Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          4ehpPtqNvzAChAx3Zfx8LDbIzGGEEO0bkCHbDwTGuTQ=
Subject key identifier:   DE:8B:62:8A:87:E1:86:5E:65:19:F3:A9:A8:0B:2E:EC:32:EE:1E:D3
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       01960F0D7763A63E5ECA0450631E35BAF94C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          1446
Signing time:             Mon 07 Apr 2025 07:01:02 +0000
Manifest this update:     Mon 07 Apr 2025 07:01:02 +0000
Manifest next update:     Tue 08 Apr 2025 07:01:02 +0000
Files and hashes:         1: HVVJONofo563h9QMYaZ4QxaodCA.roa (hash: yg/TA6SdsD3Id5UMI0b19L1T62Icbt5ojBDi7qobzgc=)
                          2: PQdbtj-hTjSGcw1YwA7CeITkgLw.roa (hash: cm1rujojVVXEcu5OPDSkdm+bErb6x5HaRup4skQmuac=)
                          3: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: 3DQg7iW7cqQu8H6kEBYPT6y1kYiM0iapW12zvJl1pKE=)
                          4: eUHjJwuDj8xNwMB_4iM9TrMswPo.roa (hash: ClkYaKsyUxfoPn59P3GqQQlCdtnOCewBPFKLRNlTbXE=)
                          5: hTXyI46q8ybU3Dz0eS3ayB3HFbg.roa (hash: XI37ysO8Yf94g3nRE6Kdilk8PRdJybt6ja3RqZ8LGfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0f:0d:77:63:a6:3e:5e:ca:04:50:63:1e:35:ba:f9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Apr  7 07:01:02 2025 GMT
            Not After : Apr  8 07:01:02 2025 GMT
        Subject: CN=de8b628a87e1865e6519f3a9a80b2eec32ee1ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:ee:95:32:27:eb:d9:9d:83:6d:44:73:de:
                    ec:0e:77:5f:9e:8f:f2:78:f1:7f:92:d4:df:3b:2f:
                    55:e7:5f:af:eb:3b:8b:05:fc:84:2b:9f:57:50:ac:
                    d6:7a:68:09:2a:58:05:9b:02:a9:78:db:14:9a:fe:
                    c3:c0:e8:64:a2:1d:0a:41:53:af:3a:03:ed:76:18:
                    27:f6:ab:20:f4:17:ba:7e:fe:aa:8c:d1:69:6d:64:
                    ce:20:eb:62:82:72:f6:95:22:ad:33:dc:be:4a:ef:
                    3d:2f:87:ef:67:73:ec:62:9d:1c:6d:c4:af:04:49:
                    31:0e:5e:ca:91:fb:bc:70:c4:b6:5a:b0:bb:04:15:
                    bb:12:d3:ad:df:ce:f2:7c:18:3e:8c:61:fd:d4:8f:
                    c3:5d:00:8b:21:98:6f:1a:10:ff:49:e2:9f:9f:46:
                    f9:63:fb:56:87:e4:1f:24:3b:6a:05:ac:f1:61:49:
                    35:4f:2c:9d:28:22:63:c0:56:fd:44:98:fa:5a:e2:
                    c8:08:b7:1b:52:8c:29:09:1b:d6:58:7b:fe:5b:70:
                    65:f2:5f:a4:f0:69:43:99:fc:f4:c9:c1:37:bd:e6:
                    67:65:77:27:e8:39:2c:85:5d:5f:91:df:55:0a:0e:
                    6f:eb:7b:11:96:f3:7d:52:43:27:b7:26:78:1a:f8:
                    65:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8B:62:8A:87:E1:86:5E:65:19:F3:A9:A8:0B:2E:EC:32:EE:1E:D3
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:18:79:88:0d:43:97:24:9f:c5:95:bd:bd:35:71:fd:05:8c:
         13:8c:27:97:c8:68:30:bd:18:72:19:8b:45:eb:b0:c9:02:37:
         22:b9:84:87:22:73:ad:a9:83:31:14:85:b9:4c:e7:00:77:6f:
         13:45:9a:c0:88:18:27:4d:ef:80:57:47:8e:da:92:c9:87:2c:
         46:4e:ec:bd:4c:ef:b1:a1:d4:9b:92:95:a1:c1:d1:51:cf:da:
         f8:c0:a2:06:06:ad:3a:7b:3e:80:a8:23:94:5b:94:0d:d3:db:
         57:59:84:40:3c:74:3f:57:96:2e:f4:40:9f:05:73:66:79:12:
         66:4f:b9:4f:c7:b9:f1:ec:18:3b:ad:af:3c:4f:46:b8:ec:cd:
         b7:86:ec:9e:b1:d9:66:81:59:c7:10:ab:cf:70:19:be:d5:66:
         83:6f:9b:92:f1:95:e2:d4:a8:8c:d9:cf:b2:5c:c4:31:c6:c5:
         78:df:22:44:de:72:85:e0:76:90:c9:ee:4f:a6:f2:da:ef:f8:
         53:72:a9:1a:68:6b:85:d5:4e:7f:ca:04:9a:c9:51:44:34:ad:
         ac:a2:9d:f5:d4:6f:45:8c:aa:72:16:dd:a0:c6:6d:4f:ce:5e:
         94:51:c8:7f:4d:01:94:b0:08:e2:05:06:b8:16:39:5b:9e:24:
         21:eb:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:30:30 2025 by rpki-client