Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
File:                     5O8X9MtP6SrQU-7yXznWOuEgfdM.mft (raw, json)
Hash identifier:          QGy2GfcZY8AeIqBI1ZsaWQgpKs7WZiaHoIFtw1sR/vw=
Subject key identifier:   73:B7:FD:A8:34:A3:78:DB:95:69:97:70:97:2E:41:B1:46:F0:66:F3
Authority key identifier: E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3
Certificate issuer:       /CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3
Certificate serial:       0194C3BE9182FF8FBD168AAE575E25C61554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
Manifest number:          64
Signing time:             Sat 01 Feb 2025 23:00:33 +0000
Manifest this update:     Sat 01 Feb 2025 23:00:33 +0000
Manifest next update:     Sun 02 Feb 2025 23:00:33 +0000
Files and hashes:         1: 5O8X9MtP6SrQU-7yXznWOuEgfdM.crl (hash: 0Ucn6T5Ic46d1m3DkB/bUTt85yqbOHJBo4dVkKvt3zY=)
                          2: hkqw3W9-pdwewEMPwrQBPExOldQ.roa (hash: GNMEaQG7JI+6R+GxCRi11C7wb2KrqYyAM0elThFtbVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 23:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:be:91:82:ff:8f:bd:16:8a:ae:57:5e:25:c6:15:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ef17f4cb4fe92ad053eef25f39d63ae1207dd3
        Validity
            Not Before: Feb  1 23:00:33 2025 GMT
            Not After : Feb  2 23:00:33 2025 GMT
        Subject: CN=73b7fda834a378db95699770972e41b146f066f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:a9:38:48:d8:82:4a:81:94:8c:04:82:46:
                    76:74:c5:49:59:72:ad:20:24:12:db:9f:31:a0:66:
                    a6:f6:fa:7d:23:bf:fd:06:1b:dd:bc:be:d8:ef:77:
                    b6:25:30:d0:88:a2:d9:cb:a3:91:04:48:ec:d6:c9:
                    b9:14:8f:e5:46:67:35:fd:c8:40:6f:0a:13:35:76:
                    79:fb:d2:30:08:32:29:97:32:9b:98:fb:4b:ab:48:
                    44:bf:a9:26:f2:18:8a:fd:4c:5e:f6:32:28:48:9f:
                    16:87:1e:c9:31:b2:d5:67:e2:30:72:ef:ea:8d:44:
                    b1:57:ac:8b:15:3a:13:5a:57:cd:2f:17:fa:cd:20:
                    b2:c0:71:13:b2:45:ee:53:39:a8:eb:58:23:af:d7:
                    e0:4e:16:2e:65:ba:f2:a1:f5:c9:39:57:13:ee:db:
                    91:fd:c1:02:93:94:86:ad:ca:e5:b7:e5:77:44:50:
                    08:b9:a9:cb:c0:4d:35:a3:1f:c7:c9:6e:31:c2:b8:
                    25:ad:8d:c4:0c:7d:10:68:f0:14:9c:e4:4d:ee:d4:
                    23:f1:f2:a4:ea:71:4c:26:81:f3:de:60:20:66:1e:
                    36:6d:79:50:50:41:53:84:9b:57:99:6e:96:76:8c:
                    a3:0b:5c:ab:88:a3:76:46:8c:b2:29:7d:63:76:2c:
                    db:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B7:FD:A8:34:A3:78:DB:95:69:97:70:97:2E:41:B1:46:F0:66:F3
            X509v3 Authority Key Identifier:
                keyid:E4:EF:17:F4:CB:4F:E9:2A:D0:53:EE:F2:5F:39:D6:3A:E1:20:7D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5O8X9MtP6SrQU-7yXznWOuEgfdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/150355-c11a-4d37-a182-23762aa09717/1/5O8X9MtP6SrQU-7yXznWOuEgfdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:79:99:bb:41:2f:83:23:ca:43:5a:0f:a2:f6:3b:92:10:10:
         19:f4:90:0e:64:9c:37:dc:15:70:68:20:84:38:4e:a4:c4:47:
         c1:1a:d3:7d:88:15:8a:ef:b7:46:53:0e:61:4a:4f:11:b6:4c:
         06:e7:e9:c5:13:e9:cf:40:e3:08:41:af:1e:d5:64:9c:51:80:
         e0:78:ef:ff:41:96:a3:66:db:37:8c:69:c4:30:0c:d4:a6:0f:
         ce:03:2b:58:98:8b:fa:fa:76:e0:36:4d:90:32:a7:d6:a6:4e:
         07:34:a3:1b:22:dc:d2:f8:53:67:b7:24:84:67:7e:b1:03:6a:
         31:99:9e:85:f9:6f:ea:e5:ba:5b:af:9c:bb:bf:ea:1f:04:e2:
         cb:9a:cf:12:f9:3f:a5:ab:14:77:7a:e7:a1:6c:c7:ac:24:98:
         89:da:a9:cd:f0:12:0a:f1:5f:77:f1:b2:0a:3d:eb:37:ec:9b:
         a2:5b:9b:c1:cc:fd:74:83:24:d4:13:11:6c:cb:fc:d8:c0:1d:
         97:00:74:f3:c9:67:17:7a:01:7f:a0:f1:df:fc:ec:c1:7f:3e:
         b4:5b:1b:62:56:23:63:ca:6a:eb:78:0d:0f:76:c5:86:39:f5:
         a1:26:c6:a3:52:dc:78:0b:02:6b:7d:ac:a9:42:55:63:e0:d4:
         75:09:cf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:44 2025 by rpki-client