Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
File:                     PCyFQBEUChCUfae1O7s1DzxUsz4.mft (raw, json)
Hash identifier:          njC+MFDZSgfl/jrnk1anuC2opO/6wjTD7Rx/VsieNks=
Subject key identifier:   D7:94:70:46:1A:B6:D3:BE:0D:0F:0E:CA:8B:20:99:82:76:38:32:BB
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Certificate issuer:       /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial:       0195127E925E6645FA4AD2C3E47EA9E81F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
Manifest number:          0457
Signing time:             Mon 17 Feb 2025 06:00:39 +0000
Manifest this update:     Mon 17 Feb 2025 06:00:39 +0000
Manifest next update:     Tue 18 Feb 2025 06:00:39 +0000
Files and hashes:         1: NtKyDgbGesEe8awF15SqP0_3q5E.roa (hash: 5/QwTKhvWnKsc5Bc5M0m9rQLZKRH4InU93sknSCwHzs=)
                          2: PCyFQBEUChCUfae1O7s1DzxUsz4.crl (hash: fCW+3+AcFbMUh9Ug7ocBf5KKtrrb2NYIoI6hygue6Mk=)
                          3: WNJuWEXBIip_f5G2ObX5HLas-6I.roa (hash: boUS884QFMK9V7SQvxUAnalpgEFhwVVzKbrcjkzFqDQ=)
                          4: hUje3HFTF6f1DLkrPmJro0BJv84.roa (hash: kR65nTDvmrqvVF+VEljMTGu7vMzX0EU8UFNtyZDk3w8=)
                          5: i63lT8gZ80ZQnoxkIIq3_XH-qGo.roa (hash: u7r5j40jao9jpdMvyg5KQYNAFcKXMkC3d+QE0v1EduY=)
                          6: ibMRX0UskUZ1fKV63OderSyFGp4.roa (hash: eA4MV5O6XQVzVYEe9jvmxnmU146aKwd4Gt1iGOJqAdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:7e:92:5e:66:45:fa:4a:d2:c3:e4:7e:a9:e8:1f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
        Validity
            Not Before: Feb 17 06:00:39 2025 GMT
            Not After : Feb 18 06:00:39 2025 GMT
        Subject: CN=d79470461ab6d3be0d0f0eca8b209982763832bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:30:3a:e2:75:29:45:90:21:85:fb:79:b0:3e:
                    56:5a:4a:f9:fd:30:05:88:15:46:78:ef:29:0c:30:
                    60:1d:f8:86:84:5a:d0:33:39:e9:10:c4:45:0f:a3:
                    78:11:4c:e8:da:27:e3:7a:65:16:68:68:03:9d:37:
                    01:bd:a1:36:43:df:60:85:4e:d1:ab:bd:cd:d6:95:
                    7a:65:1a:9b:39:4b:03:5a:cb:30:7a:f2:dc:b5:76:
                    62:47:ed:7f:ee:ef:33:ab:fa:0c:6f:44:7f:33:02:
                    e7:82:c2:8b:63:0d:83:be:ea:2c:89:70:f2:30:23:
                    1e:07:0f:ac:ac:a5:4a:ec:0e:28:d7:6b:a7:d5:ca:
                    32:27:9a:b4:ac:b6:7a:ce:6b:84:a3:fb:18:7d:a8:
                    50:8d:e7:5f:50:69:2e:f5:18:26:4f:ba:16:f3:0a:
                    9b:30:eb:99:40:76:f9:12:97:6a:ef:ed:9c:9a:22:
                    e1:6c:fe:35:df:7a:36:f0:4e:11:f8:96:32:b7:8a:
                    3f:5a:56:35:64:d5:6a:3b:f0:2f:58:df:09:57:40:
                    7e:7f:08:e0:16:35:ea:cb:3b:e8:89:31:62:9b:99:
                    7e:5e:c1:17:1a:76:16:9c:34:aa:27:52:13:9e:a2:
                    a5:9a:81:54:9f:76:b2:b1:6c:13:2b:bf:45:7e:72:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:94:70:46:1A:B6:D3:BE:0D:0F:0E:CA:8B:20:99:82:76:38:32:BB
            X509v3 Authority Key Identifier:
                keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:44:94:bf:d9:96:66:8f:95:80:4a:75:e6:d6:87:bf:66:
         de:68:5e:93:5b:6c:6b:24:c1:0b:ff:45:66:f1:03:09:89:d2:
         59:8d:18:0e:60:c1:13:fb:5b:2c:ab:ee:1b:be:50:77:8c:9f:
         5b:f9:6a:2e:b4:2e:19:35:ac:2a:78:d4:a0:e9:57:52:ed:4a:
         81:06:bc:57:44:63:6a:f1:6a:f9:a4:63:20:ea:68:b2:6e:69:
         00:a7:16:6f:4f:74:c0:cf:04:8b:50:0e:b4:98:78:aa:88:b9:
         a2:64:32:a1:f2:15:cd:c6:01:47:8c:11:66:23:6f:d7:6c:fd:
         3c:93:19:26:d0:36:c8:b2:1f:10:92:a2:b5:58:31:68:ea:e0:
         d6:07:ed:92:6c:6b:bb:14:46:14:25:7a:cd:39:4f:97:61:bc:
         23:6f:aa:14:71:fb:5d:28:9f:16:ce:e7:3e:bb:a0:1f:42:5a:
         38:08:dd:93:0e:08:d7:37:91:db:ed:10:c3:f4:60:1b:2d:57:
         33:52:b3:ad:e8:06:94:68:58:5b:a1:d3:44:75:96:7c:9b:31:
         6c:a7:db:53:9b:96:e0:37:4a:07:e9:1f:a6:fe:e8:a0:ae:bf:
         08:f9:6d:d4:46:62:ab:6e:d6:8f:b0:8b:44:91:fb:1f:45:77:
         91:a5:67:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:38 2025 by rpki-client