Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
File:                     58yGJhOL8enLP9H-wmxoxKY0CWs.mft (raw, json)
Hash identifier:          OBZspD1DUodCjOhD/LlIVcKyRGKHv9HpBn8G2sPysLI=
Subject key identifier:   03:AF:4B:0E:C6:5B:5E:71:6C:13:BB:12:74:18:EE:3A:94:F2:98:4D
Authority key identifier: E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B
Certificate issuer:       /CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
Certificate serial:       019511346C160CCD4D21ED9F2D9194587846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
Manifest number:          0798
Signing time:             Mon 17 Feb 2025 00:00:02 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:02 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:02 +0000
Files and hashes:         1: 58yGJhOL8enLP9H-wmxoxKY0CWs.crl (hash: 4sWIWqyDbcUFespGxbLBXVelzIsl9/Mas76Ok/bgy3A=)
                          2: rj-L1Ht9KU4SpqytVvSZ8FykJs0.roa (hash: o5/pUFEbXRLCOB5XslmeCnU9+6JRYi7PIpvUyWlOL2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:6c:16:0c:cd:4d:21:ed:9f:2d:91:94:58:78:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cc8626138bf1e9cb3fd1fec26c68c4a634096b
        Validity
            Not Before: Feb 17 00:00:02 2025 GMT
            Not After : Feb 18 00:00:02 2025 GMT
        Subject: CN=03af4b0ec65b5e716c13bb127418ee3a94f2984d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:ad:b4:f4:36:1f:ac:4f:10:e6:99:88:16:
                    0f:75:87:c8:ad:98:2a:eb:cd:e1:18:12:00:1c:07:
                    91:6f:9d:8d:c8:d7:4e:d2:e0:87:95:4c:9b:3b:50:
                    a7:c8:c4:8b:18:85:1d:73:bf:ad:71:30:45:c1:c9:
                    95:b5:b1:02:a1:3e:30:2c:35:cc:97:32:41:b8:99:
                    69:0f:fb:53:ff:fc:b7:03:70:24:21:1f:52:7e:18:
                    7f:34:7d:71:d5:ee:ae:12:13:e8:59:10:bb:f9:6c:
                    cb:6e:2e:d3:da:9a:b9:bd:62:d1:b9:dd:3f:00:8b:
                    6a:b2:96:1c:8f:31:c7:72:e8:a3:d2:50:2d:a4:9d:
                    3c:97:15:88:a2:ba:bf:77:2d:cb:e7:76:5c:cc:e5:
                    d3:2f:c3:57:b4:96:58:5f:26:b2:bc:99:47:b7:77:
                    49:13:aa:fb:a3:1b:c2:d0:17:5f:1a:62:d1:42:27:
                    1d:07:76:6b:df:f0:f6:4c:75:71:3a:c5:c3:e2:bc:
                    e7:56:a8:00:af:54:fa:52:ce:45:40:4d:17:a3:f8:
                    0f:37:c8:6d:b0:56:54:c0:b1:fa:57:8b:00:49:02:
                    57:9d:b3:33:06:c7:45:df:0c:80:2d:18:fe:d4:b4:
                    bf:c6:00:93:d8:e8:25:97:47:ab:c3:51:80:ec:dd:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AF:4B:0E:C6:5B:5E:71:6C:13:BB:12:74:18:EE:3A:94:F2:98:4D
            X509v3 Authority Key Identifier:
                keyid:E7:CC:86:26:13:8B:F1:E9:CB:3F:D1:FE:C2:6C:68:C4:A6:34:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58yGJhOL8enLP9H-wmxoxKY0CWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/86cc47-f0c0-473a-b11b-f5c09ff38a00/1/58yGJhOL8enLP9H-wmxoxKY0CWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5c:36:7f:17:d7:05:e6:c2:b5:c5:4d:66:ee:3e:db:f7:72:
         35:87:8c:99:9a:b2:cb:cb:5c:a3:93:41:29:87:bb:c0:f7:4e:
         2f:7d:43:f4:00:a5:04:7d:30:4d:35:0f:b1:8c:1c:56:a0:1b:
         37:4c:4e:89:c5:e2:1a:a0:e1:39:3d:71:15:a2:0b:e0:b8:60:
         06:b5:0e:9c:e4:b8:04:73:72:0e:3c:92:80:e9:d6:96:57:27:
         b8:62:55:6d:d3:15:7b:8a:ff:6e:f5:41:cf:97:34:b8:75:10:
         8d:e4:69:40:f6:55:aa:1c:69:7f:d6:89:28:d3:5d:24:7e:11:
         dd:7a:4c:17:9a:e8:72:1e:6d:f0:a7:48:0f:43:c1:e3:b7:c6:
         da:06:b0:de:8e:20:f7:a3:82:8f:ec:3c:1e:8b:44:4f:ab:45:
         dd:f5:92:85:f1:0e:ac:53:c3:f8:53:7d:cc:70:7e:a3:3e:e9:
         3b:ac:aa:ac:bb:67:12:99:ce:6e:e6:0d:6d:21:54:98:fa:de:
         0c:64:a3:21:f0:ff:ab:f8:19:de:01:bb:af:92:08:99:b4:b2:
         f6:ac:00:0c:75:14:d9:dd:ff:e9:4f:3f:b9:01:67:7d:55:38:
         80:42:17:df:de:0e:ae:57:b1:ef:d5:63:b0:44:fa:cb:dd:6a:
         72:84:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:25 2025 by rpki-client