Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File:                     7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier:          kmCaKqKuTHjzqdw1iXLAfYhFfZd9yhlVKVgfT7BcLq0=
Subject key identifier:   D3:1E:23:D7:56:DA:14:64:55:17:39:05:98:6E:B2:28:6E:B7:34:85
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer:       /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial:       019510FE211F8CA45FD94E55A169609F3B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number:          12C0
Signing time:             Sun 16 Feb 2025 23:00:44 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:44 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:44 +0000
Files and hashes:         1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: yK4/Hr5QcpNVuHU4Ja3wc0OgfpDZzOm3fpCzYjMM188=)
                          2: UXcHNRDTyy3PiUqS2xFpW1tKLYo.roa (hash: BltR1oVh4LzI1B9mL1LTvil5PzPzPEDEKGPAhFkqH3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fe:21:1f:8c:a4:5f:d9:4e:55:a1:69:60:9f:3b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
        Validity
            Not Before: Feb 16 23:00:44 2025 GMT
            Not After : Feb 17 23:00:44 2025 GMT
        Subject: CN=d31e23d756da146455173905986eb2286eb73485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c4:31:38:c8:d5:1d:33:75:cb:2c:8e:21:5c:
                    16:bc:4f:f1:72:ea:4c:71:1f:65:b9:d8:cd:34:02:
                    9a:b6:1a:4a:15:b9:46:29:19:6d:31:75:34:1e:7d:
                    2f:44:10:66:0f:b4:29:9e:5a:70:bd:57:c7:34:58:
                    46:d7:30:64:52:a4:59:24:f6:f6:4d:13:f3:96:84:
                    93:79:4b:9c:6c:c6:ea:14:65:2c:89:d6:06:7c:b0:
                    21:19:a4:1e:a2:7a:7e:b1:01:9d:f3:0e:65:a1:f1:
                    ea:c8:f0:62:4c:33:3a:49:55:14:de:3a:37:6c:5b:
                    09:2b:0c:cf:b1:a1:e4:e4:4c:2b:82:97:8f:3b:10:
                    70:94:3b:f8:4c:ae:4c:77:f5:8e:51:d3:6a:1e:61:
                    7c:b1:9e:76:b2:24:14:bf:4c:e3:29:4c:1d:7b:4d:
                    3f:cb:24:7d:bb:3f:c4:19:82:de:26:ff:28:b7:20:
                    44:62:a9:b7:8b:9f:dd:64:ca:ab:f1:8c:79:39:d1:
                    26:92:56:bb:54:fc:8f:36:2e:10:37:da:eb:66:06:
                    9d:f8:62:16:30:60:cb:7b:a5:ca:a9:82:14:2f:64:
                    55:f3:5c:19:8c:37:52:4e:cb:19:52:5c:5c:62:30:
                    30:ca:fd:c7:29:15:cb:23:a7:83:96:05:08:15:b5:
                    d3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1E:23:D7:56:DA:14:64:55:17:39:05:98:6E:B2:28:6E:B7:34:85
            X509v3 Authority Key Identifier:
                keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:de:c1:7b:a1:ed:eb:66:11:78:9a:f4:f9:cb:f3:6d:c0:c1:
         ea:bc:42:18:9c:ce:ba:da:6b:87:cd:52:b0:a3:16:c0:22:e4:
         2a:9f:c9:59:f9:78:40:fb:e3:ab:03:15:cb:af:25:cf:63:da:
         df:cd:6e:cb:a6:6f:cb:ac:3b:13:18:6a:09:38:b7:48:2a:4f:
         78:2b:38:45:f1:d6:11:00:7f:bf:e9:8e:60:33:05:74:f5:e4:
         6c:25:3f:46:c7:db:e6:b6:8a:2b:22:e1:2f:12:c1:72:ba:35:
         43:33:21:7a:9e:3f:07:f8:6e:13:ff:28:c7:17:bf:11:cb:89:
         28:1e:b8:3e:4e:e8:d9:34:27:6e:52:74:82:eb:50:42:b8:70:
         50:89:85:42:0e:2c:0a:ce:1a:ea:a5:bf:cd:8b:1c:a1:99:97:
         a2:2f:6e:8a:ec:90:c9:f5:3b:da:79:77:82:7a:35:9d:1c:20:
         a2:58:5e:93:b1:0e:0a:72:90:01:8b:69:6e:b5:9f:97:f6:e1:
         e6:6f:0d:3c:ca:a2:fc:11:ef:51:e0:03:54:dc:37:2e:89:7d:
         05:4e:31:12:b5:27:6e:de:8c:07:6f:df:ea:8c:5e:5f:50:5f:
         b6:c3:9d:6d:c2:72:cc:82:ed:7f:9e:f5:24:e3:0c:0f:f9:af:
         50:5d:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:03 2025 by rpki-client