Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File:                     jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier:          2AWglU45fskxGaqRniNVlbRS1kFM/v19V1vyAvLDaiM=
Subject key identifier:   FB:46:8F:A2:CB:1B:52:12:3D:F5:C7:7D:38:8A:36:8C:78:E1:A0:BC
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer:       /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial:       019510FE04C1F8BA1FAD07AA9A8AEE47587C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number:          0F8A
Signing time:             Sun 16 Feb 2025 23:00:37 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:37 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:37 +0000
Files and hashes:         1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: hxAu9tN452PHlLMYBdXRmYSWPb+KlN4AX/uCHRUuRg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fe:04:c1:f8:ba:1f:ad:07:aa:9a:8a:ee:47:58:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
        Validity
            Not Before: Feb 16 23:00:37 2025 GMT
            Not After : Feb 17 23:00:37 2025 GMT
        Subject: CN=fb468fa2cb1b52123df5c77d388a368c78e1a0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8a:7a:bf:28:cc:64:1f:c3:f5:81:f1:fd:73:
                    58:97:fd:05:c3:98:85:9b:5d:f8:c5:53:c1:31:c3:
                    b0:28:2c:eb:6e:83:5e:e3:d1:10:37:23:bb:5b:2d:
                    2f:09:ff:54:55:47:c4:6c:c4:23:60:8a:ee:5a:d1:
                    5b:23:b1:d6:24:2d:31:a5:aa:17:99:e2:bc:7c:70:
                    2f:e9:a9:dc:ed:a3:49:69:b0:06:4b:47:e2:b3:e8:
                    8d:e7:22:5b:5c:05:d3:b4:b1:1d:7a:5d:ce:f0:b2:
                    7f:cf:ac:a1:c6:2d:2e:9f:d1:1d:33:29:86:40:f4:
                    c5:42:16:c4:61:16:a6:52:92:50:00:1c:c8:e1:da:
                    a6:61:89:13:46:a1:05:ae:54:24:84:e2:11:fd:dc:
                    d2:a2:6e:15:79:2b:5c:6f:24:ae:0a:64:53:c8:65:
                    a1:a3:6d:7f:cf:b9:d4:56:81:a5:57:de:a7:d2:6b:
                    f9:5c:8f:2d:8f:fb:9a:73:96:13:ae:43:ef:88:b5:
                    ee:b0:5a:d4:85:63:ff:3b:28:93:b4:7b:be:b1:bc:
                    3e:2a:2c:2c:5c:d3:aa:4d:73:2f:da:32:09:18:05:
                    be:a3:40:9f:d3:0c:8a:6a:38:a8:85:fa:40:de:84:
                    38:23:68:01:14:6a:fb:0b:46:ff:83:e2:ce:57:99:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:46:8F:A2:CB:1B:52:12:3D:F5:C7:7D:38:8A:36:8C:78:E1:A0:BC
            X509v3 Authority Key Identifier:
                keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f6:a4:9a:70:96:98:97:f4:c4:97:c4:26:b3:dc:0d:50:79:
         ec:b0:19:70:59:e3:20:43:83:47:fe:a9:86:c7:b7:e2:15:2e:
         65:be:8c:bf:dd:bb:51:0d:a4:c1:6b:67:49:29:75:2b:f0:46:
         1b:e2:b5:6b:e6:dd:3c:55:fa:0c:a7:5b:bb:e3:fd:30:18:5d:
         1b:b4:20:82:b3:cd:1b:52:bf:53:39:5a:22:19:82:4f:b2:af:
         75:2a:f9:35:91:f9:b7:4d:cf:80:2f:a3:3b:e5:dc:14:64:4d:
         cf:48:66:67:4c:be:cd:f2:bc:71:f2:ac:1b:a0:75:40:df:df:
         6d:d4:42:ad:e3:1b:a4:96:ba:a6:f0:cd:a9:b5:73:47:12:a3:
         36:e5:44:07:66:f0:44:83:b3:cf:95:eb:4b:2e:34:df:02:c6:
         cf:54:4f:86:fe:30:34:bd:40:3e:0d:c5:e9:67:a5:f5:cf:2c:
         42:f1:58:78:24:6b:7d:51:cc:30:8e:06:96:f9:28:b8:4e:c3:
         60:d2:02:0b:49:13:5b:38:53:2f:27:49:18:7c:fd:9e:d8:b7:
         a5:2d:2a:6d:c7:51:88:d6:18:5e:49:27:2c:47:70:80:17:00:
         f1:8a:57:e0:a4:d6:ef:82:83:6c:86:f1:f7:9d:8e:fc:63:b3:
         0a:60:eb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:31 2025 by rpki-client