Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          a4C5GyWy+bsYerPPD0hXy+NH6o+YG8ieN1olrmOhBi0=
Subject key identifier:   4E:DA:CF:E6:8C:DB:3D:E3:91:BA:F5:5F:52:CE:47:B0:71:09:FA:DE
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       01951134EE58331003752E22C4719F0559CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          013E
Signing time:             Mon 17 Feb 2025 00:00:36 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:36 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:36 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: gs1Ah6smVrhF9NISJ3C7BPfnJGzZ9IUkbPd1g6yPEm8=)
                          2: XlhaEzLsA7jWqPOILfz8Yhd9kdk.roa (hash: fE0R2m8vpEkHRD5syUluKcIvECTiC6hfTnpdsOL+n0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:ee:58:33:10:03:75:2e:22:c4:71:9f:05:59:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Feb 17 00:00:36 2025 GMT
            Not After : Feb 18 00:00:36 2025 GMT
        Subject: CN=4edacfe68cdb3de391baf55f52ce47b07109fade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:d9:f6:54:e4:f0:49:7b:5f:68:cc:31:25:
                    72:41:bc:6e:a7:3f:99:f8:30:c9:f2:8d:06:02:f5:
                    43:a7:85:01:18:80:2c:56:9c:fa:99:5f:57:a8:10:
                    13:d4:43:78:4a:e1:e9:4b:42:72:0f:ea:7c:14:bb:
                    24:f5:ae:43:48:d1:be:7a:48:77:bf:86:75:e7:2c:
                    f6:71:f7:ad:1c:9d:36:46:41:17:9a:60:61:6a:00:
                    e6:c8:65:e2:4b:a9:54:8d:27:b4:07:72:cb:d9:dd:
                    eb:d6:25:9c:da:22:01:26:22:38:d2:65:db:4c:86:
                    df:ef:c4:f8:d6:3a:61:d8:16:20:c4:b0:c3:9c:63:
                    bb:c6:07:77:1a:26:95:4d:a8:2a:89:14:b3:e0:f8:
                    c0:1d:3c:5e:e6:6a:a3:a1:7a:3b:9a:ea:2e:6c:29:
                    51:86:0b:2d:4e:46:7b:0c:b5:c3:d0:35:3f:e4:f5:
                    d8:e5:32:e5:1c:5e:87:4e:eb:62:83:7c:45:91:87:
                    52:46:ab:44:c1:ff:82:2e:74:f8:16:02:46:9d:65:
                    9e:e9:b2:9e:24:7e:25:aa:87:87:59:b6:9a:91:87:
                    7b:72:49:52:64:ca:8c:a5:c0:88:0c:c5:09:10:74:
                    57:14:b9:d0:32:b7:f1:b1:46:21:2d:6a:55:8f:7d:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DA:CF:E6:8C:DB:3D:E3:91:BA:F5:5F:52:CE:47:B0:71:09:FA:DE
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:58:c0:df:9c:99:66:88:20:cb:39:ce:e5:a4:09:0f:43:cb:
         b9:85:ad:cf:9a:84:b2:e7:f5:e5:08:e6:7e:7d:e0:97:f0:f4:
         fc:d9:a0:d9:fc:c3:6d:e4:18:ce:18:79:8c:a1:3d:58:4a:11:
         d6:30:c2:95:26:13:f8:89:ba:c5:63:36:c8:10:22:2b:5f:fb:
         76:d8:07:62:3a:cf:60:02:8b:4a:7e:e4:ed:ee:85:8a:5a:c5:
         0d:19:53:e8:fa:be:d4:07:2e:16:8d:11:fb:53:77:72:70:4e:
         e6:66:2a:06:1e:11:40:94:e4:20:00:85:63:3c:82:ad:79:a3:
         c4:91:28:21:45:16:73:2d:9f:5b:8c:b7:00:3b:ff:79:9c:1c:
         8f:9c:03:7a:c9:0d:2d:5c:91:22:07:0f:05:ff:78:e1:2d:a2:
         2b:6b:fc:6b:16:38:63:82:9c:a8:3a:63:81:73:2f:d6:47:aa:
         57:96:ae:74:8d:45:79:52:d5:62:90:51:33:49:35:00:58:21:
         1a:fa:66:7b:56:a5:2e:ac:cc:79:3c:fc:09:3f:2e:20:a3:4d:
         67:cf:5a:9b:b2:6e:15:92:8d:40:2e:a4:e8:3d:53:f5:34:ca:
         17:b2:a6:7f:a2:b2:1e:4b:d1:2f:8c:9c:78:16:23:60:82:5e:
         bc:e7:63:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:47 2025 by rpki-client