Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
File:                     dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json)
Hash identifier:          l8ZjIfaBk+DBhN/dqiZiEz9iIqHRt5Igf/PImen6BUI=
Subject key identifier:   77:9C:62:E7:02:21:4D:09:75:EF:84:EF:CE:B0:19:8F:3E:FD:E9:7A
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Certificate issuer:       /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial:       019510C7E36EA947E2BC146980A79516DCAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
Manifest number:          1459
Signing time:             Sun 16 Feb 2025 22:01:30 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:30 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:30 +0000
Files and hashes:         1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: kwAhLhqBLPlgdIRli2h8njL3wO01mqs++KRm8nzii7g=)
                          2: kX-VdRHtzW1CfMS8g0O9lVNrN34.roa (hash: 1YTwpLO8F8/c72ElMFw6a0YxOTA0MMlnVtuXBy93WMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:e3:6e:a9:47:e2:bc:14:69:80:a7:95:16:dc:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
        Validity
            Not Before: Feb 16 22:01:30 2025 GMT
            Not After : Feb 17 22:01:30 2025 GMT
        Subject: CN=779c62e702214d0975ef84efceb0198f3efde97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ef:09:ee:74:c9:26:00:e7:7f:8a:22:1b:9b:
                    d5:cd:1f:33:76:b7:f3:15:a2:d3:7b:d5:86:0e:22:
                    14:84:73:0b:f7:b2:18:73:9c:3f:37:0c:3f:3d:aa:
                    b3:2d:4f:2d:9e:fc:e1:66:a2:4b:56:77:d3:8f:a1:
                    e0:0a:cb:0a:4f:09:37:90:97:cf:06:9e:71:4d:e9:
                    1b:df:29:7e:c3:fb:98:09:71:6e:54:e1:8a:40:0c:
                    2a:73:3f:47:b2:b1:fb:74:80:eb:f8:5f:97:0d:ee:
                    02:4b:c4:db:bc:2e:ac:59:94:83:db:b8:58:b7:7a:
                    3c:8c:b2:15:47:b8:69:e7:8b:7f:1c:8d:e2:6b:78:
                    8c:af:42:2e:35:b3:8f:6f:ed:2f:84:2c:fb:1f:7b:
                    71:4f:1e:80:38:25:d4:ff:fe:d2:ee:fd:12:51:ce:
                    f3:ec:74:cd:5a:1a:ea:8a:92:ee:cd:41:2f:88:f9:
                    f0:dc:10:c3:b2:52:9b:c4:c4:82:87:cd:f4:c3:45:
                    dc:a1:d3:c6:69:85:c9:af:39:a7:3f:5f:ee:d8:f2:
                    82:41:72:f5:e4:91:81:91:f2:ec:e1:73:42:40:70:
                    d0:21:46:5b:8e:d6:09:cf:4a:7a:72:d5:3b:bc:f9:
                    1c:f7:49:c0:d3:ea:b5:38:c3:61:b0:13:78:ba:cd:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9C:62:E7:02:21:4D:09:75:EF:84:EF:CE:B0:19:8F:3E:FD:E9:7A
            X509v3 Authority Key Identifier:
                keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:4a:c1:a0:72:fd:cc:c1:c5:6d:c6:ce:88:dd:27:bc:4e:e8:
         f5:2d:0b:5e:58:29:5d:d1:15:b4:8a:5e:6e:dd:7a:6a:41:9f:
         2f:7b:86:fb:fa:95:64:7b:48:17:ab:1f:16:89:29:b8:b9:1f:
         7c:8e:cf:10:a5:8b:d1:af:a7:e1:2a:3c:83:74:51:43:57:6f:
         9d:b9:2a:82:51:6a:f1:ea:d5:b8:96:01:79:52:bf:d5:9f:ed:
         e8:83:53:65:94:51:7c:40:e5:35:e7:ba:cb:88:65:b2:58:44:
         6b:cb:4d:a7:ac:76:ff:b6:8b:6b:d6:cd:fa:2b:eb:29:33:ad:
         a7:07:33:cc:0b:8c:8d:d3:24:fe:b9:86:a9:3d:3c:81:23:90:
         4f:ba:47:8a:e7:ad:94:59:91:32:26:05:4a:c3:db:9d:b6:bf:
         d5:80:1a:e8:c3:c9:1f:18:94:06:00:5d:e3:68:d7:82:25:7b:
         82:52:c6:44:eb:b8:59:ce:08:e7:92:5d:39:56:09:7f:95:0e:
         60:78:d1:ea:cf:c3:a1:44:ca:1c:9d:71:d3:d4:2b:39:1b:1d:
         dc:80:70:0d:36:f1:d4:2a:3d:3d:f2:5e:01:a9:a4:60:7b:db:
         06:2b:5c:fb:fe:cd:a5:13:9d:4b:17:ab:28:ee:ed:ee:e1:15:
         01:36:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:33 2025 by rpki-client