Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
File:                     jV7D1aSGjjUxImKnxqqRRDWJPNg.mft (raw, json)
Hash identifier:          BXK3ZpqgU6DBa5JZEtsIvElOW9w5+iHWPqBgwuDzJEU=
Subject key identifier:   A8:5E:00:2E:70:A5:C7:C6:BB:D9:57:30:8C:7E:CC:D6:64:38:6E:19
Authority key identifier: 8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8
Certificate issuer:       /CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
Certificate serial:       019510C6E35C83AF770C3E7471FD65F442B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
Manifest number:          0736
Signing time:             Sun 16 Feb 2025 22:00:24 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:24 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:24 +0000
Files and hashes:         1: jV7D1aSGjjUxImKnxqqRRDWJPNg.crl (hash: nbtpVEeMso5fbvIkCg3oEZhmRiwMTJ5w+crVMXNWAhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c6:e3:5c:83:af:77:0c:3e:74:71:fd:65:f4:42:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
        Validity
            Not Before: Feb 16 22:00:24 2025 GMT
            Not After : Feb 17 22:00:24 2025 GMT
        Subject: CN=a85e002e70a5c7c6bbd957308c7eccd664386e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:34:cd:96:4b:3b:84:44:66:63:36:dc:87:fa:
                    fc:02:38:e6:33:ec:19:d7:58:54:b4:8c:e4:f7:0a:
                    f0:fe:ef:0d:d9:03:14:3b:dc:bf:85:c8:bb:35:d3:
                    d9:be:33:5e:41:83:7b:be:c3:10:b2:df:f6:77:09:
                    f7:9c:ae:bf:f4:57:24:77:c9:ad:30:3d:61:8c:db:
                    f0:b1:c1:af:60:f3:5c:3d:6e:04:3d:2e:34:4f:1d:
                    70:46:c5:19:57:37:3a:2a:26:e6:e1:eb:a7:eb:6e:
                    53:50:d4:c4:e8:ab:e2:41:61:a5:e4:8b:71:40:f4:
                    9e:b2:48:43:e4:72:8a:af:cf:df:c1:11:eb:2b:dc:
                    02:24:d6:c5:d3:0e:63:13:e2:2d:22:68:2a:74:46:
                    8e:f6:8d:b8:8e:be:8c:5c:d7:2b:0c:e9:bf:60:dd:
                    e4:4e:79:c9:ba:f3:59:dc:0f:75:c6:7f:cc:38:c6:
                    a0:59:d5:84:be:32:11:05:11:7f:8f:87:a6:eb:08:
                    8c:64:62:38:80:1b:de:c6:58:16:bf:cb:de:28:b4:
                    4f:bc:00:00:0b:a9:54:82:de:5b:60:76:64:be:47:
                    08:db:8c:6f:fd:fb:a2:d1:8a:8e:a7:bc:0c:a9:76:
                    89:b7:a1:ff:53:de:35:c6:1e:7d:40:92:03:e5:7d:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5E:00:2E:70:A5:C7:C6:BB:D9:57:30:8C:7E:CC:D6:64:38:6E:19
            X509v3 Authority Key Identifier:
                keyid:8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:3e:00:68:e4:51:19:82:f2:0e:14:a6:c8:e2:c0:9f:de:ef:
         42:b6:7c:18:8d:c1:3e:a1:32:22:1c:81:47:18:d5:1f:54:0d:
         eb:d4:4a:f4:b2:73:10:ed:74:ff:7c:0f:15:98:99:15:4c:d9:
         1b:a3:41:72:bf:c1:4c:8d:61:0d:ba:60:34:f7:cf:f2:77:9c:
         ac:86:18:b0:27:e9:89:b6:b9:49:f4:09:31:20:65:f5:3f:e3:
         5b:cf:50:c0:3a:10:02:62:0f:f3:9c:1e:74:a8:4c:76:03:43:
         fa:f9:31:30:89:61:28:3b:52:3d:03:c7:ee:0d:d5:6c:e3:30:
         c6:d1:69:47:04:60:3b:19:f9:4f:05:33:fa:79:36:35:2e:08:
         92:66:a7:13:90:55:63:9e:90:10:e2:40:ce:ae:4e:30:75:73:
         6b:0d:81:df:a2:7f:24:02:c5:74:8a:7b:38:f4:0e:f6:9c:bb:
         e7:69:72:78:9b:6e:d5:30:ff:86:91:f2:53:b7:fc:a8:51:c3:
         e0:7e:38:3a:1a:0f:3e:0a:85:d6:9d:ff:3e:65:79:88:12:ac:
         cd:2a:a7:21:fa:2c:ae:6b:9d:03:f3:ff:cd:49:51:5d:c4:11:
         32:04:82:43:ef:2f:30:e2:9f:b6:41:d5:af:9b:fd:00:e4:1f:
         ee:6d:ac:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:47 2025 by rpki-client