Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          XKAz56WPAhjsc+lZ0ZBHwB1sTldcYZU1fcGu/h3WLrs=
Subject key identifier:   59:F1:93:68:71:FD:DE:40:3F:64:8F:D7:EC:A8:6D:2B:28:38:D0:16
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       01946E8F678FA51404E79735F30E801D49EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          11F5
Signing time:             Thu 16 Jan 2025 10:01:19 +0000
Manifest this update:     Thu 16 Jan 2025 10:01:19 +0000
Manifest next update:     Fri 17 Jan 2025 10:01:19 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: +YhWC9O3/PUX3dxvFnCcmPAxrUym5RWvvt/6Co4LDp8=)
                          2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=)
                          3: Hzds528Tcf94jO1Zeb2KN2vDYd0.roa (hash: rE5fdWY1nAX/lcPA1uobJyvYvLRyY7jbxJyC3np6MSc=)
                          4: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=)
                          5: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Jan 2025 09:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:6e:8f:67:8f:a5:14:04:e7:97:35:f3:0e:80:1d:49:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Jan 16 10:01:19 2025 GMT
            Not After : Jan 17 10:01:19 2025 GMT
        Subject: CN=59f1936871fdde403f648fd7eca86d2b2838d016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:da:8e:73:e8:6d:ba:d9:f9:84:f2:5f:60:
                    f4:3b:8b:fb:ae:2e:ec:5a:57:f9:b8:df:04:9c:b7:
                    16:97:0a:68:21:85:a8:07:7e:a0:a8:37:f7:ce:d7:
                    83:68:cb:7b:64:c9:74:a4:e3:e3:0f:96:82:18:76:
                    10:4a:5f:f9:60:8c:fd:7a:f5:2c:78:70:a9:ed:d7:
                    a8:50:4d:0b:fa:cd:b0:eb:12:6f:4c:61:98:aa:81:
                    7a:ea:f8:30:01:f0:af:56:7f:7b:e6:fa:7d:a4:2e:
                    f8:15:f3:49:71:40:57:7d:50:61:78:8e:59:65:c8:
                    d9:26:a0:83:a2:22:ee:78:6b:90:a9:74:08:f0:4d:
                    30:57:5f:d2:36:eb:33:98:b2:be:a0:3b:38:7e:58:
                    64:be:0d:5f:53:f0:57:f5:b0:f9:3b:d6:32:e8:fa:
                    87:ee:e9:aa:c6:cf:d4:5e:3f:2b:4e:ff:47:87:a0:
                    ed:42:69:6b:3f:b4:3b:d1:6b:4d:4b:55:c5:b3:1d:
                    26:f2:10:00:94:cc:f1:c9:0f:15:b0:06:c3:b7:26:
                    65:c4:e0:a5:99:e7:21:15:8d:23:c0:4e:7d:14:6c:
                    8f:7c:d8:a1:d7:08:11:8a:64:c4:4d:9a:7c:1c:cb:
                    bd:e5:ee:65:5b:4d:32:66:b3:ff:f5:57:85:09:c0:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F1:93:68:71:FD:DE:40:3F:64:8F:D7:EC:A8:6D:2B:28:38:D0:16
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:43:52:2c:55:d9:21:5a:7f:4a:2b:c5:37:0e:12:4c:be:7c:
         ca:bf:00:36:a1:67:de:b7:69:e1:55:d3:c4:ca:95:c7:40:31:
         70:84:88:56:bd:ce:7e:e9:b5:0b:6f:fa:bb:3f:5c:85:2f:28:
         ea:45:90:26:cd:e9:08:ce:a4:e4:0d:10:af:c8:ab:66:6c:29:
         cb:de:7c:d0:d9:95:cd:2f:f7:4f:cb:26:11:c6:74:b9:07:92:
         4a:c2:e0:23:82:cd:04:1a:be:d5:e4:75:c0:ad:e3:7c:d0:e5:
         32:07:d9:61:41:a5:fc:05:c7:64:04:10:70:cc:e0:aa:98:47:
         1a:82:91:e0:e3:a4:f5:90:72:96:5b:fb:31:86:73:9f:64:dc:
         c0:75:6a:a6:94:37:34:12:cb:69:7f:78:ea:1a:d7:15:d6:0d:
         14:45:c4:85:f2:14:99:35:4b:24:a9:01:32:37:e9:9b:cc:07:
         5b:d1:f4:b9:48:e6:ee:12:32:71:c6:8c:a8:e1:89:e5:d8:e7:
         cc:07:66:e0:8a:7b:de:f2:35:46:f8:93:b0:40:2f:d3:ae:36:
         81:c2:38:18:05:41:db:fc:a3:13:bd:f7:e3:a0:cf:a0:c9:98:
         cc:cc:65:29:77:03:62:88:c0:09:37:f4:15:a3:a3:c0:0a:5a:
         e9:6a:4a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 16 14:04:55 2025 by rpki-client on console-ams.rpki-client.org