Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          SomIqth6YyWTsGSWWcey1wlVYYXwxydgEMCWH2r9rNU=
Subject key identifier:   5D:02:2A:ED:B6:6A:84:4C:2B:AA:21:2B:5E:F9:71:F5:C7:99:2E:52
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       01946E8F63348D66163A2BDD3D601E4A71A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          0C11
Signing time:             Thu 16 Jan 2025 10:01:18 +0000
Manifest this update:     Thu 16 Jan 2025 10:01:18 +0000
Manifest next update:     Fri 17 Jan 2025 10:01:18 +0000
Files and hashes:         1: 03o7NXcv7U3uhmW3vl8ktxXIEVI.roa (hash: uqR7OCO4P5GAQJzWKXoDWdhHBwfEakY01mZT4sBENQc=)
                          2: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
                          3: 7sjN2_HImQcJ9USVUGWMp0CNmPA.roa (hash: CA5FQ+7/XO2sFqAdifwglNJ59I+wJgTcZkMw34QXhR8=)
                          4: N8k2TrCtZegKjjZ-WWd6AMPX5RU.roa (hash: n0kryDikypIQ15lrOig2ttq2l+vMduOB1IWfGgwZy08=)
                          5: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: kA9hrcCxHK4Q8o9ip2Xqg2CarxUPaLpd/ZtLcm4d2go=)
                          6: vlM_ktUPh9YMyXGP5lWXtK5QYKI.roa (hash: U8y+ivAuQQt5uGM6IT2qpM5NAadxtpu1MJgeCGfGzvc=)
                          7: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Jan 2025 09:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:6e:8f:63:34:8d:66:16:3a:2b:dd:3d:60:1e:4a:71:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jan 16 10:01:18 2025 GMT
            Not After : Jan 17 10:01:18 2025 GMT
        Subject: CN=5d022aedb66a844c2baa212b5ef971f5c7992e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b2:fb:1f:bd:23:45:a0:2b:ea:5e:a4:e5:af:
                    21:78:4f:85:07:3b:87:3c:a5:e0:81:50:e8:12:5a:
                    6a:ce:a1:4d:8c:af:44:97:d6:df:52:a1:f0:d1:e8:
                    ce:7c:2e:55:64:39:bf:77:b9:1f:fd:41:3e:e6:d5:
                    de:a1:5c:4a:31:94:a7:b8:ea:8f:d8:73:b0:2c:ec:
                    b4:2f:88:74:27:fc:fc:b9:94:69:a9:1e:50:fd:c6:
                    e3:8f:40:aa:59:af:85:63:0e:c9:63:d1:e8:45:3f:
                    f7:5f:b5:4b:53:6f:ad:07:b6:29:82:e6:51:6c:aa:
                    96:6e:98:fc:be:0b:6a:0e:7b:53:be:0b:a5:43:4e:
                    dc:03:e7:18:37:21:cb:3a:66:2f:bc:dc:2f:c6:fa:
                    f9:3e:af:dd:c9:06:d6:c7:a1:fa:6d:be:60:8a:4e:
                    c3:c1:6f:27:82:24:45:a6:50:e0:d5:8d:f2:ec:6c:
                    e6:ed:90:61:7e:06:3a:ff:52:26:39:ab:68:fb:45:
                    e4:5c:0f:99:35:25:27:2a:76:b9:89:39:18:d8:5d:
                    3e:67:33:4f:d1:69:80:d9:05:7a:47:3c:6b:bf:0b:
                    16:bd:0b:6c:2a:31:0d:27:7e:80:5a:f5:d7:97:4b:
                    9d:e2:51:9b:6c:6a:42:a9:bb:24:f6:19:28:db:0e:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:02:2A:ED:B6:6A:84:4C:2B:AA:21:2B:5E:F9:71:F5:C7:99:2E:52
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:62:df:f8:89:d1:65:dc:82:0e:11:a2:a4:59:a2:16:8e:0b:
         ba:8f:38:76:9f:ce:da:59:8f:b5:69:a4:06:55:92:11:8f:2a:
         41:a7:e7:ed:81:84:69:e8:22:d4:67:8a:2e:6a:f4:6e:fe:d6:
         e1:2d:f4:99:7f:d9:8a:3e:2d:0b:b4:1f:f1:7a:a4:db:01:95:
         ab:ec:08:6c:b5:cf:b8:b4:2b:dd:51:43:96:b4:d2:1d:41:b7:
         32:d2:7a:ed:27:36:1f:10:c6:2d:9e:03:a6:0b:e4:ef:1c:0e:
         ab:65:0d:42:6a:c5:58:11:d4:70:b9:f2:ea:fa:c6:f2:fc:fd:
         b5:38:c4:29:e7:4b:83:49:fc:ab:08:28:10:30:8f:df:e8:ba:
         a2:0c:5a:aa:c1:db:4c:00:f4:ca:fd:34:e8:77:8a:26:01:0b:
         2e:5a:b0:d7:be:c4:60:01:f4:88:06:d0:85:22:ab:04:e5:57:
         8b:f2:84:5f:c1:c5:ba:17:94:38:28:56:64:b9:19:11:e1:24:
         8b:6b:d6:53:39:cd:19:b4:08:0e:e6:2c:c1:da:43:e1:3e:34:
         5f:aa:1c:03:98:a9:d8:d5:4f:d5:1d:a6:27:2b:45:50:db:24:
         2d:5f:53:5a:86:8d:66:b9:cc:c1:48:3d:24:d3:dd:1d:88:87:
         bf:d0:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 16 15:21:41 2025 by rpki-client on console-ams.rpki-client.org