Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
File:                     1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json)
Hash identifier:          g1YepIVGmVeGfK/P9UVRG9Z9RqtR5nP8wIak1I2Yx8Q=
Subject key identifier:   5D:C6:86:59:03:E3:6C:20:54:9E:61:39:92:1B:8D:0B:7E:6D:28:C0
Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
Certificate issuer:       /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Certificate serial:       0194C4D1381EC21528E2E50D70E41AD65256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
Manifest number:          3F
Signing time:             Sun 02 Feb 2025 04:00:33 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:33 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:33 +0000
Files and hashes:         1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: gUm2FWvaWiZK/661HeJhh/Nnh5xc/FjmtTYMufJ3WDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d1:38:1e:c2:15:28:e2:e5:0d:70:e4:1a:d6:52:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
        Validity
            Not Before: Feb  2 04:00:33 2025 GMT
            Not After : Feb  3 04:00:33 2025 GMT
        Subject: CN=5dc6865903e36c20549e6139921b8d0b7e6d28c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:9a:22:1b:ad:95:5d:b1:cf:6f:d1:59:53:
                    75:85:f0:24:10:15:d7:b6:dd:45:ea:af:fa:af:eb:
                    b5:92:e4:0d:a7:72:12:f0:69:ce:21:64:f3:4b:a8:
                    e9:1f:e2:f0:ea:eb:d7:2b:21:41:e0:9d:88:bf:d4:
                    34:cd:cd:07:a3:c5:8b:c5:ea:50:d2:68:6e:70:fd:
                    5f:73:41:aa:72:74:4c:94:5a:17:17:78:db:03:3c:
                    f3:70:dc:94:89:ba:82:f2:91:6d:ef:ca:13:0e:76:
                    3f:25:4a:7a:27:2f:68:ac:29:d7:7b:86:37:03:c1:
                    8d:49:d5:3a:4e:00:86:70:e2:c0:0a:30:82:70:b6:
                    fc:11:bd:90:f6:37:66:06:69:6d:e1:76:7f:05:79:
                    b3:69:0b:84:de:d3:d6:ea:71:dc:52:a1:cf:ee:99:
                    2d:bb:e3:b5:88:5a:1f:82:62:e3:d5:f1:80:83:fe:
                    3e:bb:45:97:bb:2f:16:31:b7:c1:6b:58:bc:7e:80:
                    7c:7e:2e:b0:bc:1d:91:33:98:5a:ba:0f:c0:80:c9:
                    c1:51:18:c0:8f:bc:f9:a0:09:35:a4:57:e4:2c:36:
                    9c:63:3b:d8:5e:03:e2:1f:d5:40:cc:5f:f0:04:e1:
                    af:c8:4f:80:a1:25:c2:ab:f3:01:c6:d7:40:fb:05:
                    c3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C6:86:59:03:E3:6C:20:54:9E:61:39:92:1B:8D:0B:7E:6D:28:C0
            X509v3 Authority Key Identifier:
                keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b6:4b:38:e9:c6:c8:b4:f7:8c:65:a1:f8:a7:6c:90:b8:02:
         46:a4:6e:c7:a5:01:e1:d5:eb:3a:ca:f8:24:d4:5f:02:3f:e2:
         65:30:02:d4:69:36:bd:a0:9e:9d:b7:67:2c:ec:3b:99:63:f3:
         c0:01:b6:24:0b:20:ad:d3:fc:f1:59:14:f3:95:3d:e4:87:e5:
         40:9a:b1:72:c7:4a:28:ac:ed:c8:b4:b2:a2:cd:b0:32:7d:a4:
         39:11:08:92:6c:cc:3f:ff:74:44:4a:d6:47:85:0d:59:1e:7e:
         8b:fe:07:f2:73:46:ee:8c:b8:99:5a:59:28:5f:ce:2a:44:a7:
         be:82:2b:3a:c6:62:71:fe:b7:13:87:b9:c6:93:6b:e5:1d:88:
         a2:64:bc:bb:ab:46:35:1c:04:27:61:d2:f0:f0:52:36:5a:9d:
         f1:d7:29:e7:22:74:b6:83:15:18:e9:72:28:c6:6f:a1:0f:8f:
         13:dc:99:c9:7f:bb:8d:e6:3a:47:37:91:af:ff:13:a7:9f:5a:
         e1:b4:41:3f:78:e6:cb:de:86:4d:f1:3a:5b:5c:63:71:a2:ef:
         96:71:ec:62:5d:37:31:3c:75:ea:d5:7d:32:5d:1f:65:03:3a:
         14:5e:a8:5e:96:41:3d:07:31:73:9e:42:7c:d7:3c:fb:df:df:
         bb:ee:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:21 2025 by rpki-client