Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
File:                     c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json)
Hash identifier:          C1vacHmUvoQd/G4tDG5TfNcG3ICUrgrGEPDTa0a9rzo=
Subject key identifier:   63:38:02:1A:94:1D:7D:57:16:82:58:22:A8:0F:20:16:28:82:75:1A
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Certificate issuer:       /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial:       0195108FD7AC4E9541F2AA807621A9343E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
Manifest number:          1458
Signing time:             Sun 16 Feb 2025 21:00:17 +0000
Manifest this update:     Sun 16 Feb 2025 21:00:17 +0000
Manifest next update:     Mon 17 Feb 2025 21:00:17 +0000
Files and hashes:         1: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: pXJT+Gi53q+QoSZukzoSui0OnH9AFP5+5PoRLwWQRa8=)
                          2: itE9wE1JCUjzPQMC17zph5bag1o.roa (hash: 6Zu8xe2ZQ7G9CqeB+rTfVIr8D7nrhuN4O3af8BzjF8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:8f:d7:ac:4e:95:41:f2:aa:80:76:21:a9:34:3e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
        Validity
            Not Before: Feb 16 21:00:17 2025 GMT
            Not After : Feb 17 21:00:17 2025 GMT
        Subject: CN=6338021a941d7d5716825822a80f20162882751a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:91:11:94:02:e7:e5:f5:23:2e:b2:56:83:
                    b3:5b:f7:1d:2e:cc:ec:9d:37:f0:40:17:da:19:fb:
                    32:3a:02:94:e2:9d:98:59:4e:ed:61:fa:77:78:ea:
                    c7:29:60:a5:73:27:08:56:3c:2c:72:5a:01:b9:31:
                    7d:dd:b6:38:e3:86:dc:56:13:aa:4d:ad:b8:5f:db:
                    75:a8:2d:f1:30:5c:ef:ae:bf:a5:fa:52:e9:ed:11:
                    a8:f9:90:9a:cd:dc:5d:04:ee:01:5e:39:52:d8:b2:
                    0e:13:c5:4a:c1:2d:d6:9c:4f:c9:f6:76:2a:ea:2f:
                    99:c2:9c:3e:8c:42:48:66:60:0b:30:7b:aa:4c:fe:
                    5d:1b:5a:9c:51:19:8b:7e:c6:6c:d4:5f:ed:56:7f:
                    50:99:87:e0:5e:3e:ab:a1:b5:b9:17:b6:13:80:90:
                    42:30:31:47:63:30:69:ad:aa:89:a4:4a:01:1c:d3:
                    01:10:d2:b9:0d:2c:e1:0c:d0:53:fb:18:93:35:f5:
                    29:9a:17:fd:52:ce:78:79:9f:59:cb:70:55:20:b3:
                    6b:50:d0:7a:1e:be:9e:5e:7f:eb:ce:23:af:a2:2e:
                    0f:30:79:e2:a3:71:a5:3f:90:fc:6a:b7:92:04:c0:
                    0b:65:55:4f:63:1e:1b:b4:f7:ba:5d:9e:ea:a5:b3:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:38:02:1A:94:1D:7D:57:16:82:58:22:A8:0F:20:16:28:82:75:1A
            X509v3 Authority Key Identifier:
                keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:cb:4a:ed:2c:77:5d:d6:32:ac:f2:da:f2:e1:47:77:1f:25:
         93:fc:df:cc:cd:42:b6:9c:70:53:38:a7:bd:86:d9:47:7a:e3:
         b0:84:35:3c:9f:cf:2c:63:b5:dd:4d:1d:97:f3:3b:ec:20:93:
         b0:72:93:f0:aa:3e:69:ba:f6:06:f5:92:50:38:52:66:f3:3f:
         8a:e6:99:b9:e8:cb:a8:7e:02:df:0b:71:0d:b2:b0:30:f9:03:
         9b:88:70:c0:0d:93:37:e5:3f:cd:63:b7:c2:b8:1c:f8:40:e8:
         02:61:61:de:b5:31:73:cb:c7:45:36:69:54:47:7e:35:93:59:
         ce:bb:54:6e:f8:7f:24:c5:77:ee:ad:ac:51:79:23:79:a0:67:
         4d:17:23:d1:92:c9:32:25:02:18:c5:41:1e:92:b7:07:78:66:
         81:fa:94:84:35:83:43:77:9a:01:cb:cb:2b:4d:7c:ad:d6:bb:
         49:9a:a8:fb:6c:0e:22:d5:e3:f1:b0:da:05:65:70:8d:01:2e:
         69:48:01:45:2e:31:83:84:8b:4b:70:4a:f6:41:65:7a:3d:e1:
         de:d3:a5:29:6f:c6:86:2b:c3:0c:ff:2c:16:ed:2f:f9:ba:d4:
         5b:65:4a:aa:b2:7f:db:32:a1:c6:d5:ce:d9:4f:48:22:19:57:
         4a:f4:c1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:48 2025 by rpki-client