Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File:                     uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier:          7v905OibELISfGLuSTQWvPzKluaQBaGr5JEAhNufJwc=
Subject key identifier:   4C:98:B4:41:6F:19:BA:FF:9D:98:A2:D8:C7:B2:D1:C7:77:20:F2:1F
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer:       /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial:       019510FDADAEAA22D54213C9003F0476EF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number:          119D
Signing time:             Sun 16 Feb 2025 23:00:15 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:15 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:15 +0000
Files and hashes:         1: 2Bhbw3leMOOThPESRkMOR1dkKo8.roa (hash: 8BdnwPJfHaRJdOgffZDaE9NFXhulzq329A7S3hKg76Q=)
                          2: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: EA5XdjyOP3HAox5uhNSs7ATnkkCb9GXufYT7RcvZgpw=)
                          3: udj1thQf8POAsC3euXPolxF29Rc.roa (hash: utsXGxz2o3qqGU1Prwq6PnQjBA2bBXJwiwg1ebpMM78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fd:ad:ae:aa:22:d5:42:13:c9:00:3f:04:76:ef:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
        Validity
            Not Before: Feb 16 23:00:15 2025 GMT
            Not After : Feb 17 23:00:15 2025 GMT
        Subject: CN=4c98b4416f19baff9d98a2d8c7b2d1c77720f21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f4:2e:c0:0b:da:0d:24:26:94:7f:9c:47:df:
                    ae:82:ae:49:2a:23:0d:58:91:5d:33:10:67:95:41:
                    dc:71:ad:3b:2d:8c:d0:97:9a:b1:a9:3a:8f:a8:61:
                    10:30:89:58:fd:6b:8e:19:d8:81:95:fa:5d:27:40:
                    00:09:ef:45:2c:86:83:bf:4c:f3:5d:74:9a:a0:a2:
                    a1:2b:c5:83:e9:70:04:1c:71:28:b0:37:8b:60:70:
                    e6:c4:7b:a6:b2:13:2e:28:38:b5:ff:48:42:4f:1f:
                    72:66:8a:52:de:b0:26:fd:70:5a:26:1b:89:49:6b:
                    d9:7f:e4:8f:45:d6:f4:0b:df:ff:6c:b1:cf:a9:43:
                    47:d7:88:5c:06:2f:1e:44:3a:e5:b8:4a:89:ea:24:
                    4d:23:b0:b0:c4:4a:0e:e1:9f:6a:6a:66:bc:7a:65:
                    f2:74:5d:bb:5e:07:05:0c:79:ec:2b:35:25:9e:a1:
                    60:75:b8:ed:db:7d:d6:dc:ea:97:12:02:01:24:20:
                    b2:8d:f3:c2:1b:f5:b7:85:70:35:f1:96:d0:9d:37:
                    47:d7:70:5b:5f:52:6f:0c:73:e6:2c:0f:73:96:81:
                    75:8c:4a:f8:97:0d:e2:3d:84:90:2d:5c:1d:ab:ff:
                    42:1c:69:4d:88:c3:66:6c:2b:11:2e:33:9e:6c:15:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:98:B4:41:6F:19:BA:FF:9D:98:A2:D8:C7:B2:D1:C7:77:20:F2:1F
            X509v3 Authority Key Identifier:
                keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:ac:48:96:54:0a:50:e0:d6:1e:93:ff:49:ed:e3:3e:a4:
         8f:03:a7:ee:4d:bd:bc:00:50:b7:f7:73:ec:0f:cf:1d:52:89:
         93:79:42:e5:86:2b:8f:4c:04:fd:6e:b6:08:cd:f1:1b:d0:e5:
         c2:fe:d1:4d:e1:53:7f:50:af:ac:36:3d:9f:51:8e:c5:36:28:
         8b:fc:03:bb:5e:ca:dd:cb:02:03:81:80:6f:f0:83:0c:e0:b1:
         b4:89:d5:35:e0:9b:93:34:8f:2e:1e:3c:ae:d0:ea:9e:6c:e5:
         3d:70:f0:d9:51:90:51:dd:3d:37:5e:5a:88:89:29:e1:aa:14:
         c4:c4:8b:2d:52:70:51:40:fe:55:cd:3a:3b:76:78:49:ac:1e:
         17:ee:3e:d3:42:ef:84:98:ec:87:e3:35:98:6f:24:0f:f1:66:
         58:01:9d:fb:34:13:31:a0:40:d9:49:95:e7:a6:58:6f:93:bd:
         ca:b6:4d:91:9e:67:45:92:4d:e5:c1:d0:d4:9e:23:c4:11:1b:
         2c:75:43:ba:b1:8f:5f:f5:0a:ab:15:2d:12:cb:dc:e3:29:07:
         d1:e8:50:96:63:6b:df:86:f2:01:12:20:ac:59:c6:84:f6:3e:
         5c:4c:7c:7d:a5:80:d2:b2:76:3a:74:52:bf:4a:ea:7e:1a:59:
         2d:8d:4f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/a2uqiLVQhPJAD8Edu9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OGQxZjZlMzM2YTdjODEzNTE5NDFiYzBiOWRlYTM5ZDdk
NzY0ZGIwHhcNMjUwMjE2MjMwMDE1WhcNMjUwMjE3MjMwMDE1WjAzMTEwLwYDVQQD
Eyg0Yzk4YjQ0MTZmMTliYWZmOWQ5OGEyZDhjN2IyZDFjNzc3MjBmMjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PQuwAvaDSQmlH+cR9+ugq5JKiMN
WJFdMxBnlUHcca07LYzQl5qxqTqPqGEQMIlY/WuOGdiBlfpdJ0AACe9FLIaDv0zz
XXSaoKKhK8WD6XAEHHEosDeLYHDmxHumshMuKDi1/0hCTx9yZopS3rAm/XBaJhuJ
SWvZf+SPRdb0C9//bLHPqUNH14hcBi8eRDrluEqJ6iRNI7CwxEoO4Z9qama8emXy
dF27XgcFDHnsKzUlnqFgdbjt233W3OqXEgIBJCCyjfPCG/W3hXA18ZbQnTdH13Bb
X1JvDHPmLA9zloF1jEr4lw3iPYSQLVwdq/9CHGlNiMNmbCsRLjOebBUZ/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyYtEFvGbr/nZii2Mey0cd3IPIfMB8GA1UdIwQY
MBaAFLmNH24zanyBNRlBvAud6jnX12TbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85ZGFjMmYtMzAxZS00MDZkLWI4ZDAt
MDM4NTdlZjViMzg3LzEvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85ZGFjMmYtMzAxZS00MDZkLWI4ZDAtMDM4NTdlZjViMzg3
LzEvdVkwZmJqTnFmSUUxR1VHOEM1M3FPZGZYWk5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh22sSJZU
ClDg1h6T/0nt4z6kjwOn7k29vABQt/dz7A/PHVKJk3lC5YYrj0wE/W62CM3xG9Dl
wv7RTeFTf1CvrDY9n1GOxTYoi/wDu17K3csCA4GAb/CDDOCxtInVNeCbkzSPLh48
rtDqnmzlPXDw2VGQUd09N15aiIkp4aoUxMSLLVJwUUD+Vc06O3Z4SaweF+4+00Lv
hJjsh+M1mG8kD/FmWAGd+zQTMaBA2UmV56ZYb5O9yrZNkZ5nRZJN5cHQ1J4jxBEb
LHVDurGPX/UKqxUtEsvc4ykH0ehQlmNr34byARIgrFnGhPY+XEx8faWA0rJ2OnRS
v0rqfhpZLY1PBA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:33 2025 by rpki-client