Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File:                     Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier:          lTwPr1nk8pE7/tVujufL9Jo4bTE5B3crCXAzv37QEmk=
Subject key identifier:   BD:AD:EA:A9:60:89:6C:AB:38:E2:AA:82:EF:47:C5:03:73:69:12:C8
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer:       /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial:       019510C73B935E44240B36FB5F6B2E744E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number:          05E7
Signing time:             Sun 16 Feb 2025 22:00:47 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:47 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:47 +0000
Files and hashes:         1: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: hNUr5Y5Ih6BKITtK2ML/Ipxv4DdTvRYIQQayt0lDp1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:3b:93:5e:44:24:0b:36:fb:5f:6b:2e:74:4e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
        Validity
            Not Before: Feb 16 22:00:47 2025 GMT
            Not After : Feb 17 22:00:47 2025 GMT
        Subject: CN=bdadeaa960896cab38e2aa82ef47c503736912c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:26:cc:8f:11:61:ee:68:54:f5:eb:0a:e4:
                    1a:c0:0b:35:ae:1e:8d:ea:04:30:a5:be:9e:df:f5:
                    e7:2f:92:31:3c:b2:ca:77:27:63:da:dc:fb:dd:77:
                    74:c3:a0:63:2c:e4:67:9e:c7:c8:45:a7:18:82:65:
                    be:1c:c1:4a:3a:b0:07:d8:a2:70:98:b4:7c:38:d8:
                    12:60:74:89:fb:b7:02:85:44:a1:ea:1b:2f:0f:0e:
                    1d:fe:0d:ef:f5:87:8f:85:4a:e2:5a:fc:7c:6e:fa:
                    85:43:6a:37:e8:9d:06:55:b2:5f:0c:38:57:df:b5:
                    65:db:d2:b5:0d:83:bf:57:77:8e:79:b6:05:3d:42:
                    b8:04:51:f6:95:3a:1b:81:96:3e:df:be:eb:4c:5f:
                    c3:d5:63:0a:ba:1f:79:63:e1:5d:2f:d2:ba:ae:c1:
                    83:ef:3f:48:d1:0e:4c:a1:af:b1:7f:88:19:44:34:
                    d8:c6:ff:95:2c:b5:b7:ca:f1:90:f4:72:f6:a9:1b:
                    86:e6:a3:c1:4e:e4:d4:85:f1:78:ae:90:57:51:dd:
                    30:80:5d:ce:0a:5f:8d:34:89:4e:5f:a4:3a:21:39:
                    fa:dc:67:41:0e:13:09:59:74:c6:f9:03:9e:75:21:
                    18:4a:fb:63:3e:9e:a3:94:7c:3c:4c:f5:fc:4b:42:
                    46:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AD:EA:A9:60:89:6C:AB:38:E2:AA:82:EF:47:C5:03:73:69:12:C8
            X509v3 Authority Key Identifier:
                keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:80:a6:15:70:e1:d5:9f:d4:f9:d6:d0:6b:29:10:14:ec:0d:
         a1:39:0e:af:04:88:9f:07:af:ad:ea:aa:8b:88:9f:c8:2c:c8:
         17:79:9e:84:de:18:d6:9e:e9:60:69:31:7e:00:e1:e2:05:9a:
         1d:a5:70:42:51:70:e4:52:d8:89:c4:de:ce:7b:c0:05:f8:d0:
         2b:3e:5f:1d:5c:3c:60:8b:be:79:cf:e6:70:a3:82:ac:b4:0b:
         4d:05:5a:64:49:28:4d:a5:f4:11:f8:af:e9:18:b8:57:42:5e:
         a9:0d:5f:78:79:86:71:f4:ac:42:36:84:48:f8:bd:e8:04:17:
         af:68:c8:8b:7b:73:24:3d:a3:83:82:7d:ce:ac:e9:47:b0:2b:
         08:d9:84:05:af:ca:5e:0f:66:08:94:1f:25:b4:54:62:0f:11:
         91:4a:c5:00:45:ab:3f:c8:f3:fa:67:6a:3d:ec:67:66:31:79:
         56:02:7e:8a:bd:be:0c:e9:2e:15:59:9e:bc:5a:1a:ce:5e:00:
         02:b6:91:f5:51:7b:3c:39:9b:b7:62:57:1a:08:6f:c3:65:dc:
         5f:f2:99:a1:26:57:c0:4a:61:d5:ae:0e:bd:09:e1:14:1e:51:
         12:1d:04:14:a5:c2:26:46:21:67:96:c9:3a:54:10:2f:4c:7e:
         99:bb:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:18 2025 by rpki-client