Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
File:                     ouOnZzp5md1JaggNu6-hB3rZgPs.mft (raw, json)
Hash identifier:          QFTsiqhFBBkH3SYiE2tXzGzos6mJ4C7l8EWhXv1h1KM=
Subject key identifier:   64:75:AB:1C:9E:FA:D0:66:D0:22:E8:E9:3A:D8:29:87:79:E8:60:4C
Authority key identifier: A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB
Certificate issuer:       /CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
Certificate serial:       019511A2FB1347A30A15F05352104923A0CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
Manifest number:          0760
Signing time:             Mon 17 Feb 2025 02:00:48 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:48 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:48 +0000
Files and hashes:         1: ouOnZzp5md1JaggNu6-hB3rZgPs.crl (hash: J7qgevJfqmiMVg+5BAXcD4JQRKol1kXhHA5zT4fSqJ4=)
                          2: yh39pVm08WyKzque3ySW6KQ3mm4.roa (hash: aDD+CJaY1WYlwKiV6sPZZhcyKFKZy1s5Oj5KyeAwphE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:fb:13:47:a3:0a:15:f0:53:52:10:49:23:a0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e3a7673a7999dd496a080dbbafa1077ad980fb
        Validity
            Not Before: Feb 17 02:00:48 2025 GMT
            Not After : Feb 18 02:00:48 2025 GMT
        Subject: CN=6475ab1c9efad066d022e8e93ad8298779e8604c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:de:40:fc:b1:b8:dc:d6:31:85:25:0d:1f:7e:
                    12:7a:26:db:2b:08:9e:35:95:cb:08:53:5c:77:34:
                    68:0d:2c:fd:67:35:75:a3:2d:42:13:17:ee:14:91:
                    37:19:4a:dd:2e:c2:f7:84:1c:24:13:18:d7:ae:d0:
                    4e:ab:6e:05:7b:5d:0f:55:87:81:52:cd:f6:61:e5:
                    16:a0:c8:2d:2f:6f:9c:33:81:e0:c8:58:86:1c:5a:
                    b8:2f:ed:fe:43:ae:75:4b:5b:f7:95:18:e2:fb:c4:
                    5a:43:b8:13:8a:e4:44:e7:02:11:26:f3:b5:8e:40:
                    f5:36:0a:a5:63:47:57:05:97:c3:93:6b:20:3b:dd:
                    b9:0f:11:5b:aa:f3:0b:17:6c:b7:0e:bc:7c:18:43:
                    1b:ff:c9:80:cc:86:47:33:74:00:e5:60:7d:1c:d4:
                    1d:3b:78:15:6c:c9:e4:15:d5:1b:d2:04:b9:11:54:
                    26:18:aa:ee:52:d9:ce:0d:46:ce:8f:41:a8:a3:71:
                    5a:60:19:59:01:99:fb:8c:58:2c:af:76:a8:60:42:
                    ee:8f:80:15:6a:b1:77:a6:55:b6:c1:e5:69:19:ff:
                    4d:6f:98:06:7b:1c:dc:ff:cf:ee:4a:0d:0a:13:b9:
                    99:15:39:d1:cd:f0:54:eb:a6:4d:f8:47:a0:61:03:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:75:AB:1C:9E:FA:D0:66:D0:22:E8:E9:3A:D8:29:87:79:E8:60:4C
            X509v3 Authority Key Identifier:
                keyid:A2:E3:A7:67:3A:79:99:DD:49:6A:08:0D:BB:AF:A1:07:7A:D9:80:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouOnZzp5md1JaggNu6-hB3rZgPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/cee6d0-2a5a-47a5-9a6a-853d2f183eb8/1/ouOnZzp5md1JaggNu6-hB3rZgPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:5d:20:eb:71:94:da:fd:d7:8a:7f:a0:49:69:f9:52:ab:
         fa:22:03:e4:d6:7b:62:a6:ec:e4:b9:23:9d:80:3d:65:3a:fd:
         ce:07:fe:60:b5:c6:fc:03:30:44:65:df:cf:93:85:ab:c5:6b:
         1e:42:cb:de:e4:e0:a2:e4:78:63:74:14:9c:08:70:a0:dd:ef:
         91:cf:b8:f3:92:0d:0f:8d:56:c5:7f:80:24:3d:cf:0c:46:d4:
         c1:a3:26:8e:73:d1:3a:c1:9d:bd:fe:28:a6:d4:0c:a9:63:af:
         62:59:0c:d9:a9:00:9b:7f:57:55:b7:3d:71:00:c5:94:99:2d:
         c9:ac:8c:8e:45:61:d4:8b:8f:68:62:b7:4d:8f:9b:a7:a6:0e:
         c1:04:a4:72:a1:72:da:5b:bf:c6:bd:b2:89:b5:c2:be:37:ea:
         56:7e:f8:9f:db:16:ad:0d:5c:44:80:1d:43:8a:55:b1:a9:4b:
         c7:47:58:30:ad:26:21:63:76:aa:8f:ac:96:72:c3:fd:01:d3:
         ad:0b:79:28:5d:bc:78:25:7a:03:1c:b7:03:6c:29:10:21:51:
         b3:37:fa:6f:6b:f1:77:9f:a7:2a:25:20:91:7a:52:a1:94:3d:
         7b:05:72:18:30:a8:d6:2e:8f:78:19:4f:5d:bc:48:d9:54:f0:
         db:77:45:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:09 2025 by rpki-client