Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
File:                     eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json)
Hash identifier:          KBSoSS8nqwIuwuNF1XHl5vwjOTRZgNWU4Hw0OYoPIyU=
Subject key identifier:   79:B5:E4:6D:83:AC:29:3E:E0:B7:32:F3:CF:1B:71:74:20:A5:61:67
Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C
Certificate issuer:       /CN=78d403d938d71bdc5a3acb076d32af8283be627c
Certificate serial:       019510C72D7729BA990B90135DF9EE2EBB87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
Manifest number:          0573
Signing time:             Sun 16 Feb 2025 22:00:43 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:43 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:43 +0000
Files and hashes:         1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: pc04FZm2aB5rL2Qs2mu4w7Rc4f1AxwRxZC0hCdQcXaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:2d:77:29:ba:99:0b:90:13:5d:f9:ee:2e:bb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c
        Validity
            Not Before: Feb 16 22:00:43 2025 GMT
            Not After : Feb 17 22:00:43 2025 GMT
        Subject: CN=79b5e46d83ac293ee0b732f3cf1b717420a56167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:b1:39:77:b7:a3:87:37:dc:8b:04:6d:90:
                    e5:28:db:83:65:b1:57:e5:7b:03:9e:bc:c6:e3:4c:
                    94:78:e4:8d:d2:69:eb:f8:cd:c4:77:17:aa:b2:89:
                    fb:6a:c7:d0:4b:f6:64:b7:0f:36:65:d4:ee:e9:8e:
                    9b:65:8d:c1:5e:18:9c:2e:20:86:63:f7:13:4e:fb:
                    c5:f0:dc:f0:fc:68:fc:90:1b:d7:ae:43:95:19:8f:
                    2e:9f:76:3a:84:38:2e:bf:18:21:52:ea:c5:43:55:
                    36:3a:67:23:a2:22:fb:a7:4f:66:9d:ee:d7:d1:27:
                    4c:59:34:f9:09:3d:c9:49:99:53:2e:fd:84:a5:ea:
                    a8:d7:3b:06:40:65:d9:f6:4b:ee:10:41:65:60:a5:
                    f3:8d:3d:dc:5b:b4:6b:ed:2f:a3:2d:e0:fb:da:d5:
                    6c:70:22:dd:1f:e1:90:22:11:d2:83:e7:de:c8:6e:
                    f9:6c:da:65:b9:ab:63:e5:8d:53:68:45:b1:d5:e6:
                    e5:01:3c:54:00:de:3b:af:e2:cf:42:08:ae:82:5e:
                    56:8e:61:ec:57:b8:2a:41:c0:64:f3:8c:a7:46:8e:
                    27:6d:61:dc:11:5a:03:bb:a1:6e:59:90:c4:87:ba:
                    99:99:6b:20:a0:72:a7:2d:33:b2:71:c7:c5:78:4a:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:E4:6D:83:AC:29:3E:E0:B7:32:F3:CF:1B:71:74:20:A5:61:67
            X509v3 Authority Key Identifier:
                keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1e:18:c9:5f:bc:d8:c3:2c:c2:ad:60:e4:d6:cd:c4:1a:cc:
         33:fc:fc:54:07:69:db:6a:b0:60:0e:9e:c4:89:aa:40:d1:c6:
         3a:d3:6c:1f:f2:26:02:b9:9d:7e:d5:5c:ea:1e:90:02:13:12:
         42:aa:ef:ac:04:bd:d4:47:b0:d0:9d:26:19:a1:26:b3:e7:97:
         1d:d6:11:98:7d:ac:47:b3:ab:f0:13:40:a7:a0:6c:ff:14:fc:
         aa:8d:f5:64:75:b8:11:25:1c:95:3d:02:c5:b5:41:3f:34:bb:
         24:32:b1:86:ba:95:a7:63:fc:13:a5:4c:09:7e:6c:16:d6:96:
         47:7a:52:14:8b:38:d5:02:de:a4:dd:58:b6:86:03:92:e5:9b:
         2c:79:18:9f:c2:06:bb:7d:8e:0f:f8:d7:4a:82:2f:84:ba:fd:
         56:ee:43:71:6e:9b:dc:c3:02:7d:f2:f4:9a:ef:a9:ed:bc:e0:
         78:48:ba:2f:33:4a:23:8e:b7:c2:0a:03:66:a5:78:cf:a0:a3:
         d2:fa:bd:ea:27:ce:4d:60:db:ef:99:98:34:11:59:01:7c:f1:
         7f:dd:30:6a:e5:8c:e8:31:17:99:2c:4e:9b:77:b5:60:d1:29:
         a6:87:af:dc:a5:c0:b1:dd:db:fc:32:7f:6a:49:ff:b4:44:50:
         bb:be:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:36 2025 by rpki-client