Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File:                     ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier:          2L2SVPDVwjlFpH6HDRRuqb2Sd3hOlmGL69TvEpnZoGU=
Subject key identifier:   BC:ED:90:0F:15:C9:7A:BC:58:4A:4B:AB:63:6F:95:43:93:6D:2B:2A
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer:       /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial:       019510C7EF6E8EC6FBD10EAA328AE15737AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number:          0C53
Signing time:             Sun 16 Feb 2025 22:01:33 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:33 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:33 +0000
Files and hashes:         1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: jDVr5+wSvmwYrpds9Xv3dFdD+2DhhxnVqynBZyevbKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:ef:6e:8e:c6:fb:d1:0e:aa:32:8a:e1:57:37:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
        Validity
            Not Before: Feb 16 22:01:33 2025 GMT
            Not After : Feb 17 22:01:33 2025 GMT
        Subject: CN=bced900f15c97abc584a4bab636f9543936d2b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:7d:8f:18:54:91:2e:e7:ab:12:0a:18:83:
                    72:59:e7:05:2f:05:08:81:87:84:2a:03:32:4f:1a:
                    e3:e2:a0:f1:ad:48:81:41:4f:f2:42:93:43:5e:14:
                    86:25:21:5b:83:3a:04:35:7a:f4:a3:4b:00:6f:b8:
                    aa:38:5c:10:09:b3:08:59:8e:cb:0d:a7:cc:f3:a3:
                    30:0a:97:89:cf:ca:d6:cf:8f:9a:7a:20:ce:26:bf:
                    16:92:b6:f7:6e:20:2d:a5:56:48:ae:91:5c:ea:37:
                    18:5d:24:a0:66:98:69:6d:ed:7a:4c:37:c0:e1:c7:
                    92:e3:13:cd:56:3e:e1:e9:16:ee:ce:fa:e1:dd:a5:
                    20:cf:d7:86:34:a3:22:eb:e3:dd:28:d8:9f:a3:5e:
                    a7:ca:55:17:24:34:13:56:61:8a:9f:e5:51:f6:82:
                    4e:94:ae:a6:e7:db:1e:eb:da:3d:5d:b0:dd:dd:8a:
                    73:cc:e8:28:aa:4f:10:67:79:db:c6:5a:b5:b8:34:
                    3c:83:67:3c:0f:57:ac:c6:88:a3:22:20:c4:d9:11:
                    ed:11:ea:c9:11:ca:4b:97:0d:6f:c0:10:0c:d9:b4:
                    45:c1:10:a2:bf:fb:25:98:ed:67:ed:ff:63:64:c3:
                    60:a4:1d:cd:05:39:26:75:43:f7:a0:b1:fa:2a:9f:
                    1a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:ED:90:0F:15:C9:7A:BC:58:4A:4B:AB:63:6F:95:43:93:6D:2B:2A
            X509v3 Authority Key Identifier:
                keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:ed:14:f0:7c:9a:71:bb:6b:c8:61:02:cd:70:c8:fa:46:03:
         60:83:24:18:44:42:1d:1e:5b:9d:25:ef:88:73:4f:a3:73:0d:
         40:ca:e5:df:7d:2b:ac:36:4b:3b:d5:eb:c3:13:7a:4a:d8:89:
         6f:b9:ee:f3:52:51:22:73:aa:64:f5:2a:eb:81:62:38:a4:e9:
         fb:55:64:18:40:54:ce:f5:64:b7:61:cd:f2:c4:64:8c:4b:90:
         3a:62:02:73:35:6a:f6:3f:75:94:e9:45:ab:b6:c9:a1:cb:f8:
         95:00:fb:29:dd:9b:b3:2d:ee:e4:34:c4:ee:45:8e:2d:62:59:
         27:74:91:c7:22:b8:90:86:b7:00:0f:94:2a:67:b0:0f:a3:d6:
         44:ce:d3:e1:02:5e:8d:e0:7e:b9:a4:93:85:cf:ea:b3:f6:7e:
         0c:83:5d:d4:34:90:d2:7e:e9:e8:a9:cb:94:8d:a7:7f:ab:f5:
         db:38:06:a8:1d:b4:26:49:d5:47:d6:04:c2:74:58:3d:6b:b1:
         2c:ec:34:ae:65:ba:f8:36:c1:c6:cb:d4:ac:07:e0:52:9c:3d:
         0c:83:88:6a:b7:96:2f:9d:1e:c3:5c:29:f3:10:6f:dc:a3:21:
         8c:54:f9:86:7b:a2:1b:ce:a7:a6:bb:97:58:3c:cc:75:1d:d5:
         33:76:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:38 2025 by rpki-client