Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File:                     g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier:          d4DgxQKuv5nuMzwvY3oHj/07pkgoUHbddxuXY/uaLdg=
Subject key identifier:   80:5F:61:CD:64:BD:9E:66:49:42:2C:86:03:2D:F8:51:31:70:7D:03
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer:       /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial:       019510C75890D0AC87ED57E0EF959FA3DF21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number:          035A
Signing time:             Sun 16 Feb 2025 22:00:54 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:54 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:54 +0000
Files and hashes:         1: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: siUBbmkP/z1IfWzU3ZcdE40zoIiGEOB90L5wdNUDM1U=)
                          2: hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa (hash: 5eRa0XK3oy+0XVVEDTa2qZR1cDbvimVVidnig16u0uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:58:90:d0:ac:87:ed:57:e0:ef:95:9f:a3:df:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
        Validity
            Not Before: Feb 16 22:00:54 2025 GMT
            Not After : Feb 17 22:00:54 2025 GMT
        Subject: CN=805f61cd64bd9e6649422c86032df85131707d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:51:f2:ae:73:2c:a3:ac:e8:2e:f9:c1:35:
                    0b:b3:25:4e:91:1c:0f:fb:88:b5:01:ba:e5:96:13:
                    fe:38:20:5e:11:30:00:76:6b:a4:9d:d3:0a:d4:53:
                    22:99:f3:86:bb:b4:68:d4:1d:8c:78:cd:7c:25:e4:
                    36:66:54:a5:04:0c:08:a7:ca:7f:0c:e9:25:78:95:
                    02:50:c0:07:ec:50:fe:f3:c7:f8:56:cc:b1:4e:7b:
                    7a:dd:1b:17:ae:ed:af:70:74:48:a6:e8:19:d8:08:
                    71:df:8d:fc:b1:aa:05:b8:97:01:8a:07:b0:d0:0c:
                    37:59:0f:86:88:19:b0:6a:68:be:a2:6e:0b:66:3a:
                    e9:16:1b:a1:6f:dc:0b:b1:98:10:fe:a7:18:f4:7a:
                    f4:2b:0e:2f:14:50:63:a8:8e:17:03:1c:f6:f5:29:
                    91:2d:57:ec:87:47:5f:06:c0:0d:66:5a:67:17:bb:
                    6e:ab:dc:44:67:0c:0f:ae:9b:26:17:df:26:e6:16:
                    c2:16:a6:30:c6:b9:46:df:09:38:44:e0:e4:e4:82:
                    78:ac:e7:d9:9f:60:4b:48:91:6b:13:52:1f:fa:3b:
                    ff:b4:f1:5d:d8:a4:c4:18:f6:66:bd:19:6f:7c:51:
                    fe:9e:1f:b7:d3:2b:32:fd:3b:e7:ea:ee:73:c0:59:
                    a7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5F:61:CD:64:BD:9E:66:49:42:2C:86:03:2D:F8:51:31:70:7D:03
            X509v3 Authority Key Identifier:
                keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:19:2a:fe:34:de:e6:7b:40:0f:c1:5c:b3:b4:f0:7b:23:90:
         fc:f5:b6:61:27:a5:41:68:61:83:05:d0:95:68:0b:c9:f5:3a:
         0b:a3:ac:cd:0f:18:7f:54:e3:7a:b1:0b:3b:fc:be:96:4b:24:
         20:e0:f3:db:e8:9a:63:c4:83:df:69:39:45:44:f2:bb:44:0f:
         ae:67:d6:9e:7f:4a:7d:6b:4e:cf:b6:ca:46:04:15:19:82:a9:
         26:1e:10:f8:06:ee:e7:31:51:02:1b:41:89:6a:06:99:e2:78:
         53:b6:7c:2b:15:1e:e8:3e:91:42:8e:b1:3a:36:9f:62:11:47:
         a9:18:5f:a2:f9:65:30:17:18:ea:38:cf:e2:94:94:83:53:f6:
         1e:55:94:1e:f5:c2:4e:cf:4c:b4:da:2f:a3:69:59:2b:d8:7d:
         5b:e2:62:dd:e3:c2:fa:fe:69:13:2a:fc:31:e0:35:c2:b3:87:
         b0:2b:dc:a5:ef:f9:6b:fe:f6:63:1d:30:73:9c:d2:3e:b4:85:
         40:3d:6a:c4:68:6a:09:a1:8e:fc:d3:08:30:60:f2:bb:d4:43:
         9e:89:33:e6:69:ac:4f:06:a2:78:88:69:f8:30:08:e7:60:29:
         68:03:aa:3d:fc:8f:de:26:7b:49:39:aa:48:18:bc:84:18:91:
         ac:3d:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:49 2025 by rpki-client