Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
File:                     YpnP38Adrmf6buMXlIB3DEUrrCI.mft (raw, json)
Hash identifier:          UawKxH7Phc96YnujSL1XtjqoRfK1jOdxrjKB5MCqigk=
Subject key identifier:   D5:52:EA:6A:15:A4:8F:1E:9B:AD:E1:19:CC:C3:6E:AC:B8:8F:87:11
Authority key identifier: 62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22
Certificate issuer:       /CN=6299cfdfc01dae67fa6ee3179480770c452bac22
Certificate serial:       019511D97B5B543F57891C5155E2791CD342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
Manifest number:          1458
Signing time:             Mon 17 Feb 2025 03:00:20 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:20 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:20 +0000
Files and hashes:         1: Mkph3bTd1xJZVg1WlaswgHrEuSg.roa (hash: l36JgOHpzZ+Jn9f8sIbdhy0YGZNW92MlOpmEM1lS6Ko=)
                          2: YpnP38Adrmf6buMXlIB3DEUrrCI.crl (hash: 53zwlQEVPGetTnUqmlerRm0bIfd8uLDoD90iewuNsbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:7b:5b:54:3f:57:89:1c:51:55:e2:79:1c:d3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6299cfdfc01dae67fa6ee3179480770c452bac22
        Validity
            Not Before: Feb 17 03:00:20 2025 GMT
            Not After : Feb 18 03:00:20 2025 GMT
        Subject: CN=d552ea6a15a48f1e9bade119ccc36eacb88f8711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:98:13:0e:2a:de:4f:d0:16:6d:07:4b:7e:94:
                    05:b4:f2:e3:9c:a5:9d:ad:6e:1b:77:ae:e2:39:f9:
                    9f:f9:e1:66:69:29:08:11:d8:71:fb:ef:2a:a6:a9:
                    5f:ad:6f:5d:dc:c9:2f:16:ce:e6:f7:9c:b9:99:42:
                    f5:ba:b9:0e:3d:fb:64:1f:05:bf:d5:0b:cb:f1:2d:
                    a6:4f:88:c5:20:e0:4f:34:16:13:84:48:45:14:f5:
                    f6:88:ae:eb:fb:2b:ac:52:4b:da:4f:8a:6f:e7:21:
                    50:cc:45:3f:a2:ae:cb:66:e9:5d:25:bb:62:17:93:
                    e8:ad:2d:a4:3b:d5:93:60:ae:2a:7f:d2:9f:aa:cf:
                    71:18:68:af:0c:49:a7:88:2f:0f:82:8d:bd:1f:cf:
                    d1:51:56:69:b9:8e:c8:06:fb:77:99:73:8d:bc:7e:
                    7c:c3:df:41:3f:81:47:6a:0e:d2:76:56:5a:e1:f6:
                    b2:6f:c7:ca:27:e7:cd:41:99:17:2f:90:73:9c:a3:
                    56:a3:87:ae:9b:32:23:95:db:46:fd:0a:11:fa:e6:
                    2e:e7:23:89:cb:93:9e:72:a2:00:46:ea:12:80:b5:
                    c2:34:1b:c2:c9:6c:2c:32:e0:d6:65:f4:c3:50:de:
                    c0:7a:69:48:18:58:b0:72:13:4d:61:23:6d:58:71:
                    39:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:52:EA:6A:15:A4:8F:1E:9B:AD:E1:19:CC:C3:6E:AC:B8:8F:87:11
            X509v3 Authority Key Identifier:
                keyid:62:99:CF:DF:C0:1D:AE:67:FA:6E:E3:17:94:80:77:0C:45:2B:AC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpnP38Adrmf6buMXlIB3DEUrrCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c8bfb8-f47e-430e-ae3e-68a14ce42fa6/1/YpnP38Adrmf6buMXlIB3DEUrrCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:3d:49:b6:74:95:2f:1f:d4:10:72:d0:e4:31:24:6c:58:ae:
         6d:3e:7e:99:dd:1f:5d:56:f1:ab:39:46:ae:3a:ed:05:42:2c:
         c7:c8:4a:fe:f1:30:e6:be:4e:76:a0:e6:3b:e0:1f:7a:50:11:
         51:00:d0:80:c5:24:9d:09:d5:ac:6b:ee:b9:8a:aa:55:ae:9b:
         cb:23:28:4b:be:f0:3f:b0:ff:66:8e:6d:d4:3c:9d:3d:6b:6d:
         58:b3:2d:c7:96:c7:17:9b:1e:cf:c6:85:a0:6e:76:3c:d7:03:
         c3:65:73:02:33:39:7c:72:31:32:80:30:d7:ac:e2:d3:b5:30:
         72:bd:5d:4c:a3:41:5c:d4:11:0b:62:68:96:cb:6f:d8:d3:1e:
         63:ba:6d:8b:0a:f9:26:e6:02:88:f3:44:cf:ac:6f:45:53:f7:
         c7:3d:a3:1f:d8:15:61:49:db:27:b2:a1:50:91:2d:75:b4:78:
         a2:48:42:7e:82:57:51:d8:64:51:47:a0:06:eb:e8:c8:49:70:
         ca:7a:a4:b2:22:0a:81:08:92:96:7d:29:c7:5e:62:3d:4a:12:
         71:a9:22:3d:ed:ce:d6:a9:c1:a1:55:1b:81:53:21:b4:ba:f9:
         c4:85:7a:60:b4:99:e4:aa:8a:fc:c9:03:5d:fb:4e:8f:43:d9:
         0a:60:66:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:13 2025 by rpki-client