Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File:                     QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier:          06JrUqzRi0JIDaBYWvpOtNNNnvx5qzFm7Bo15M8uOQo=
Subject key identifier:   62:76:FD:DD:C0:E1:23:56:EB:AC:BE:41:27:0A:4B:F7:A6:1A:88:F9
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer:       /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial:       019510C7A31A2D7F7443E4459B4944AB03FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number:          0E51
Signing time:             Sun 16 Feb 2025 22:01:13 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:13 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:13 +0000
Files and hashes:         1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: zLEvUDNNlz8RW6Xg40TxM50TbRPHrsmejNz5y1YK36w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:a3:1a:2d:7f:74:43:e4:45:9b:49:44:ab:03:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
        Validity
            Not Before: Feb 16 22:01:13 2025 GMT
            Not After : Feb 17 22:01:13 2025 GMT
        Subject: CN=6276fdddc0e12356ebacbe41270a4bf7a61a88f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:de:96:7c:0a:41:92:db:0a:8a:31:34:1d:87:
                    36:78:d2:82:8c:89:f9:24:f5:8b:3b:3d:46:01:48:
                    c7:17:96:45:38:33:d0:1a:23:f6:8c:21:d0:db:85:
                    e1:36:33:af:61:f3:eb:4d:9f:50:1c:4d:b4:6d:e0:
                    fa:f2:03:2d:9b:f1:ef:8c:81:b1:08:ea:7a:17:94:
                    32:58:bf:e0:a8:6b:3d:73:e8:cb:0f:1f:68:39:6b:
                    03:7e:56:7d:c2:b7:c2:c9:ff:67:20:db:3b:d6:3e:
                    1c:a0:17:ee:97:68:15:11:5f:3a:f1:f9:37:ce:1b:
                    a6:c0:5f:e3:dd:25:fc:ed:ac:ca:2e:c2:ea:3a:46:
                    36:13:68:9a:d5:f9:81:9b:d5:cb:d5:4f:f6:6a:8b:
                    de:d7:a3:83:5c:e7:ca:66:58:c1:46:4d:fd:32:f8:
                    59:2d:b5:0a:a4:59:59:cc:6c:af:0a:79:89:ca:d0:
                    ae:af:58:26:23:5c:41:86:f7:3c:6e:79:7d:5e:5c:
                    f8:03:01:56:8f:28:43:eb:28:cf:22:b2:d0:17:9a:
                    97:3b:69:dd:7d:d2:30:11:6c:0c:c3:79:7c:7e:0b:
                    d2:fc:fc:ee:11:68:d6:85:77:ac:81:16:0c:dd:14:
                    bf:48:60:24:de:87:c1:dd:81:01:bd:01:07:14:e7:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:76:FD:DD:C0:E1:23:56:EB:AC:BE:41:27:0A:4B:F7:A6:1A:88:F9
            X509v3 Authority Key Identifier:
                keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:b4:21:31:fa:e4:91:79:24:b2:3c:f0:52:ab:3c:0b:af:
         18:fb:a9:53:8a:07:a9:33:e7:d1:45:9f:1b:24:36:c0:be:19:
         17:e9:23:e0:d2:54:d0:0f:e4:5c:bf:51:09:61:c6:2c:d3:8e:
         46:63:2d:18:83:fc:8a:d4:b7:92:9c:3f:a3:74:4b:24:b5:22:
         25:be:fe:be:c8:70:0a:53:69:54:fd:2b:c8:29:00:76:bc:79:
         9c:67:e6:da:ed:03:3b:bc:a3:9d:34:2c:08:2c:87:aa:6e:ee:
         27:a3:29:ed:89:4d:c3:05:a3:65:57:26:70:0b:c4:68:f3:1d:
         f2:f7:19:e6:59:88:35:01:4e:8d:0a:b7:e3:24:56:19:a2:15:
         06:db:fb:cf:a3:ac:8c:ac:d9:9c:f2:10:42:92:df:86:86:fe:
         c5:53:68:11:1f:7e:b9:ec:ea:6e:70:a5:f8:b6:bc:70:51:6c:
         ff:9d:01:f0:5f:29:94:85:ee:09:83:e9:47:c3:90:6f:1a:21:
         30:2b:de:65:cd:1d:fa:48:cf:02:8f:f0:e0:12:96:8a:aa:89:
         ed:a5:3c:13:a7:b8:d5:78:80:23:c5:54:e4:36:89:1b:f1:6b:
         84:60:2f:f6:b6:40:58:70:7f:e8:bc:0d:e5:f0:27:fa:1f:9d:
         ff:3b:d6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:22 2025 by rpki-client