Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File:                     u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier:          LYjyECTui9hxfpMaL6kdi3qB4IqkvFfFpWg2BkU3Cpg=
Subject key identifier:   90:58:E5:8E:1C:8E:B1:15:EA:F0:0C:D3:02:C8:B5:19:81:F7:C9:E1
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer:       /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial:       019511D9B96693EF7C71D557B7493485AB37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number:          10DD
Signing time:             Mon 17 Feb 2025 03:00:36 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:36 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:36 +0000
Files and hashes:         1: 2D_1ncLmLPuJXtpl_Q5ttTWBK4k.roa (hash: 0bQuiH2aHkDAf1rtJEQ6AsC0osUnBUOUl2vPm0WmrnY=)
                          2: IfAzv2xamXQmXpt0GBd13kn7nCM.roa (hash: jbzJm1UfZ+dpmS3iaSw271pkPBOa1r0axTofijj8Fjs=)
                          3: jPqjPZ927oU6pe2k5ljy1515_Bc.roa (hash: 1wwmQ4EiI2fcY7sas0ylQShSCsBsDc+FRheBv820+D4=)
                          4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: 9s0ilPb/QiLB09i9QkqQevw8fD79eeLs0tJImhpf/Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:b9:66:93:ef:7c:71:d5:57:b7:49:34:85:ab:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
        Validity
            Not Before: Feb 17 03:00:36 2025 GMT
            Not After : Feb 18 03:00:36 2025 GMT
        Subject: CN=9058e58e1c8eb115eaf00cd302c8b51981f7c9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:80:40:e0:77:7e:0a:6a:2a:7f:48:3e:b7:
                    bf:72:86:aa:7d:71:32:99:95:cc:7c:fb:48:64:f9:
                    dc:32:f9:98:06:9a:f8:2f:d9:47:06:8c:4e:6b:05:
                    38:ed:1c:22:a5:05:0d:61:ca:26:75:f0:85:25:5d:
                    a8:c3:77:5c:19:46:9e:df:45:c2:e5:35:96:65:b4:
                    51:60:e1:05:31:10:b0:29:a1:74:f1:97:7e:53:b2:
                    32:d3:2b:d5:e6:29:3f:51:a3:4e:88:cc:38:8d:e1:
                    45:51:e6:1a:15:ec:8e:3c:9b:3c:9c:d5:14:fb:53:
                    26:10:02:82:5b:eb:c5:2b:65:33:25:c3:aa:a3:26:
                    e3:dc:a0:17:f1:b5:ca:d2:d1:94:ab:49:6a:58:48:
                    77:5b:ba:0e:c8:f6:92:bf:ac:c5:69:d0:9c:98:f0:
                    86:de:19:4a:b6:bf:ef:5f:e2:24:03:1f:e4:f2:b9:
                    15:cb:4a:17:87:77:a4:3a:07:80:04:30:94:e3:f7:
                    4e:81:7d:bb:f5:c9:ec:e5:fe:50:a8:d2:bd:44:ba:
                    65:3c:7b:79:36:fa:f7:bc:c2:dd:94:0c:72:3f:ca:
                    46:e3:5f:93:ed:f8:f7:ad:22:bd:66:53:84:2f:c2:
                    81:36:58:6c:cb:43:de:6b:62:16:f7:d0:c0:f5:24:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:58:E5:8E:1C:8E:B1:15:EA:F0:0C:D3:02:C8:B5:19:81:F7:C9:E1
            X509v3 Authority Key Identifier:
                keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c9:36:e7:ef:81:92:fd:f5:7e:b8:7f:f4:91:08:5f:3d:7a:
         f0:18:81:d2:39:a9:69:ad:ac:5b:68:f1:4d:4a:df:36:42:47:
         b4:fe:8c:d5:12:a5:ed:eb:5e:f6:30:69:78:c8:fb:f1:24:37:
         55:a8:23:53:7a:dd:7f:ed:a2:d8:77:e7:33:f4:70:b8:9d:cf:
         74:f2:43:43:96:81:d8:59:09:6c:22:b4:b5:95:7e:49:e6:24:
         da:f3:24:b2:07:9d:93:7a:e3:d1:29:45:5e:52:0d:c6:83:88:
         09:26:f7:34:76:dc:52:13:4a:f5:e8:05:4f:00:64:5c:c0:2a:
         b1:a7:34:ca:0d:78:a4:d2:42:80:3c:fa:ba:c0:cf:1a:fa:58:
         6d:e3:b9:cb:1e:2c:a1:6c:7f:d6:f3:79:a6:a4:10:59:85:41:
         71:37:c6:67:8c:c5:ea:66:ee:f8:48:71:db:72:d4:06:96:6c:
         e6:5e:3f:28:fc:97:a8:c5:d5:f8:15:34:50:05:b9:1a:6a:16:
         80:4a:d0:04:50:84:03:95:04:81:0e:8a:17:84:b6:1e:3e:b7:
         71:4e:78:c2:48:b7:1e:15:09:99:78:cc:8c:d7:e9:50:2f:52:
         40:09:d2:1c:ed:af:90:f2:71:da:23:0e:a6:c8:20:37:39:89:
         1c:91:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:51 2025 by rpki-client