Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
File:                     UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft (raw, json)
Hash identifier:          mOpcTUcjcpnJFDJJO1QDhkQFEW18hsKrso4KTvvE5gk=
Subject key identifier:   B7:03:C8:8F:8D:20:27:8B:90:D4:44:48:5A:4C:32:40:30:48:F7:52
Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
Certificate issuer:       /CN=530841e82aa46d9959fc7811b25795c56cd50608
Certificate serial:       0194C3BE7DC042E084F5BCE3D6D53CBE1FAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
Manifest number:          1411
Signing time:             Sat 01 Feb 2025 23:00:28 +0000
Manifest this update:     Sat 01 Feb 2025 23:00:28 +0000
Manifest next update:     Sun 02 Feb 2025 23:00:28 +0000
Files and hashes:         1: UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl (hash: fzbx+HS6R1PIRj//cUASeklDQ8lS9rl6tR/k6aunO5w=)
                          2: kBzABSrJTYuMHuIB-cAWqOKOwxo.roa (hash: Xo9goahQUE24SfaWYUzhm7qDfthcz3m4/YrZsayav+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:be:7d:c0:42:e0:84:f5:bc:e3:d6:d5:3c:be:1f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608
        Validity
            Not Before: Feb  1 23:00:28 2025 GMT
            Not After : Feb  2 23:00:28 2025 GMT
        Subject: CN=b703c88f8d20278b90d444485a4c32403048f752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:93:cd:ab:87:85:5d:e4:7b:98:1a:62:00:16:
                    cc:52:f2:21:26:96:80:c6:1e:ba:ec:d6:ba:03:03:
                    e4:3c:31:61:09:e7:87:bb:94:30:ef:a3:61:c0:45:
                    fc:2b:3e:52:2d:97:20:ee:24:66:da:d5:37:5f:ab:
                    ef:c9:51:d5:fd:30:30:96:cc:5e:0b:4f:55:e1:b4:
                    4c:25:44:fc:54:df:5c:6e:3b:cd:6b:99:7d:1e:17:
                    3c:1d:f9:06:66:6f:62:30:5d:8b:71:bc:d2:28:6d:
                    e0:cb:f2:ec:44:b4:08:30:cb:8c:41:c9:d0:55:14:
                    75:44:d0:65:32:9d:a8:d8:3d:5e:8a:e1:f7:48:bd:
                    40:86:a5:75:74:f1:da:f0:db:5f:f8:8f:cd:0c:02:
                    28:77:44:09:9d:12:86:d1:97:93:6a:51:0e:66:c0:
                    2e:fb:9e:6f:de:19:03:3e:95:a8:17:09:a6:c2:d3:
                    34:42:e1:0d:47:a7:1a:6b:f0:b6:e5:8d:c5:af:77:
                    cf:22:87:8a:7c:27:96:01:7b:b8:52:4d:81:cb:f9:
                    11:e8:c0:98:dd:a6:6d:db:5d:fa:6b:5d:48:1f:df:
                    b9:b9:6f:e5:3d:23:7d:16:ca:50:f2:e5:96:d7:1c:
                    44:5b:2e:58:e9:17:0f:52:3e:4c:f2:d5:ed:54:32:
                    51:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:03:C8:8F:8D:20:27:8B:90:D4:44:48:5A:4C:32:40:30:48:F7:52
            X509v3 Authority Key Identifier:
                keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e2:b8:a5:6f:91:14:c3:ee:84:42:81:25:4a:f7:6a:9f:47:
         b6:c0:65:24:33:ee:72:66:4a:fc:ca:7b:83:e8:98:dd:03:de:
         da:c1:ee:8b:5e:cb:a2:33:40:9d:03:3c:65:1d:bb:df:42:f5:
         0d:65:63:51:30:be:52:8a:a7:31:b7:66:60:57:8e:6a:a7:83:
         5e:05:d5:74:f1:74:03:c2:c8:ca:e4:4b:e9:33:e3:e3:87:9d:
         e8:7f:0d:37:46:4e:b0:3a:12:fa:69:48:6a:6b:54:91:55:59:
         a2:41:80:ee:c9:2b:86:cc:63:55:34:9d:c4:a0:a5:64:90:f3:
         4d:9b:45:15:c0:70:9d:4c:a2:b7:04:97:22:c4:52:3c:cd:d4:
         e3:cf:ce:93:ba:34:fd:6c:c0:e5:24:f2:7f:62:72:ba:5f:99:
         fe:ae:fb:23:83:89:f6:6b:f9:ce:7e:84:53:b8:fc:b3:92:30:
         87:56:42:61:40:0e:e9:b4:80:7c:bc:0a:36:84:b0:4b:d3:3f:
         29:e3:ca:0e:06:95:85:2b:4d:2f:78:a0:1f:36:78:a4:ed:46:
         5b:36:c6:87:f0:fa:2b:a2:c3:37:46:04:65:f1:4a:26:79:0d:
         f2:35:36:43:a2:00:38:28:ac:c3:13:41:15:8f:7b:4b:16:f2:
         7b:d9:97:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:42 2025 by rpki-client