqUW62958.crl (hash: qwAPJAuHrNFeHQanC193yR6AjYbUEo1VJRkWIMOWJmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:50:b5:b7:6a:68:90:ea:da:01:d5:a5:1d:46:ff:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b2133219989e6a32d71158d0852a516eb6f79f
        Validity
            Not Before: Feb  1 21:00:34 2025 GMT
            Not After : Feb  2 21:00:34 2025 GMT
        Subject: CN=6ff41cbb7f9fa3dd48fe585e55ea24300e170a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:fe:af:25:6c:2e:c6:89:e7:37:e7:3d:aa:
                    e0:d0:da:1d:46:2a:7e:c7:ed:81:4c:fe:bc:a6:ea:
                    0f:c3:2a:39:99:00:7e:68:1c:62:94:ec:fa:21:6f:
                    f4:ae:48:47:2d:d5:25:68:24:5f:48:4b:cb:0d:9b:
                    07:8f:e1:0f:6a:69:af:0f:ee:20:0a:36:03:3a:ab:
                    cd:42:76:d1:ff:37:9b:3a:fa:f5:8c:48:2b:94:56:
                    e9:ad:3a:24:67:ca:c2:2c:e8:5b:07:b9:39:04:e7:
                    d5:ac:9d:0e:3f:d5:37:28:43:12:a6:43:0c:5c:cf:
                    c1:06:24:0b:8b:08:73:24:3c:56:87:55:17:69:83:
                    45:20:95:09:67:d9:e0:06:15:0d:5a:ee:5f:d5:44:
                    b8:87:0f:55:f7:9f:d9:4e:c2:6f:43:13:aa:42:3a:
                    29:d0:bf:96:d0:7c:65:30:14:25:d0:63:f4:f9:5e:
                    ce:98:44:f1:d2:ad:70:64:c5:d7:d1:7a:aa:9a:88:
                    c9:5c:00:66:92:7f:fd:2f:d7:7e:ad:c2:d3:06:ba:
                    66:b9:ed:9a:41:dc:f6:b9:c3:7c:f9:ef:de:ac:70:
                    a7:b0:2a:0c:68:10:34:09:b0:b5:76:2d:49:82:7b:
                    a6:fc:97:c1:e6:21:ec:6d:3c:58:52:3c:21:b4:a1:
                    49:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F4:1C:BB:7F:9F:A3:DD:48:FE:58:5E:55:EA:24:30:0E:17:0A:4F
            X509v3 Authority Key Identifier:
                keyid:27:B2:13:32:19:98:9E:6A:32:D7:11:58:D0:85:2A:51:6E:B6:F7:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7ITMhmYnmoy1xFY0IUqUW62958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c66606-2ae8-4ada-b35b-c2e8a0303fc3/1/J7ITMhmYnmoy1xFY0IUqUW62958.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:14:3b:5b:e6:fb:d3:45:37:43:d1:f0:58:92:f1:d5:e3:0e:
         58:60:88:e3:af:b6:a7:90:3b:6a:57:c5:b9:76:9b:d7:fd:76:
         dc:2b:b7:e5:ae:b4:37:9e:52:95:1f:17:ee:13:f5:7f:d2:cf:
         77:40:d9:fb:7e:b4:5f:17:3a:1d:0e:6b:78:79:99:51:b5:23:
         ec:ed:41:ca:03:94:f4:83:e9:c6:9a:5a:96:96:f1:5d:6d:70:
         f3:f8:28:6b:3d:96:2a:4e:e6:2a:63:89:73:1e:65:a9:f4:d3:
         84:92:4e:8e:31:26:10:98:58:34:fd:3b:85:59:bd:80:03:37:
         4b:f2:9f:69:36:f2:a4:60:21:0a:0e:f1:09:7f:44:dc:b9:86:
         a3:5b:02:bf:11:b3:f9:c5:1e:eb:d2:e0:5a:df:32:84:20:a0:
         d0:41:33:3f:64:f5:56:45:1d:2b:65:8e:04:8b:18:e5:95:d3:
         ba:4e:95:df:18:5b:cc:80:93:9f:1d:6f:93:fe:f1:a2:0c:f9:
         5c:9b:23:12:64:c3:f0:d5:79:f1:af:23:ed:c8:8f:d9:66:5d:
         bd:6c:31:15:8f:9b:60:dc:ec:de:cf:9a:01:71:60:de:47:d3:
         ef:2a:df:80:ad:d4:0d:46:68:06:95:c4:64:13:46:b3:fc:32:
         9d:4b:36:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:04:43 2025 by rpki-client