Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
File:                     mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft (raw, json)
Hash identifier:          gCjMOrfkCA6t1Shjp5WpQnPKZn9kFN2B99JZVXChfcM=
Subject key identifier:   27:3F:F9:57:B1:BC:31:02:C3:D0:67:9D:A9:D4:B6:1A:4E:9D:C0:BF
Authority key identifier: 9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9
Certificate issuer:       /CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
Certificate serial:       0195903D04925E1EB89ACFB93C036033EE78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
Manifest number:          0A84
Signing time:             Thu 13 Mar 2025 16:01:12 +0000
Manifest this update:     Thu 13 Mar 2025 16:01:12 +0000
Manifest next update:     Fri 14 Mar 2025 16:01:12 +0000
Files and hashes:         1: mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl (hash: sLMJ2yMq1XDT1ZIlXvsBQy6fqbLPnTgT8SmXMnyWCKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:3d:04:92:5e:1e:b8:9a:cf:b9:3c:03:60:33:ee:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab571b69af85650affedcefe57d2a73fd6e6ca9
        Validity
            Not Before: Mar 13 16:01:12 2025 GMT
            Not After : Mar 14 16:01:12 2025 GMT
        Subject: CN=273ff957b1bc3102c3d0679da9d4b61a4e9dc0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:9d:37:51:ed:c3:d9:ac:8a:2a:4f:f3:3b:
                    d2:1e:13:bd:19:ed:e5:f8:56:60:f5:65:68:a2:e7:
                    d2:81:38:4e:93:a4:bb:d6:5f:5d:99:9a:78:5d:e7:
                    58:ce:b1:51:b0:8b:1f:79:c8:7d:07:48:4a:d9:b7:
                    37:ab:fb:0b:6f:78:37:21:5b:dc:eb:c7:cf:22:e3:
                    f1:d5:52:10:43:09:f2:04:ed:03:1a:6f:d0:29:33:
                    96:68:cf:81:1d:ca:97:e2:7b:3e:51:d2:6c:13:45:
                    10:f6:b9:eb:e7:62:f9:0a:46:5a:8e:8b:3b:8c:3e:
                    8b:88:fa:bb:be:39:27:e4:92:b2:3f:7d:07:31:12:
                    53:7c:6c:cc:4c:14:32:6e:fe:b8:9d:ba:37:a6:d6:
                    7d:23:88:bb:e4:fa:cf:2a:83:68:76:b1:63:8d:68:
                    8b:17:bc:f0:1a:48:f5:ae:06:1e:e1:f9:ec:0f:bc:
                    78:b8:e5:98:43:84:a7:a4:7d:f9:11:fb:e3:a3:27:
                    b2:7f:24:71:e6:2c:d4:59:94:8c:39:99:3a:79:c7:
                    24:c6:69:25:38:6a:ba:47:b0:7f:79:3f:83:82:32:
                    99:75:c0:32:33:f4:95:35:a9:06:b7:82:4a:68:b5:
                    8e:53:0b:6e:39:e4:ad:b3:5f:f9:1e:79:84:3a:77:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3F:F9:57:B1:BC:31:02:C3:D0:67:9D:A9:D4:B6:1A:4E:9D:C0:BF
            X509v3 Authority Key Identifier:
