Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
File:                     se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft (raw, json)
Hash identifier:          y6++M6a8YAMvd7T9MmsPwqH+UB9/k2gew4ipgxldVhU=
Subject key identifier:   F9:42:AB:2C:81:77:A9:51:5B:C1:09:3B:0C:F3:74:29:AB:0F:60:79
Authority key identifier: B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
Certificate issuer:       /CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Certificate serial:       019510C72C990C9F829F9D918AF727770BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
Manifest number:          0DD4
Signing time:             Sun 16 Feb 2025 22:00:43 +0000
Manifest this update:     Sun 16 Feb 2025 22:00:43 +0000
Manifest next update:     Mon 17 Feb 2025 22:00:43 +0000
Files and hashes:         1: se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl (hash: HIrdb8hRo6xvnpqkiJvbWAYOUWLLweJde17CgiGy36I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:2c:99:0c:9f:82:9f:9d:91:8a:f7:27:77:0b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
        Validity
            Not Before: Feb 16 22:00:43 2025 GMT
            Not After : Feb 17 22:00:43 2025 GMT
        Subject: CN=f942ab2c8177a9515bc1093b0cf37429ab0f6079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:71:79:e3:f1:47:5d:ba:96:32:bf:ed:98:a0:
                    ad:1e:49:7c:c1:62:47:35:f7:8d:0d:0b:dc:51:93:
                    ea:c7:f1:89:e5:2b:fe:98:e8:7a:e1:d3:6c:09:e3:
                    95:a8:71:aa:08:cb:a8:4b:70:8e:e9:ab:e4:e1:b5:
                    ef:5a:2c:11:18:63:92:34:f5:ce:56:a6:4e:be:7b:
                    a4:d0:ac:0f:e0:4b:28:ee:52:d0:b4:19:3a:9a:1e:
                    89:8a:3d:13:e4:cb:f0:1f:93:f1:a8:a6:a6:b9:a8:
                    a6:76:14:e4:40:d4:67:b5:e6:3e:84:df:5f:e9:0a:
                    b4:46:ff:7e:94:5e:64:27:19:2f:73:10:90:b4:63:
                    a6:a0:e0:76:57:44:31:08:8f:f8:f1:0c:24:1d:2a:
                    50:3a:23:bb:17:08:39:2b:8c:4f:85:6f:9f:3d:2d:
                    14:5d:97:27:b3:c3:47:e9:95:20:f0:d6:64:46:74:
                    35:c7:5f:c9:f3:5e:a6:34:ae:41:c2:48:88:22:f1:
                    e3:dc:96:d6:3f:37:7c:7b:13:90:dd:0d:e9:60:bd:
                    5e:1e:a3:10:e1:67:bb:58:67:6a:13:57:b9:15:9e:
                    ee:c9:c0:01:a5:27:c8:29:cb:f6:ea:d2:03:c1:37:
                    db:30:9f:11:06:b8:d5:b9:3f:97:32:47:bf:1a:c2:
                    b1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:42:AB:2C:81:77:A9:51:5B:C1:09:3B:0C:F3:74:29:AB:0F:60:79
            X509v3 Authority Key Identifier:
                keyid:B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:57:ae:e4:d1:23:9c:38:56:c1:ac:3e:d6:11:64:c0:d2:
         f8:b8:8d:fc:0a:64:8e:26:72:f6:da:d6:54:c1:6c:b5:3b:54:
         14:f0:42:78:50:a2:40:0a:a4:c1:47:99:11:d8:83:48:16:61:
         48:ad:da:ef:44:56:ae:6e:2e:54:46:e5:92:d0:08:0c:a7:ee:
         91:14:8f:79:c7:dd:08:98:e9:e0:9e:bd:fe:55:4f:c2:b2:ec:
         6a:bc:1a:7f:1b:3c:d2:66:74:d4:b4:b8:4f:e1:27:e8:da:ff:
         14:4f:13:e4:11:4a:d4:9a:c8:a9:4c:ca:61:ae:89:a3:f0:7a:
         9a:79:73:a9:11:25:cf:3d:53:f9:76:63:a0:61:49:55:81:8c:
         99:97:8a:a1:c2:48:3b:da:92:b7:3b:42:7c:49:c4:74:8e:b3:
         f8:d1:71:b9:4a:16:15:81:15:82:91:10:b6:dc:ca:07:2d:da:
         62:6e:c5:6c:70:d1:72:00:3f:16:71:a3:27:d2:f2:d4:fb:88:
         0a:c4:45:91:5e:4e:10:c2:d5:59:c7:cc:4a:a3:75:95:6e:82:
         5e:c3:6a:8a:d3:3e:87:ab:ed:62:f0:c1:a8:53:2b:00:34:44:
         ac:34:da:7a:17:46:a5:87:64:61:6b:05:cf:a2:80:6c:0c:69:
         99:b6:53:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:20 2025 by rpki-client