Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
File:                     6_uNO-4VJTdjsHaqMuLium-eBcM.mft (raw, json)
Hash identifier:          xSDQn46Rb3hPBEoKWEcHDstb1E0SWIeohVXwjQqVqdk=
Subject key identifier:   F0:2B:73:2B:5B:77:01:B7:9D:BC:3F:98:B8:86:00:76:2A:6C:09:D0
Authority key identifier: EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3
Certificate issuer:       /CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
Certificate serial:       019511355C475BD3800E4B3E160A2A7A59AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
Manifest number:          0B33
Signing time:             Mon 17 Feb 2025 00:01:04 +0000
Manifest this update:     Mon 17 Feb 2025 00:01:04 +0000
Manifest next update:     Tue 18 Feb 2025 00:01:04 +0000
Files and hashes:         1: 6_uNO-4VJTdjsHaqMuLium-eBcM.crl (hash: dbiOSEupKc95i/lceuFJfXOOWFLZanixm3XcNbc2vDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:35:5c:47:5b:d3:80:0e:4b:3e:16:0a:2a:7a:59:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebfb8d3bee15253763b076aa32e2e2ba6f9e05c3
        Validity
            Not Before: Feb 17 00:01:04 2025 GMT
            Not After : Feb 18 00:01:04 2025 GMT
        Subject: CN=f02b732b5b7701b79dbc3f98b88600762a6c09d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:43:f3:4b:8d:52:30:d7:4b:79:d0:64:53:
                    88:ca:3f:c6:3c:bd:3e:49:44:a0:96:3d:ef:b7:7b:
                    32:32:7f:b5:69:c4:96:b4:da:51:c3:c1:05:ca:f3:
                    c3:32:4e:34:ff:4d:74:39:e3:05:50:30:77:f3:0e:
                    a8:8d:ad:71:cb:e2:88:8e:c1:cf:20:3a:c3:8a:f8:
                    b2:1c:f8:cb:03:23:97:5e:20:d6:cf:33:e9:fb:ba:
                    20:cf:0a:9e:15:e2:79:60:4a:c5:94:46:42:2c:07:
                    05:f1:0e:9f:4f:80:fd:41:1e:2f:c5:90:31:fd:b9:
                    10:58:3d:cb:a9:bd:42:66:77:cc:89:00:70:b7:27:
                    16:20:68:dd:be:01:bd:85:84:fd:c4:6b:77:2c:56:
                    8e:7e:3a:ad:73:ea:33:d9:19:e5:df:28:31:2d:25:
                    35:97:3b:df:2a:b5:6c:50:96:ce:8a:3e:6a:dd:13:
                    74:a2:cb:33:d1:76:a6:67:13:47:8e:c6:4d:b0:71:
                    e1:62:66:ac:95:5b:24:e8:d4:95:9b:6d:c1:64:1a:
                    83:48:4a:b2:e5:91:04:4e:09:ad:7b:df:f2:81:ee:
                    72:61:17:cc:8d:46:0d:f2:b0:36:49:66:c8:77:ea:
                    36:2f:7b:15:7e:7f:d7:49:a5:0a:f5:69:67:0e:c3:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2B:73:2B:5B:77:01:B7:9D:BC:3F:98:B8:86:00:76:2A:6C:09:D0
            X509v3 Authority Key Identifier:
                keyid:EB:FB:8D:3B:EE:15:25:37:63:B0:76:AA:32:E2:E2:BA:6F:9E:05:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_uNO-4VJTdjsHaqMuLium-eBcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/077d05-394e-4f3a-9db1-48bed30291a0/1/6_uNO-4VJTdjsHaqMuLium-eBcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ac:54:52:c0:6b:a9:b0:38:9c:20:d2:f6:d8:2b:ca:46:ac:
         94:69:46:6f:01:8d:9c:f8:9a:4c:ba:6c:97:1f:41:38:56:84:
         af:a8:80:ca:8e:b8:0c:60:53:34:58:e8:d7:e4:cd:97:82:8e:
         c0:01:19:58:cb:01:ad:70:00:6e:52:33:2a:c4:f7:2c:60:fa:
         fd:93:e2:46:f3:f2:1a:55:11:e0:69:98:d9:83:75:e4:84:a1:
         37:08:73:3f:0e:95:fd:5c:78:dc:37:59:90:03:8c:1d:04:35:
         9b:b5:a7:ac:71:85:fb:5a:c1:87:29:d9:a9:49:2e:bc:b9:0c:
         db:80:61:e0:00:cc:28:94:54:81:3b:f3:24:71:f1:c4:1d:b6:
         d4:b1:f0:88:cf:2d:78:a4:f2:81:df:09:7f:1b:cc:e8:26:32:
         ab:2d:c3:f9:92:a2:21:68:73:33:41:eb:d6:52:46:63:06:01:
         67:81:ba:ca:0d:f3:c3:b8:b1:95:22:61:2c:24:4d:72:bc:52:
         21:8f:4f:9f:e7:f7:09:1e:14:ec:15:0a:a2:78:14:a6:83:34:
         77:7b:9b:b1:31:82:8b:5c:27:69:39:b9:27:c5:ed:a3:83:c7:
         cb:25:bc:ee:b1:3c:95:64:45:ca:84:b6:b2:11:82:c0:b7:e3:
         b5:70:52:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:41 2025 by rpki-client