Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
File:                     _BeVJZEZ7optEI6bXL4LuQwJjs4.mft (raw, json)
Hash identifier:          UxuWF9DOATV9l6zVR2506ymCvp8nr/h4LKCvZZS47lY=
Subject key identifier:   B0:18:91:30:7B:20:96:C8:A0:E9:C6:5B:C1:72:12:91:07:21:0B:8F
Authority key identifier: FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE
Certificate issuer:       /CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
Certificate serial:       0194C463B259FC4D02183B35D02A38310A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
Manifest number:          23
Signing time:             Sun 02 Feb 2025 02:00:55 +0000
Manifest this update:     Sun 02 Feb 2025 02:00:55 +0000
Manifest next update:     Mon 03 Feb 2025 02:00:55 +0000
Files and hashes:         1: _BeVJZEZ7optEI6bXL4LuQwJjs4.crl (hash: cqHQkpnY4K+de/Z22wVBPWICFWhBko63TpCYuerznsk=)
                          2: xP4juvpCJDFtIojDOBVk5IvnB08.roa (hash: 3K8HKqQzgZ9JbtKLhv6R2lpB9bOzQZ7S4dfHQle+caY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:63:b2:59:fc:4d:02:18:3b:35:d0:2a:38:31:0a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1795259119ee8a6d108e9b5cbe0bb90c098ece
        Validity
            Not Before: Feb  2 02:00:55 2025 GMT
            Not After : Feb  3 02:00:55 2025 GMT
        Subject: CN=b01891307b2096c8a0e9c65bc172129107210b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:16:cb:42:4c:ac:a0:42:e3:bc:a3:93:4b:30:
                    29:93:29:60:b3:fa:5d:b1:05:98:22:eb:b5:b6:41:
                    c1:ee:77:b0:1e:b0:d3:e3:a7:5f:7e:e6:cc:66:08:
                    e1:46:56:65:d3:ea:67:68:1d:59:a3:41:b8:6b:c4:
                    af:66:86:7d:3e:88:44:8e:80:15:fc:d8:d3:31:09:
                    95:e9:a4:0b:e2:47:9a:18:2a:a2:c1:e9:b9:84:ab:
                    5d:6f:dc:e7:a3:74:02:16:0c:5c:73:5f:e5:b7:69:
                    8f:2d:d4:d8:ab:5e:97:8e:d2:11:ef:c0:e0:5a:e7:
                    b0:8a:3a:80:6c:fc:56:d1:fa:f8:a7:38:a1:8d:d9:
                    dc:c4:48:ab:64:d2:5d:e9:ee:09:9e:f2:be:3f:3c:
                    91:3e:a2:62:38:89:38:78:a2:ec:df:b3:55:c9:8d:
                    b2:8c:92:a9:c1:31:14:f5:83:5c:a3:5c:63:69:0b:
                    f9:16:30:d7:23:ea:45:9e:9b:f6:34:ec:50:a7:e9:
                    bc:33:4a:60:54:7a:99:45:11:a5:28:c6:18:24:70:
                    4e:b3:96:6d:f4:8d:71:71:25:97:04:d8:72:3d:88:
                    f2:8a:25:0a:e7:2f:62:54:d1:a6:fc:ec:95:4f:cb:
                    36:53:fd:ef:c7:d7:b9:f7:fd:6d:7e:78:81:84:3b:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:18:91:30:7B:20:96:C8:A0:E9:C6:5B:C1:72:12:91:07:21:0B:8F
            X509v3 Authority Key Identifier:
                keyid:FC:17:95:25:91:19:EE:8A:6D:10:8E:9B:5C:BE:0B:B9:0C:09:8E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BeVJZEZ7optEI6bXL4LuQwJjs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1a8bc3-d42e-4ac3-a986-cfa6a25432e9/1/_BeVJZEZ7optEI6bXL4LuQwJjs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:80:fb:2f:9a:ed:de:59:f1:05:dc:29:e5:a4:d8:61:59:3f:
         5c:c7:49:9a:f4:b1:f2:76:cd:fa:de:d9:f0:b9:0a:bb:00:14:
         8d:2b:4f:52:f6:50:cf:ee:f2:eb:f0:b3:1f:2b:d8:2d:8e:cf:
         91:12:f7:b9:0f:b8:80:3c:57:01:1a:33:77:87:b2:f4:25:34:
         3e:8a:8d:49:5a:69:c7:e3:ed:e0:05:d3:34:75:ba:6b:78:89:
         dc:bb:69:82:71:1b:55:f2:77:9e:f3:4f:e6:78:4b:44:4f:df:
         53:ef:d5:42:84:7e:6a:49:74:64:0f:16:3b:c2:f3:58:9e:8a:
         0b:5d:41:83:03:cc:f4:2f:7f:ab:8f:fa:b5:78:4b:67:f8:59:
         73:86:6d:f3:7d:e4:14:3c:23:19:3c:86:3b:ec:2f:94:9f:e0:
         6c:b4:78:da:93:14:96:aa:fb:15:30:27:04:6e:20:d4:4e:fc:
         7b:ca:09:5a:27:b2:a8:98:d9:c0:41:d6:06:5b:d8:94:b2:d3:
         01:3b:da:82:30:47:6b:de:27:81:6c:94:cf:4f:b5:99:eb:9a:
         7e:d8:ba:d5:08:b2:cb:cd:da:ba:93:f0:fd:3d:d3:62:dc:35:
         eb:12:81:73:95:d6:cb:1c:76:76:7a:b6:b6:8f:b8:9a:90:3a:
         c6:5d:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:04 2025 by rpki-client