Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
File:                     taJj0Y61xUD3R4glu3LvrG8o-Cs.mft (raw, json)
Hash identifier:          CBQ6YnvR98lQlX4ELgvlKajA4btRPQ9/qPlJM/bGNS0=
Subject key identifier:   36:6F:47:3E:5D:C4:A2:EC:02:92:32:7A:F1:57:A2:65:8A:61:BC:B2
Authority key identifier: B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B
Certificate issuer:       /CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
Certificate serial:       0194C42C9165CF413FA93B9D00F346BFC855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
Manifest number:          13BF
Signing time:             Sun 02 Feb 2025 01:00:42 +0000
Manifest this update:     Sun 02 Feb 2025 01:00:42 +0000
Manifest next update:     Mon 03 Feb 2025 01:00:42 +0000
Files and hashes:         1: FxOU5mcs5zu6It7tyYPtggiNpMw.roa (hash: HYzosP3W6gjE2lC2/EeCUTPjqHpatsBGbz79rZD00GQ=)
                          2: taJj0Y61xUD3R4glu3LvrG8o-Cs.crl (hash: KeXG9Lsg11ChZlqoaqtBG264ikvwOcXm2UYXaf1Y4N4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:2c:91:65:cf:41:3f:a9:3b:9d:00:f3:46:bf:c8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5a263d18eb5c540f7478825bb72efac6f28f82b
        Validity
            Not Before: Feb  2 01:00:42 2025 GMT
            Not After : Feb  3 01:00:42 2025 GMT
        Subject: CN=366f473e5dc4a2ec0292327af157a2658a61bcb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4d:ff:bd:cb:5b:da:d8:b0:ce:ea:69:01:b5:
                    c7:89:5c:dc:ac:06:c3:a3:b5:fa:1e:e7:65:bc:1b:
                    a0:13:9b:83:d4:8f:a6:78:59:07:48:1d:2b:2a:c2:
                    a1:46:9c:e5:11:2f:52:c2:43:4b:67:74:df:30:3c:
                    c7:be:97:21:98:bf:d0:36:93:59:97:e2:d9:46:93:
                    bc:9a:36:42:08:39:16:55:94:b3:b0:92:d5:4e:4c:
                    55:84:fb:7b:cd:69:f6:12:e9:a0:69:ec:e7:44:6a:
                    3e:49:a5:fa:70:49:bc:f8:ce:b8:fd:27:e3:66:8d:
                    21:98:dd:9f:5f:f7:3f:40:0e:d6:77:05:5e:b1:59:
                    d4:20:37:72:2a:b1:9e:0f:91:cd:88:85:93:89:40:
                    a9:c8:47:8b:1c:1c:12:c5:7d:fa:66:3d:12:79:e1:
                    e9:96:f0:4f:6a:ab:36:f6:9f:2f:25:5d:23:56:4a:
                    e3:36:56:fc:63:86:90:55:c7:c1:25:58:69:16:5c:
                    1b:3f:21:8e:4a:54:9e:35:bf:58:04:8d:b3:d3:78:
                    e9:d7:de:b2:4d:98:7e:ed:d5:5d:b6:38:0d:e9:30:
                    80:a1:e3:72:48:fe:92:c7:76:8f:b1:4a:b4:8f:98:
                    f7:af:e3:e8:6d:2a:27:0d:e9:23:fa:c6:fe:13:ec:
                    7c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6F:47:3E:5D:C4:A2:EC:02:92:32:7A:F1:57:A2:65:8A:61:BC:B2
            X509v3 Authority Key Identifier:
                keyid:B5:A2:63:D1:8E:B5:C5:40:F7:47:88:25:BB:72:EF:AC:6F:28:F8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taJj0Y61xUD3R4glu3LvrG8o-Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1d0171-3307-4531-a73a-146a69b6d8e4/1/taJj0Y61xUD3R4glu3LvrG8o-Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:72:d6:3c:74:5c:b6:92:f7:bb:eb:eb:38:61:95:f6:1f:cf:
         7e:0c:35:ef:44:1a:f7:f5:6b:81:8d:d1:fc:ee:bc:1e:30:33:
         f3:16:71:84:4f:d9:ce:7e:1a:1c:1d:90:45:18:e1:ef:e9:2c:
         76:51:6b:dd:19:69:9a:44:af:4a:cf:20:bb:21:bb:9f:88:bb:
         ad:11:65:9d:f5:55:c2:78:b7:48:e8:af:31:80:2c:e0:3c:61:
         35:e8:9d:98:91:44:98:84:90:8a:17:92:00:c4:96:da:21:7d:
         30:f7:33:2f:f8:97:7a:ad:a7:f5:69:4f:60:63:a0:99:62:f8:
         e5:3f:e0:1b:50:22:96:98:93:e5:75:61:e6:ea:ba:b8:88:bf:
         ae:8d:5f:d2:bf:1f:2a:70:16:bf:49:11:75:71:a3:25:d9:2e:
         30:ea:df:54:fd:9b:ca:82:15:20:60:22:88:44:5f:a1:c6:2f:
         19:8e:e9:dc:ff:c7:a5:f6:5a:c9:72:52:b6:50:21:4d:ce:b3:
         e6:d0:30:4d:0a:2f:c1:9f:de:78:36:c3:93:50:fe:4e:b9:7b:
         bd:8c:b0:7a:50:66:12:07:4c:1d:44:c2:81:17:29:94:35:c0:
         a5:db:e2:b6:6a:aa:21:52:a0:32:93:5e:34:6b:a6:5d:c7:84:
         dc:12:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:47:57 2025 by rpki-client