Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
File:                     uRnpYSLyg4FcGlb-zDSUR6KInNk.mft (raw, json)
Hash identifier:          +QJAQU0NS0svjwiF3Y+27lLEqFPA/4etKUGJVHq3IiU=
Subject key identifier:   75:37:FE:60:27:9F:76:42:C7:27:0D:1B:D8:55:2C:B8:C3:19:0B:22
Authority key identifier: B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
Certificate issuer:       /CN=b919e96122f283815c1a56fecc349447a2889cd9
Certificate serial:       0194C4D0E271FFD059B30E330231FF37EE53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
Manifest number:          0EE6
Signing time:             Sun 02 Feb 2025 04:00:11 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:11 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:11 +0000
Files and hashes:         1: 1-MaedZu_m2J3pWIOqbXmZ-5pEX0.roa (hash: dPci77SNKVZK5CdTXGzc0O0bUg3hSGh13BoBG3kcUXI=)
                          2: uRnpYSLyg4FcGlb-zDSUR6KInNk.crl (hash: RT1YFH/jnZGywNDy6dNKdp20ZL+Dn7blMoFVLcf30lE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d0:e2:71:ff:d0:59:b3:0e:33:02:31:ff:37:ee:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b919e96122f283815c1a56fecc349447a2889cd9
        Validity
            Not Before: Feb  2 04:00:11 2025 GMT
            Not After : Feb  3 04:00:11 2025 GMT
        Subject: CN=7537fe60279f7642c7270d1bd8552cb8c3190b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:99:b3:c8:35:1f:06:59:82:d1:72:88:e0:
                    b6:81:3a:f8:0e:f0:d4:74:29:58:9d:24:43:8b:80:
                    4b:0d:1c:20:ed:2b:ef:08:a3:59:96:f7:d7:93:17:
                    dd:34:5d:da:32:cb:88:94:45:36:33:98:8d:85:25:
                    94:18:c4:35:90:96:4c:5e:05:f3:d1:db:a9:0f:42:
                    97:76:48:c1:3a:47:06:a5:24:05:bf:66:64:de:22:
                    4a:2c:f2:22:9f:4b:de:f2:69:13:9a:01:eb:c8:a1:
                    41:f9:14:4c:e0:be:d8:14:ae:4a:56:75:c3:56:b9:
                    ae:db:dc:be:67:52:fe:9b:d5:ee:9f:8e:95:5f:2c:
                    42:02:1f:98:cf:a5:3d:c0:40:c8:e8:52:72:23:f8:
                    54:3b:c9:79:31:3e:87:bb:94:16:16:b5:cc:0b:5c:
                    b0:f4:64:89:e9:84:40:12:ab:8e:ce:87:47:c9:b6:
                    44:8e:63:b8:88:bc:e8:f3:f8:6e:8c:59:cd:1f:51:
                    1a:f5:40:39:d8:a2:1f:e7:0c:84:e5:44:bb:f0:10:
                    ac:89:a8:88:c4:f6:a6:88:2a:72:24:a8:f8:d7:04:
                    7e:49:c4:bf:08:1b:95:87:50:17:c0:77:20:fc:40:
                    2f:54:b9:21:78:3f:a5:ca:11:6f:34:6a:79:64:ad:
                    cc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:37:FE:60:27:9F:76:42:C7:27:0D:1B:D8:55:2C:B8:C3:19:0B:22
            X509v3 Authority Key Identifier:
                keyid:B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:14:a8:af:5c:09:b2:c9:1c:e9:2b:30:ac:30:74:00:ff:12:
         dc:e4:40:a9:92:96:4f:12:e6:9d:5c:39:a7:81:ed:e1:a1:84:
         7c:1c:f5:fa:d3:45:df:fa:71:69:4f:35:73:27:d9:55:68:d5:
         8a:19:50:05:06:1a:f0:16:bc:57:65:40:b5:dd:31:b3:0c:83:
         c8:11:c4:95:64:fd:37:4e:73:84:e5:18:37:f7:e4:a3:43:58:
         a3:e1:55:b2:02:73:92:9d:7a:70:4c:60:22:59:72:13:d5:88:
         ce:3c:07:f4:60:fe:6e:f6:27:22:90:e3:fa:b6:2b:31:04:1d:
         d6:98:69:02:ee:fe:5a:a0:19:3c:94:a5:77:68:25:67:48:9b:
         13:37:13:20:af:95:b5:41:e6:ac:51:df:6a:8e:5e:31:61:81:
         85:6a:19:c3:ef:c5:0c:17:7a:9b:c4:0f:b2:7c:fc:ba:d2:27:
         cc:2f:78:92:ab:c9:a5:18:73:e2:42:da:55:af:6a:be:dd:11:
         5d:cb:ce:45:12:cf:b3:a0:a1:75:f3:3a:78:df:76:57:f2:56:
         96:e5:4a:42:c1:b4:55:e0:cf:0e:3c:25:25:a9:dc:d1:d3:1a:
         c0:a6:32:ec:1f:43:f3:55:b5:d2:62:67:4e:f9:5b:98:8c:55:
         34:16:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:54 2025 by rpki-client