Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
File:                     IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json)
Hash identifier:          dTjZRMmmH7dhXOoDjEBCy22I66MKH4KY2M3xcBEC5Sc=
Subject key identifier:   15:F4:20:0F:F2:CB:1E:A1:34:4E:DF:BC:D4:3C:69:9C:AC:32:B1:2A
Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
Certificate issuer:       /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Certificate serial:       01959005F55CCB01A2A3E5B2D23CEBD122A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
Manifest number:          149E
Signing time:             Thu 13 Mar 2025 15:01:04 +0000
Manifest this update:     Thu 13 Mar 2025 15:01:04 +0000
Manifest next update:     Fri 14 Mar 2025 15:01:04 +0000
Files and hashes:         1: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: +/JQmTJOwOYwGHBUF3xpKp+9Mu3jHHHBccEhTjI4CKg=)
                          2: JqGjYzJUHlyPRNKT7Gdae1GdJUA.roa (hash: /ZlOeq2y9fIyqYcQI5TRRc+qHPMMjEQDsJbQfMP47Os=)
                          3: KP1-R8Ozo5sN8i5g7eaE07K0eTQ.roa (hash: mLvAtndHxWdPvRVZIiOq/nwf/VdytfBFv0z3meNar9k=)
                          4: W08HMn4p6kVqze5MDixmPqgVV3Q.roa (hash: jlOVPZJCuEAwn3iEzzJNLFkpo/PRQpHf+dW9CA2qsug=)
                          5: ZaM9jNyw62egtMMXYnGxszrNY3k.roa (hash: IjXCT+wQnlaMHMU5neUWgppwJ+IMB7wimw7ZMxVicdg=)
                          6: cf3WHfeWDYu7TWnELnXzycteCaY.roa (hash: TcxuwVKWwTiShtI0Unrv/gZ/YwHGK8T1H3ocBzBxMZk=)
                          7: fuo8dYdaswIRyEIz4oPsApWqGJc.roa (hash: TgHuzsK6LNwJZxHjJiXaEYIfR/pJeI5Px7YOwniHSmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:05:f5:5c:cb:01:a2:a3:e5:b2:d2:3c:eb:d1:22:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
        Validity
            Not Before: Mar 13 15:01:04 2025 GMT
            Not After : Mar 14 15:01:04 2025 GMT
        Subject: CN=15f4200ff2cb1ea1344edfbcd43c699cac32b12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:ca:5e:9d:0f:24:c0:ae:99:cf:5b:dc:79:
                    73:d9:9e:e1:28:95:e5:ea:c9:c2:e8:f9:47:d3:93:
                    33:e8:41:59:df:d6:fc:9a:63:07:27:bd:36:6f:b6:
                    47:7b:d8:04:c0:15:d4:c5:fd:df:a6:57:2c:31:d9:
                    57:57:0b:49:cd:bf:dc:f6:e3:46:3d:3d:1d:75:7f:
                    12:fc:1b:9f:60:71:13:78:55:91:8a:e1:b0:6c:6e:
                    1d:66:86:80:f0:63:d4:1b:ff:eb:52:39:2a:af:00:
                    65:72:94:b0:e6:2e:ee:75:34:90:17:8e:41:f4:2b:
                    b1:19:5b:05:15:a7:4e:ed:11:8d:40:18:0a:96:0e:
                    f0:cb:58:f0:cd:b2:c9:f9:53:75:af:8b:21:08:8c:
                    c7:5d:95:f9:4c:18:98:7a:68:34:f6:46:69:cb:20:
                    56:7f:da:9e:ec:b1:a8:0f:93:eb:81:a2:16:b6:98:
                    3e:5d:de:63:f3:ec:a0:e2:29:db:8b:de:d8:2c:1b:
                    7d:19:30:0f:55:7b:8c:50:99:06:54:75:fe:58:c1:
                    c8:29:53:e3:8d:cc:6b:78:4b:00:ff:16:13:32:31:
                    46:0d:c0:25:de:02:cc:87:d2:a9:be:28:93:ac:e5:
                    5d:4b:b6:b8:1e:ab:57:f9:14:9d:bf:56:42:f5:a1:
                    4d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F4:20:0F:F2:CB:1E:A1:34:4E:DF:BC:D4:3C:69:9C:AC:32:B1:2A
            X509v3 Authority Key Identifier:
                keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:65:95:d6:3b:b5:6d:ec:de:ef:db:19:47:5f:36:a3:84:9b:
         12:cd:bc:ed:e5:6c:ea:bc:b6:33:d0:ca:22:89:cd:1e:1b:96:
         84:38:a7:7e:15:54:e0:49:65:67:ee:a0:2a:65:83:ce:35:8b:
         65:f4:08:a5:28:93:11:0c:b0:7e:9d:b2:c5:ce:14:5f:e0:c0:
         b8:87:3e:c5:fe:96:c2:21:42:e9:73:a4:90:30:b3:a8:65:50:
         c9:73:36:7d:93:8b:3e:f0:52:24:fd:51:f0:ca:18:0a:dc:ef:
         3c:20:b8:07:d7:59:86:9e:47:d5:71:5c:49:cd:41:52:3e:35:
         c8:ea:a0:a5:f8:f4:d5:bd:52:f9:fc:1e:0a:7b:8c:47:d8:9b:
         85:06:9d:28:0a:d8:21:75:91:86:0a:f1:9c:ec:1f:88:f8:95:
         95:7e:80:3a:e8:6f:68:5c:99:02:ee:f5:2f:b8:86:10:67:6c:
         bf:56:9d:c7:bb:7e:30:5d:fd:26:8c:21:87:e4:4b:61:f0:bc:
         05:61:1b:f5:5f:1c:31:5c:67:21:a2:6e:cc:d5:40:fe:f7:c9:
         ac:49:f4:89:45:23:cc:c3:94:27:79:6c:65:95:95:e3:3b:b7:
         47:cf:46:76:7e:ae:f5:6a:f8:59:79:55:bc:de:55:41:0a:30:
         91:3e:a8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:05 2025 by rpki-client