Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
File:                     82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft (raw, json)
Hash identifier:          zPiphX+Sk0NLGl9VBssB/3ZOKqQUb8AAZ0wkTHapbOw=
Subject key identifier:   95:72:A8:22:D6:91:B0:79:F8:31:05:B1:CE:7C:9E:68:36:A2:09:6E
Authority key identifier: F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64
Certificate issuer:       /CN=f36f9cbaff653b60134b46aa70e79117098a7c64
Certificate serial:       019511353B8E00FB1BEE1202D892B001A4E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
Manifest number:          0F5C
Signing time:             Mon 17 Feb 2025 00:00:56 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:56 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:56 +0000
Files and hashes:         1: 4Ocvr5gePs8rQXUxhPB4UFZ5TcY.roa (hash: FS134QCSv+f7Sa1190NHb4XIoYMRMPf9uXBwxQKSXX0=)
                          2: 82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl (hash: 0ck44qNq5NNhVLonfbIEXcCDa1GyOM8p0643+Faf26A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:35:3b:8e:00:fb:1b:ee:12:02:d8:92:b0:01:a4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f36f9cbaff653b60134b46aa70e79117098a7c64
        Validity
            Not Before: Feb 17 00:00:56 2025 GMT
            Not After : Feb 18 00:00:56 2025 GMT
        Subject: CN=9572a822d691b079f83105b1ce7c9e6836a2096e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:ff:a8:65:29:72:2a:ce:c3:26:2b:22:87:
                    5e:0b:cb:31:30:10:1b:5f:c7:8b:89:38:4e:e7:12:
                    d3:28:fc:b5:0d:05:d1:06:01:a2:e0:c8:7e:17:8c:
                    42:d3:4e:9b:f0:2b:0f:2f:d1:70:52:ea:70:73:e9:
                    34:54:43:3e:ca:c4:96:4a:b3:5f:31:a5:c9:04:91:
                    7b:1f:8a:da:8b:bf:0a:50:ad:cd:4e:64:71:40:2e:
                    b9:fe:17:d8:e4:44:92:d8:d1:e8:8b:6a:9e:cd:a5:
                    79:58:4e:98:52:92:aa:2f:b0:c3:37:be:62:5a:3b:
                    0e:37:79:44:3f:bc:2d:b1:10:94:3f:9a:ba:79:5e:
                    05:94:cd:bb:c0:a7:b2:23:54:36:02:df:c2:08:c9:
                    ea:88:5e:9e:21:39:c4:f2:fb:6d:eb:2a:6b:4a:57:
                    10:88:32:40:5d:24:e2:6b:13:7a:6e:bf:2a:80:4a:
                    b9:c3:13:7f:a8:58:d4:ff:80:02:f0:3e:23:1b:bf:
                    7b:60:ac:2f:53:97:fb:71:de:d9:03:30:b9:12:73:
                    37:9a:49:59:c0:bf:fd:a2:b3:55:66:0a:95:b9:4a:
                    78:d0:95:36:65:18:59:07:cb:ae:6d:3f:65:fd:55:
                    6d:6f:19:bc:92:4e:a6:84:0e:4d:52:77:bc:db:cd:
                    fc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:72:A8:22:D6:91:B0:79:F8:31:05:B1:CE:7C:9E:68:36:A2:09:6E
            X509v3 Authority Key Identifier:
                keyid:F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e8:2f:4c:d3:04:b8:27:0b:cc:ef:b6:1f:80:3c:3d:cf:19:
         ac:4e:ef:6f:dc:8f:cd:c2:6c:15:61:65:16:eb:69:67:a3:28:
         a1:ed:bc:b4:52:ee:71:fc:3d:fe:5d:a3:d7:ee:f8:37:94:a1:
         d5:54:14:72:17:5c:a6:4a:51:3b:0f:1f:d9:42:42:f5:f7:72:
         4f:83:69:3a:47:cc:d5:09:1f:92:40:74:a9:32:75:28:00:6b:
         a3:3f:60:da:d2:8d:69:a1:21:70:cd:97:84:70:67:5e:69:97:
         18:78:e9:88:d0:a9:de:4c:36:b4:e1:dc:b5:d6:79:5b:6e:dc:
         da:da:7c:e0:8b:ae:3e:fe:3f:74:fc:9b:70:8c:40:1a:de:9d:
         a3:80:80:dc:54:7f:63:11:83:df:fa:84:ea:4c:40:a9:1b:b1:
         60:08:50:9b:a2:0a:c9:3b:cf:5d:88:83:8a:35:26:90:39:57:
         1c:aa:62:41:6a:52:35:cf:e6:12:64:90:28:3c:b2:0b:1c:a3:
         4b:10:fa:21:ae:00:87:be:50:91:43:dc:03:ca:fa:91:5b:47:
         8a:1f:f7:d2:05:95:20:eb:3f:68:f9:83:e0:89:e0:22:b3:1c:
         2e:9e:de:07:58:0a:f6:c9:15:b9:b5:51:d8:c2:f3:b4:14:92:
         23:4e:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:57 2025 by rpki-client