Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File:                     0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier:          jE3GjWHO8mxHWF+NKhVNb573gDV0y1mWE7WzYURINTo=
Subject key identifier:   24:7B:13:34:7C:5B:D6:33:00:6E:37:68:7B:BC:8F:CC:FF:11:F9:43
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer:       /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial:       0194064641845FB4B41982F8613B86C32DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number:          0C7D
Signing time:             Fri 27 Dec 2024 04:00:55 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:55 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:55 +0000
Files and hashes:         1: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: 4HmkR+EmJpCkGA5Z4Cpg+197gP/uqzOKmS8G2FtFPlM=)
                          2: 5-ww4QhAnpWMLFKDS113aJ7tDts.roa (hash: naMxMM0wK1HwWVarJ+KbUfx3fa8ZHUpjvaPyqHxS6e8=)
                          3: JFgH0uAFTbVrpQz5zQ_8pwJ0V1Y.roa (hash: P8V1toZtFGQpMdjFvEkRs4/DCGy5DcZx1g0+dmDSKzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:46:41:84:5f:b4:b4:19:82:f8:61:3b:86:c3:2d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
        Validity
            Not Before: Dec 27 04:00:55 2024 GMT
            Not After : Dec 28 04:00:55 2024 GMT
        Subject: CN=247b13347c5bd633006e37687bbc8fccff11f943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:f0:89:32:00:94:fe:5d:db:fc:5a:e8:58:
                    3c:eb:0c:e5:2d:3f:34:85:a1:2c:78:e3:6f:6a:06:
                    8e:70:17:f2:9c:97:5c:e5:8c:0d:8a:e0:0c:b6:b8:
                    7c:06:c6:b6:6a:2c:5a:36:a5:47:27:3c:ca:c4:16:
                    3c:55:eb:73:24:cd:88:55:d8:59:6c:8f:fa:5c:9b:
                    74:cd:80:00:30:e7:2e:b0:88:82:30:73:24:cd:f5:
                    b9:8a:92:56:3f:1a:6d:ed:8b:26:1d:08:11:e8:b5:
                    ab:9c:0e:20:35:20:b4:1e:15:e5:a8:5f:2f:59:39:
                    a8:da:63:2d:76:f2:d3:b4:b7:f4:43:09:7b:77:32:
                    79:dc:0f:59:c1:0e:90:5b:c9:95:db:2b:e6:d2:6b:
                    f5:74:b6:e0:79:ee:57:29:cd:8d:62:7e:f8:9e:f0:
                    69:bf:6e:ab:6b:9f:d8:35:5d:5f:61:38:53:b6:59:
                    51:e8:a0:78:be:54:a7:02:50:19:5d:b2:99:22:3b:
                    45:e7:2f:7c:a5:8b:fd:da:18:19:4e:7b:f2:8e:52:
                    cd:0c:81:81:e3:1c:35:87:87:d4:5d:61:51:5f:e4:
                    ae:11:98:8b:fa:fb:73:0c:42:f1:ba:d3:dd:35:be:
                    7b:64:01:4f:fb:f7:49:f0:53:8d:55:15:b2:5d:fe:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7B:13:34:7C:5B:D6:33:00:6E:37:68:7B:BC:8F:CC:FF:11:F9:43
            X509v3 Authority Key Identifier:
                keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:32:84:59:69:d6:65:fc:17:49:07:81:05:83:a9:6a:f4:dd:
         26:9f:76:8b:ee:e0:22:d1:24:37:a1:21:80:31:ae:d7:82:99:
         94:4e:57:f0:84:e9:76:ee:82:cc:59:81:0f:8b:b3:6a:f0:15:
         15:f7:21:ab:81:53:ea:66:73:c8:7a:9a:92:3b:05:80:7e:84:
         04:c7:f0:e9:26:8e:d5:99:70:6f:c0:14:4c:e5:86:59:f4:7a:
         68:41:cf:5c:8a:61:e6:d5:36:d4:f2:ca:e1:e5:80:a3:7f:69:
         6e:1e:94:ae:50:a5:8f:3a:d2:a8:fa:8d:e7:2e:92:20:e5:c6:
         9b:d0:f2:f7:3a:12:ef:37:ba:e1:fe:45:d2:a8:ea:6c:cd:94:
         1d:13:96:95:7b:cb:81:77:95:a1:a5:77:10:43:d2:34:20:5b:
         2a:f7:2c:e6:73:af:87:e3:ee:50:7f:a4:ae:c3:ac:74:c8:c1:
         2a:b8:68:09:68:18:78:1b:5d:e6:6f:f4:10:fd:d6:3d:15:38:
         3c:bf:c1:c9:f4:65:ec:e1:e4:87:10:49:8d:f6:ec:34:00:b5:
         8e:81:03:62:5a:9c:27:87:7f:ed:00:c6:35:ec:8b:b5:dd:1b:
         97:ed:8a:a8:e0:13:88:e0:2b:79:bc:75:ba:b9:dc:0f:df:a5:
         58:b0:d0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:47:53 2024 by rpki-client on console-fra.rpki-client.org