Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
File:                     SRrcI2V17CPX67-9wgQ5kYAmvvw.mft (raw, json)
Hash identifier:          cnnHAjvdBUd3ySdMiIW5/H5xgH9buzMdoz8IkwOO+Mw=
Subject key identifier:   E6:C7:F4:FC:5B:92:59:7B:14:E2:11:B0:12:1B:D8:F9:5B:46:6D:67
Authority key identifier: 49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
Certificate issuer:       /CN=491adc236575ec23d7ebbfbdc20439918026befc
Certificate serial:       019510C6E0C644A72C6EE6B04F39BEE3D88B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
Manifest number:          117D
Signing time:             Sun 16 Feb 2025 22:00:23 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:23 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:23 +0000
Files and hashes:         1: SRrcI2V17CPX67-9wgQ5kYAmvvw.crl (hash: KhDDgiHs6JapzHaY/9f5xXGkqzfgVYR8oKdzZWDYIWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:e0:c6:44:a7:2c:6e:e6:b0:4f:39:be:e3:d8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491adc236575ec23d7ebbfbdc20439918026befc
        Validity
            Not Before: Feb 16 22:00:23 2025 GMT
            Not After : Feb 17 22:00:23 2025 GMT
        Subject: CN=e6c7f4fc5b92597b14e211b0121bd8f95b466d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:64:d8:49:84:97:c9:d9:88:3b:44:eb:c0:
                    0e:e3:19:b2:3a:db:55:bc:f7:f9:92:07:bc:6a:3d:
                    de:95:f5:21:84:5b:fb:79:79:bd:d1:fe:a6:11:61:
                    df:75:ad:2d:a3:a2:13:20:16:47:fe:c1:dd:e5:d7:
                    63:69:da:87:8a:fa:29:e8:4e:9f:06:72:1e:76:e3:
                    d3:0a:56:19:df:06:40:d2:dc:2f:30:23:2c:e8:f7:
                    dc:d7:70:9c:36:63:1b:4d:25:bb:e9:fe:db:44:3c:
                    00:99:df:87:f4:a5:f1:c3:56:d3:5a:29:fd:fb:56:
                    93:22:1a:80:e0:ee:f8:11:61:13:f2:2d:67:10:8e:
                    84:da:35:28:56:3f:3d:3b:3f:57:59:ca:29:66:87:
                    c3:5e:4d:d7:b1:ac:27:1d:b9:55:6b:e3:c4:c8:47:
                    70:04:ed:61:e2:97:c6:41:c2:b4:4f:0a:04:11:72:
                    1c:28:bd:13:fd:aa:8a:57:fd:b8:16:7c:6b:80:6e:
                    8c:db:30:0c:48:c1:ff:b0:78:67:bd:e3:f6:68:86:
                    08:94:01:73:6b:85:50:3d:1c:18:82:9b:73:99:78:
                    7a:db:0b:5f:23:4f:3d:88:6e:d9:02:53:25:1d:61:
                    7a:71:d3:76:50:0a:3b:f8:4e:26:33:a9:be:43:5b:
                    37:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C7:F4:FC:5B:92:59:7B:14:E2:11:B0:12:1B:D8:F9:5B:46:6D:67
            X509v3 Authority Key Identifier:
                keyid:49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:eb:f0:9a:6a:9f:a0:cd:9f:09:15:7c:0a:3c:b9:69:fe:22:
         5d:7d:b8:0d:bb:b9:e7:da:f6:13:de:8d:4a:7e:63:39:ae:e5:
         4c:12:45:17:0d:c4:0a:52:f1:78:4e:3f:87:26:2e:b3:d8:51:
         ba:e3:0f:4d:43:37:e4:73:33:a9:f7:9c:5e:45:99:23:7c:0f:
         80:98:50:dd:74:6d:11:6e:68:0f:9b:50:90:6d:86:8b:b7:c4:
         9a:01:42:17:e7:56:ec:e2:16:e0:d5:03:fd:0c:ba:15:86:c1:
         a3:a7:59:0a:7c:64:18:41:b1:22:f4:bc:ed:03:ac:b3:f1:ca:
         db:dd:13:90:ae:44:a9:77:a0:fd:f4:d6:b1:76:ed:63:26:f8:
         de:0f:6d:e2:c5:2d:eb:c2:59:31:93:f6:aa:6b:f0:82:c0:03:
         69:91:36:bc:03:bd:2b:9c:e7:72:34:8b:88:f4:0a:c9:88:29:
         42:71:6a:77:34:cd:d3:fd:e1:f1:b2:8e:6a:59:a7:6e:47:bd:
         6a:0d:bd:90:e8:33:4c:63:97:fa:47:38:77:aa:4c:51:40:4d:
         33:a1:dd:0f:f0:fa:88:3d:f8:61:00:0a:e8:af:3e:f4:da:9a:
         99:06:01:4a:64:55:75:8b:c2:8a:bb:f3:64:05:77:fb:73:39:
         04:ec:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:31 2025 by rpki-client