Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
File:                     o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json)
Hash identifier:          NUzIBNe7BUely+JP4Tc7hiILdX5BdHWIFS+RT8cjYro=
Subject key identifier:   AE:0C:8F:DA:AA:EB:FA:51:7C:5A:E1:18:71:E3:80:1E:82:D1:95:84
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Certificate issuer:       /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial:       0196789F572788FD21BB104CCE4EB4858A61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
Manifest number:          1260
Signing time:             Sun 27 Apr 2025 19:00:30 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:30 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:30 +0000
Files and hashes:         1: DsyqwESYp4bmMSs9uCFJzZRR7bA.roa (hash: E3RC3t5fdJdmxwazPUOCHAze3MC/dZe6+l07MFZq2yo=)
                          2: SFuqJn2DzpiEwmJBsRfw9_GaM2E.roa (hash: +vZ9yeoCyMalYsdF7K+e902XvcsekiSx1I5xtnBl3PU=)
                          3: URz6VBEBARWru2pwN9on0fqVD_8.roa (hash: 9b/lI/zwvoC+7Oni/t6kARR6u3owQnT+bWIMpu3veFA=)
                          4: lab5J5RcCtas1L2Y7YMr6FyHoxc.roa (hash: N6A8KQuXMFwbmov+/kvLYo4potH2uakqtbpTY9DXAJc=)
                          5: muNpJENCGJ0J_DTMRNj99Wufntw.roa (hash: rlTQFNlHRqLDCrFKsl2Oqf+npVqRQ0yuhfH2dviuMA0=)
                          6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: ONyK4XOCT6YOn9IzgfwhIumdTxfh6rbVwZgw7wg/5NI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:57:27:88:fd:21:bb:10:4c:ce:4e:b4:85:8a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
        Validity
            Not Before: Apr 27 19:00:30 2025 GMT
            Not After : Apr 28 19:00:30 2025 GMT
        Subject: CN=ae0c8fdaaaebfa517c5ae11871e3801e82d19584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:2c:a4:7e:94:ac:f8:95:97:46:93:07:f1:
                    a6:3a:12:a0:b9:35:7d:21:65:5c:3f:f0:63:2c:25:
                    b2:67:20:b8:cc:94:b3:ff:8d:c0:4d:4c:06:a8:12:
                    e8:67:1e:4d:be:df:22:a0:0d:0f:b7:b5:1b:fa:e6:
                    1b:d6:6e:d9:db:50:f9:44:53:f2:ed:55:f2:83:06:
                    0e:4d:0c:c9:45:b2:e7:16:c7:6e:46:89:aa:f6:7b:
                    42:47:fa:ef:a4:a6:42:dc:96:db:98:7e:b6:b9:c9:
                    81:dd:45:a9:45:4f:4e:19:99:92:cb:22:aa:71:0a:
                    06:80:2d:d6:8b:30:a4:4c:27:84:ae:fb:8f:81:d6:
                    94:9f:e4:3f:04:66:60:de:99:5d:8d:7e:7d:80:9f:
                    7f:73:fc:48:46:d8:ff:0e:22:3c:8e:07:98:5e:b4:
                    ca:92:a1:e1:14:e5:53:45:3d:7d:94:15:23:e1:55:
                    6d:ff:6f:dc:b5:fa:42:a5:91:4a:ab:b5:a0:e2:20:
                    1a:98:b5:f9:b0:d7:7b:76:d8:ce:33:8c:cb:2a:01:
                    7d:7c:67:99:c0:05:39:57:7d:89:b3:9a:ac:14:91:
                    54:ff:db:0d:67:17:a2:ae:24:b3:5f:e3:c2:ab:a1:
                    68:a1:d1:09:c1:fc:0b:29:b8:c1:5e:df:e1:30:e1:
                    dc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0C:8F:DA:AA:EB:FA:51:7C:5A:E1:18:71:E3:80:1E:82:D1:95:84
            X509v3 Authority Key Identifier:
                keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8e:23:4b:4b:7e:f7:0d:4a:93:14:5a:5c:84:67:bd:4a:82:
         61:38:5e:7b:b7:87:30:40:52:19:6e:63:d2:1a:07:21:92:be:
         b3:4c:76:19:bb:91:be:0c:8d:22:25:6b:f9:1b:1d:24:20:d1:
         b8:12:69:ce:b0:54:88:e8:5b:dd:ca:16:82:1c:22:ca:e4:1e:
         62:20:7f:b7:61:66:05:c9:5a:10:24:32:fd:81:3a:77:ac:ac:
         f3:c5:af:9f:2b:2a:60:e0:42:bc:40:e4:44:b0:c3:89:f2:18:
         6f:fa:93:c9:fe:aa:35:6b:66:b2:46:2b:26:6b:c6:ec:9f:42:
         74:3c:32:8e:84:07:f8:51:ce:ab:bd:4c:c1:59:36:e1:80:b7:
         83:6f:31:a7:af:b5:a8:c2:8f:4f:1f:b1:96:62:e6:7c:ea:c9:
         b1:19:47:82:5f:89:71:27:36:34:7d:b2:3d:db:b3:df:0e:06:
         23:14:ec:6b:9d:9b:75:6f:c0:3a:67:a9:5a:3e:f7:c5:19:cd:
         11:4b:84:6b:a4:ea:6c:2b:d4:f2:d8:b2:02:85:6c:ce:89:56:
         8e:5d:8b:75:73:54:a3:6c:aa:49:fd:bd:1e:cf:3f:9f:67:a1:
         33:97:ae:cb:c5:8d:9b:5b:f8:23:c7:3e:62:56:b4:98:84:74:
         dc:5d:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:01:16 2025 by rpki-client