Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
File:                     95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json)
Hash identifier:          RAAh4rCAa++MyYVduQCrLQ8IsAqis62X+Ylx8I4nk0w=
Subject key identifier:   66:41:B4:11:81:43:7D:68:C7:FD:2A:56:9F:CB:44:3E:88:80:54:9F
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Certificate issuer:       /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial:       0195790FCD2A972C7761ABF02028CC86AB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
Manifest number:          77
Signing time:             Sun 09 Mar 2025 04:00:33 +0000
Manifest this update:     Sun 09 Mar 2025 04:00:33 +0000
Manifest next update:     Mon 10 Mar 2025 04:00:33 +0000
Files and hashes:         1: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: 12kgVB6Q1hmkizWQPkYHmMggVKZ8lNGYtZ2BATQTeYc=)
                          2: VPRuREJE-YCpaLhsXMmuU88NcOk.roa (hash: QpfRCNAQqKKaxZZw7ChyCaPP/Ca6vuy0NdiRqmD4MbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Mar 2025 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:79:0f:cd:2a:97:2c:77:61:ab:f0:20:28:cc:86:ab:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
        Validity
            Not Before: Mar  9 04:00:33 2025 GMT
            Not After : Mar 10 04:00:33 2025 GMT
        Subject: CN=6641b41181437d68c7fd2a569fcb443e8880549f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:5b:cb:c8:07:3a:4e:0a:0c:dd:8f:78:4e:
                    f1:ad:10:7c:16:28:f7:7e:61:b8:15:e1:36:5d:87:
                    c9:e1:3f:d2:1a:9b:fb:04:e5:c8:03:4f:e4:be:5b:
                    31:b4:4e:50:79:4f:02:df:b8:58:a5:58:5b:54:af:
                    af:b0:a2:f5:45:fb:53:57:8c:b0:c2:87:fe:38:96:
                    a7:05:06:02:63:43:b9:9f:d1:6c:59:45:20:28:60:
                    8e:28:0b:6e:fa:8f:42:aa:7f:8f:8f:13:9c:b0:92:
                    16:bd:a7:8e:a5:b1:91:10:86:65:7e:c8:eb:86:be:
                    7d:a6:d4:f1:26:6e:ed:26:b9:1e:b2:f5:7c:fe:c0:
                    3f:06:c7:7d:89:8c:ae:e2:66:b0:97:35:4f:4b:f8:
                    64:2a:b3:32:3c:f9:cc:7c:b2:31:f4:1c:ce:68:99:
                    46:4b:48:7e:a7:17:64:8d:0e:cc:44:0c:97:e2:f4:
                    99:b3:76:fa:cb:ea:c3:33:d4:81:40:20:35:7d:5c:
                    a1:f4:89:80:1e:05:13:aa:95:16:48:6e:2e:1d:61:
                    55:da:2c:db:82:d9:b0:c2:57:c1:fc:af:5e:81:52:
                    79:6f:d7:81:6d:fd:1b:2e:94:4b:bd:74:e4:52:52:
                    f4:94:60:6c:1f:2a:59:b5:57:60:fa:f9:3a:0e:61:
                    2e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:41:B4:11:81:43:7D:68:C7:FD:2A:56:9F:CB:44:3E:88:80:54:9F
            X509v3 Authority Key Identifier:
                keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:48:90:57:0b:9d:15:14:1c:76:e3:7a:7e:99:02:4f:c5:0c:
         6b:10:cc:f1:bc:7a:ce:d3:db:9e:2f:dc:43:14:24:3c:8a:b1:
         e9:a2:7c:2b:03:68:f4:92:02:c5:9a:d9:dd:2b:3d:d8:d7:c1:
         d0:09:39:5b:08:20:fe:a9:3c:6e:2f:f1:c6:6d:3c:b8:96:1a:
         de:a4:c0:f5:a5:4d:2c:c9:66:e6:f7:47:9e:a5:10:f8:6f:e8:
         ec:14:11:c7:21:41:2c:02:6e:cf:f2:64:f8:7e:f3:21:96:87:
         25:2f:18:e5:5e:88:09:8d:de:20:d6:29:ae:2f:5a:43:f6:31:
         6f:69:08:02:8a:61:c0:01:9b:3f:a0:c6:b3:fb:55:55:5c:54:
         98:14:24:d6:d3:4a:0d:c2:f1:fd:cf:b2:a9:8c:a1:0e:47:98:
         7e:96:04:40:14:13:b5:6c:8d:1b:08:50:b1:ee:85:65:07:f2:
         23:89:37:41:92:23:89:6e:b2:47:b1:50:b6:fb:9b:93:0b:72:
         b2:fb:fe:5b:6d:2a:91:f9:7a:7a:2b:ac:6f:2d:1c:9b:b8:b1:
         e4:c9:d0:ff:90:8b:68:45:9f:e5:a6:78:4d:9a:6c:25:54:1b:
         2f:23:55:55:e2:3e:fe:28:93:02:75:15:29:f9:8a:6e:7c:22:
         d6:9a:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:16:46 2025 by rpki-client