Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File:                     aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier:          bXnZ8RB9klAd5rY4c+j7Xe8IuakIwiJkCnumSj7yo/s=
Subject key identifier:   60:84:10:C7:6C:6B:1A:06:F3:3C:E9:DE:AF:36:A6:06:18:B5:D8:89
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer:       /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial:       0194C388413F8BFC178055BE1A7F52AEA4B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number:          1262
Signing time:             Sat 01 Feb 2025 22:01:14 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:14 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:14 +0000
Files and hashes:         1: XNXaPinw0hzOOpIdJrAz4vMzL7Y.roa (hash: nt1Ol97FedM7YNil48Mps6jHTBBWL5yE4allTSXHKUk=)
                          2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: 8Xw+6dMYvnhIxOR9tXzb/X4cRMUQAtKEm8vlaG094GY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:41:3f:8b:fc:17:80:55:be:1a:7f:52:ae:a4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
        Validity
            Not Before: Feb  1 22:01:14 2025 GMT
            Not After : Feb  2 22:01:14 2025 GMT
        Subject: CN=608410c76c6b1a06f33ce9deaf36a60618b5d889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:27:cb:b7:1d:ee:cb:4a:d4:fa:d0:35:f9:
                    63:a5:6a:5b:d4:0b:3f:4c:9a:37:c6:c1:89:d8:b3:
                    c7:2c:a3:e8:30:e5:79:d5:6d:52:c9:41:c5:e5:a9:
                    c9:27:e4:fb:15:e9:d4:fa:42:b4:f7:25:10:bd:09:
                    71:0c:46:0f:a1:39:94:a8:8e:77:b4:c7:e2:0a:9b:
                    de:ab:d6:50:69:8c:3d:99:cb:87:67:b3:77:63:fe:
                    5e:d1:10:4e:9e:fb:a5:95:5a:46:d6:25:9b:93:9a:
                    c7:18:5d:9f:2c:9f:d2:d9:38:e3:5f:22:53:7d:fe:
                    96:97:e9:38:61:3d:1b:27:24:e5:2b:4c:f8:20:9b:
                    dc:d2:25:ac:f8:eb:f8:ef:6e:ca:8d:ab:e1:12:da:
                    9a:1b:9f:ba:b6:78:e9:09:6c:17:2c:90:c8:6c:3d:
                    56:df:1a:a0:d1:a3:04:a2:5c:eb:b9:6f:91:38:d4:
                    83:db:ae:d9:72:82:77:7f:a3:c6:18:14:f9:2f:b4:
                    b3:8e:6c:04:06:2a:f0:9a:e2:88:3d:be:fd:aa:f2:
                    48:28:0c:6c:e0:9c:1d:b1:ac:9f:78:80:be:e9:fd:
                    76:e2:49:08:78:37:64:a9:f4:20:0e:08:1c:59:80:
                    e4:58:25:0e:45:45:7c:01:87:f5:fe:f9:f4:50:66:
                    51:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:84:10:C7:6C:6B:1A:06:F3:3C:E9:DE:AF:36:A6:06:18:B5:D8:89
            X509v3 Authority Key Identifier:
                keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:c5:df:3e:b5:29:c4:55:6d:ef:3c:69:39:74:57:cc:5c:43:
         c4:a2:7d:ca:70:75:bb:e5:fd:c6:94:39:a5:c9:17:07:a8:73:
         68:49:06:9f:a9:ed:30:63:ef:d8:17:7c:6f:9e:ec:0a:d6:4c:
         14:45:d4:52:2f:c1:66:23:5f:45:b2:8f:43:b7:04:3d:0b:41:
         6f:d1:4a:1a:3c:8d:94:4e:b0:6f:b2:cb:f2:60:1e:03:49:16:
         7f:65:1a:12:21:8c:4f:69:07:9b:cd:d0:63:8f:39:83:60:c9:
         c6:1c:a5:c0:b0:b3:3d:c5:87:6f:08:76:69:42:30:47:79:e2:
         dd:5e:d7:97:92:ff:28:7a:b5:e1:f8:2f:a5:69:e8:a9:f7:60:
         d4:50:bb:27:86:ad:dd:24:47:ac:2f:5b:a3:ca:0a:48:31:1e:
         49:e4:fe:fe:41:5b:e9:bd:e7:36:47:15:9e:ab:36:37:9a:a3:
         f1:9b:b6:b6:3e:15:8d:84:ac:99:05:8a:8c:19:8a:5a:3a:91:
         65:5c:ef:04:46:b7:55:45:cd:34:6d:d4:82:cc:65:aa:e3:bc:
         6c:91:42:72:f4:4f:7a:c5:9f:5b:cf:c3:53:5a:27:79:40:24:
         ec:d7:5e:41:c0:48:34:0f:31:e4:0b:90:d3:22:bf:3c:e5:2e:
         33:8e:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:29 2025 by rpki-client