Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
File:                     N6TS5C8jYsLm71K4Lxn35WN1fgw.mft (raw, json)
Hash identifier:          gsd4zGxl1mz4Cnbs7SxFilIvCgyp0OXgNMRFikAC790=
Subject key identifier:   CA:47:60:D3:39:23:71:C5:FE:1A:B9:59:9C:99:F0:AE:E0:10:18:B1
Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
Certificate issuer:       /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Certificate serial:       0195108FB6B27819748E7763BB068664D195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
Manifest number:          0181
Signing time:             Sun 16 Feb 2025 21:00:08 +0000
Manifest this update:     Sun 16 Feb 2025 21:00:08 +0000
Manifest next update:     Mon 17 Feb 2025 21:00:08 +0000
Files and hashes:         1: 3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa (hash: eRzqoJ+wnFE50kPBIiEdOOr71bv/+CxmFvCCuPDTNi4=)
                          2: N6TS5C8jYsLm71K4Lxn35WN1fgw.crl (hash: akOLQLcn5ZPVhtuT6lknIt61QQq+Ov9j3vp0QitiP0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:8f:b6:b2:78:19:74:8e:77:63:bb:06:86:64:d1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
        Validity
            Not Before: Feb 16 21:00:08 2025 GMT
            Not After : Feb 17 21:00:08 2025 GMT
        Subject: CN=ca4760d3392371c5fe1ab9599c99f0aee01018b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:23:9f:52:d8:ad:03:62:43:78:1d:4f:03:
                    38:8c:ca:ca:8e:93:1b:aa:96:f8:75:21:bf:d4:07:
                    58:8a:d4:da:64:d4:00:da:5e:18:a7:ef:64:ab:7c:
                    6b:c2:a9:0f:00:48:0f:fa:a7:c1:8e:22:ca:f9:a6:
                    b9:14:e9:9e:b4:10:50:3d:22:88:5c:bc:94:86:38:
                    f3:93:a7:71:e5:8a:d4:fa:5b:fc:9e:5f:a8:b3:90:
                    38:27:f8:42:c2:2e:38:5e:da:21:69:1c:4a:55:56:
                    2b:8a:4b:91:7d:a0:de:d3:3a:65:f3:31:e5:64:fe:
                    e5:3a:ad:b3:72:54:8f:bb:c0:42:a9:30:f9:f9:85:
                    67:7d:fd:dc:86:17:68:3b:06:13:d4:a4:ec:84:42:
                    27:48:12:db:4d:9b:3d:3a:e1:a3:ad:39:f9:f8:e5:
                    50:4c:7e:1f:eb:5f:30:bc:d8:0d:6a:49:66:f0:0f:
                    c8:35:11:ce:92:a1:10:59:02:61:b0:46:78:ae:42:
                    07:4f:61:e4:1a:22:e5:c8:39:15:12:62:4b:37:7b:
                    d4:81:ad:89:8c:2e:2d:50:ce:6e:1f:74:68:3e:59:
                    8c:31:59:9d:04:e0:30:c3:82:02:54:79:b9:71:48:
                    d7:89:be:95:ec:51:b3:60:75:ae:b5:90:59:a5:c1:
                    df:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:47:60:D3:39:23:71:C5:FE:1A:B9:59:9C:99:F0:AE:E0:10:18:B1
            X509v3 Authority Key Identifier:
                keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:47:16:41:60:65:c5:c1:c8:fc:9b:d8:37:95:14:ed:96:37:
         83:aa:23:82:a9:e6:d4:99:30:0e:e8:31:8e:bb:84:33:db:6c:
         8f:f7:ee:16:69:5b:ba:7a:df:bd:0e:bd:91:02:31:5f:1c:4b:
         7e:9d:49:d4:5a:08:fd:77:d1:e1:44:48:44:6f:68:ab:72:fb:
         c9:eb:77:64:38:0a:be:89:0a:78:c7:46:4d:a8:3a:24:93:68:
         14:5d:9a:21:14:e0:8a:70:0f:b5:26:93:41:ac:e0:f7:ae:4d:
         a7:da:d1:85:e8:a8:61:b6:69:f3:14:74:c4:87:d0:b8:c8:1f:
         c5:25:61:95:11:c3:e7:54:fe:f8:b8:a2:f0:eb:6d:c8:62:b5:
         e0:28:89:9d:73:c3:fa:ff:f3:b6:70:52:44:de:12:0b:4c:85:
         74:45:44:40:32:9a:a8:e6:bb:13:03:0f:ba:ef:73:44:7f:48:
         42:2e:e9:91:74:86:78:ef:ea:b0:dd:ed:8e:9d:7f:ed:5b:25:
         65:c2:da:15:e4:68:9a:08:96:25:b1:7e:c8:91:7a:1c:57:b1:
         62:7a:5f:c3:4b:aa:7a:42:e4:cd:60:13:96:da:2a:19:53:a3:
         61:85:65:9e:d8:bc:d5:61:6a:83:d8:60:38:f2:41:27:a7:b7:
         5c:f5:1e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:12 2025 by rpki-client