                keyid:9A:B5:71:B6:9A:F8:56:50:AF:FE:DC:EF:E5:7D:2A:73:FD:6E:6C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrVxtpr4VlCv_tzv5X0qc_1ubKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fc251e-259c-47f5-ae30-3724535ecc1a/1/mrVxtpr4VlCv_tzv5X0qc_1ubKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:12:87:14:77:a8:2a:8e:f3:81:b1:55:a6:f6:c0:94:70:10:
         03:7b:c7:e1:fc:06:8e:b5:c9:6b:8a:37:9b:2a:7d:69:1e:0f:
         99:0a:5a:a5:68:7f:70:3e:11:a7:b7:67:ec:b8:a9:ff:ab:b0:
         ca:7b:a7:1c:eb:b2:bf:4b:0d:bd:6e:e6:2b:0e:c9:7c:64:fc:
         21:8e:39:4b:39:f8:92:72:bb:23:4f:0a:bf:fd:93:35:db:d2:
         75:70:57:c5:9d:3c:0e:55:94:33:17:25:a3:27:ab:de:aa:0a:
         5f:f1:4b:6a:c4:54:10:c4:f5:40:fa:46:29:e7:4d:18:02:ed:
         6b:f2:03:07:ee:c3:9b:ec:8e:23:e7:d8:18:99:ba:b8:b4:e2:
         75:82:d1:fd:7a:bb:11:16:94:ad:4e:b4:69:49:26:7a:b8:bf:
         29:6c:38:9b:0d:42:e1:29:70:fe:40:59:cc:3d:d1:e5:5a:8b:
         3b:e6:49:15:02:48:25:13:a0:5b:be:f6:a5:ba:a1:0d:cf:74:
         8f:12:ff:50:6e:34:4f:b3:16:89:f3:b5:48:af:21:6b:0f:ac:
         f3:36:7d:76:4f:b1:dc:4d:14:f2:64:6e:39:9c:4d:96:07:ea:
         26:5c:0b:46:c8:e3:f2:15:9a:f9:aa:1a:99:fa:17:e7:80:cd:
         fd:d2:6a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQPQSSXh64ms+5PANgM+54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjU3MWI2OWFmODU2NTBhZmZlZGNlZmU1N2QyYTczZmQ2
ZTZjYTkwHhcNMjUwMzEzMTYwMTEyWhcNMjUwMzE0MTYwMTEyWjAzMTEwLwYDVQQD
EygyNzNmZjk1N2IxYmMzMTAyYzNkMDY3OWRhOWQ0YjYxYTRlOWRjMGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBWdN1Htw9msiipP8zvSHhO9Ge3l
+FZg9WVooufSgThOk6S71l9dmZp4XedYzrFRsIsfech9B0hK2bc3q/sLb3g3IVvc
68fPIuPx1VIQQwnyBO0DGm/QKTOWaM+BHcqX4ns+UdJsE0UQ9rnr52L5CkZajos7
jD6LiPq7vjkn5JKyP30HMRJTfGzMTBQybv64nbo3ptZ9I4i75PrPKoNodrFjjWiL
F7zwGkj1rgYe4fnsD7x4uOWYQ4SnpH35EfvjoyeyfyRx5izUWZSMOZk6ecckxmkl
OGq6R7B/eT+DgjKZdcAyM/SVNakGt4JKaLWOUwtuOeSts1/5HnmEOndakwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCc/+VexvDECw9BnnanUthpOncC/MB8GA1UdIwQY
MBaAFJq1cbaa+FZQr/7c7+V9KnP9bmypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAt
MzcyNDUzNWVjYzFhLzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mYzI1MWUtMjU5Yy00N2Y1LWFlMzAtMzcyNDUzNWVjYzFh
LzEvbXJWeHRwcjRWbEN2X3R6djVYMHFjXzF1YktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRKHFHeo
Ko7zgbFVpvbAlHAQA3vH4fwGjrXJa4o3myp9aR4PmQpapWh/cD4Rp7dn7Lip/6uw
ynunHOuyv0sNvW7mKw7JfGT8IY45Szn4knK7I08Kv/2TNdvSdXBXxZ08DlWUMxcl
oyer3qoKX/FLasRUEMT1QPpGKedNGALta/IDB+7Dm+yOI+fYGJm6uLTidYLR/Xq7
ERaUrU60aUkmeri/KWw4mw1C4Slw/kBZzD3R5VqLO+ZJFQJIJROgW772pbqhDc90
jxL/UG40T7MWifO1SK8haw+s8zZ9dk+x3E0U8mRuOZxNlgfqJlwLRsjj8hWa+aoa
mfoX54DN/dJqmg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:21 2025 by rpki-client