Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
File:                     EyhoZEV55uth9HcdZ7QGZPUBFvo.mft (raw, json)
Hash identifier:          J5bKlJ+BVLddATccjq546/bgVtx78pmh7OnVAaaBVOY=
Subject key identifier:   EA:63:6E:6E:50:F0:CB:F3:F6:C5:20:68:78:01:11:41:60:4C:BF:C0
Authority key identifier: 13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA
Certificate issuer:       /CN=132868644579e6eb61f4771d67b40664f50116fa
Certificate serial:       019510C7DFED286D091637C6225C30B90FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
Manifest number:          0FEE
Signing time:             Sun 16 Feb 2025 22:01:29 +0000
Manifest this update:     Sun 16 Feb 2025 22:01:29 +0000
Manifest next update:     Mon 17 Feb 2025 22:01:29 +0000
Files and hashes:         1: EyhoZEV55uth9HcdZ7QGZPUBFvo.crl (hash: BogkdKlrK2b6T2xT+RwuqAO0X/4GTJ5SkuvTmwnwOEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:c7:df:ed:28:6d:09:16:37:c6:22:5c:30:b9:0f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132868644579e6eb61f4771d67b40664f50116fa
        Validity
            Not Before: Feb 16 22:01:29 2025 GMT
            Not After : Feb 17 22:01:29 2025 GMT
        Subject: CN=ea636e6e50f0cbf3f6c5206878011141604cbfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:ad:a7:ff:df:d7:a7:6c:0f:c5:15:4b:63:
                    c9:7c:f2:be:a0:d8:e7:f1:bd:e7:40:39:f9:f9:3e:
                    c8:24:c6:67:6d:e8:5e:7e:d7:40:f3:aa:25:cb:3a:
                    af:cb:41:ef:28:92:3e:da:e3:77:82:8f:35:60:87:
                    01:a6:c5:23:5e:34:a7:ff:1f:03:43:f2:9f:ab:9b:
                    1b:db:88:5a:5e:c1:01:03:c5:7e:22:0c:a7:27:ec:
                    68:a5:58:88:dc:a8:d2:6c:91:9d:17:f3:a3:37:8e:
                    80:dd:a0:99:bc:b5:dd:74:96:62:bb:c4:cd:42:92:
                    cc:19:e5:0e:ae:88:48:7d:fe:6c:96:5f:35:72:65:
                    3a:1d:f9:3c:5a:e3:6d:67:70:0c:16:6c:30:40:7a:
                    dd:da:40:c0:fe:6f:8a:bf:9f:12:00:e3:13:f6:81:
                    d8:29:93:c6:44:41:2e:5b:e1:98:68:b8:55:25:1e:
                    84:8d:a3:da:41:e6:eb:69:35:77:16:96:c2:ec:15:
                    c3:9b:f9:c7:28:95:9a:0b:aa:7b:7a:23:3e:a7:9e:
                    7f:9d:96:86:bc:45:fa:82:f3:29:95:65:48:b2:f4:
                    ee:71:ad:93:90:90:7b:c4:95:98:55:7b:48:5b:b0:
                    e5:62:5f:37:46:10:fa:84:44:fd:18:30:a2:f9:1b:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:63:6E:6E:50:F0:CB:F3:F6:C5:20:68:78:01:11:41:60:4C:BF:C0
            X509v3 Authority Key Identifier:
                keyid:13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:6f:2f:71:25:2e:c5:4b:29:2a:17:bf:db:37:d5:70:ca:
         cd:df:89:50:92:e6:01:3c:90:e0:6c:3c:35:53:0c:0a:ff:a3:
         f5:30:cf:10:22:da:66:e7:2f:3e:e2:78:99:39:52:bc:58:5e:
         e5:a3:fa:fa:27:e6:eb:ec:df:74:f5:60:d2:57:b9:d0:f5:3e:
         a3:0a:ae:f9:c1:59:60:08:1b:a2:a0:10:8c:52:95:14:b1:0f:
         44:f9:f2:5c:f8:35:35:c8:b4:ce:b4:f0:bd:90:b5:99:f7:8f:
         84:8c:26:bf:8b:b1:9c:59:63:b9:4f:d0:c7:e1:1a:64:84:26:
         43:3d:e9:20:79:cf:ad:7e:46:90:8a:d3:5e:15:1a:29:79:09:
         a7:5e:40:26:41:d4:31:1e:0e:4b:98:16:4b:77:af:c0:4f:cc:
         4d:29:75:ee:93:12:b9:f6:61:88:f8:70:c9:fd:42:dd:2d:df:
         bd:7a:aa:80:cc:43:78:13:1f:e6:3b:1d:8d:78:12:08:8a:9a:
         d5:11:59:6b:8e:73:29:27:cb:59:b3:7c:2e:a5:31:db:58:d8:
         4f:54:41:9a:5e:7e:94:6c:dc:76:d3:66:b0:f2:1b:c0:51:42:
         36:94:b7:b6:61:ab:b4:fd:47:29:04:ef:11:62:34:e8:25:2c:
         aa:ca:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:56 2025 by rpki-client