Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File:                     79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier:          ST568UATSM+251Lw6M23bzffyZGrzCWekVWvq73OFNA=
Subject key identifier:   1C:8B:23:D8:60:09:A6:3E:A7:1E:EA:10:FF:22:98:6F:F7:20:87:84
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer:       /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial:       019511350A0178253DF13EB3CD33021091FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number:          1452
Signing time:             Mon 17 Feb 2025 00:00:43 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:43 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:43 +0000
Files and hashes:         1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: o1m5VW6fHC7G29Z6W3tAE3ZFHEck4scJiQgDSVQT4dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:35:0a:01:78:25:3d:f1:3e:b3:cd:33:02:10:91:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
        Validity
            Not Before: Feb 17 00:00:43 2025 GMT
            Not After : Feb 18 00:00:43 2025 GMT
        Subject: CN=1c8b23d86009a63ea71eea10ff22986ff7208784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:28:09:05:44:3b:68:66:12:26:76:5b:e8:4f:
                    25:17:23:de:93:c5:4a:59:ab:c5:f6:23:78:fb:f7:
                    e5:b5:86:97:85:aa:db:f8:1c:e3:c4:4c:43:8e:9f:
                    2e:f9:90:f8:99:b2:6c:d0:0f:b1:65:9a:2f:46:17:
                    d5:62:5e:98:c5:6b:7d:89:f6:51:70:02:2f:85:7d:
                    8a:f4:ab:01:73:64:46:80:6f:fc:e0:ea:19:42:cb:
                    b7:aa:fa:dc:ed:c4:62:e1:24:97:2f:31:5b:71:37:
                    f8:82:40:c3:5d:73:01:2a:62:31:71:6d:63:ef:1d:
                    69:f4:f9:30:60:15:55:51:39:48:06:f6:ae:e5:81:
                    3a:11:a2:54:75:cd:8c:10:c2:85:92:3d:01:d8:46:
                    33:00:66:8a:a7:ec:8e:cb:3c:ce:ec:9a:1e:06:cb:
                    04:e4:ac:86:f5:27:de:9e:7c:4a:79:c7:10:34:b0:
                    cf:d6:3c:b3:e7:90:ae:4d:d3:a8:6d:3a:f7:d5:1f:
                    98:63:70:a3:df:bc:6e:e4:cc:90:c4:85:6c:89:5d:
                    f1:7f:44:a8:62:93:1e:c7:5d:8d:d7:e7:bc:18:9f:
                    d7:69:16:eb:41:b0:cd:59:c8:9d:8f:42:e7:54:b2:
                    65:16:5c:7b:9e:97:c3:20:0d:12:da:38:aa:17:b3:
                    8d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8B:23:D8:60:09:A6:3E:A7:1E:EA:10:FF:22:98:6F:F7:20:87:84
            X509v3 Authority Key Identifier:
                keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e5:e3:00:38:52:87:be:57:50:fd:70:42:48:bd:6e:16:c7:
         00:98:f7:dd:43:65:20:b4:f3:3d:86:7f:6a:4a:5b:0b:5b:79:
         b0:12:94:19:c4:b1:3d:4a:28:68:48:84:6e:1d:eb:25:cb:65:
         f8:65:75:20:c0:79:0b:b0:cc:cb:a9:a7:83:48:f0:16:a0:b3:
         52:1c:77:8f:79:63:42:2f:3b:97:1e:fc:53:51:4c:3a:8b:89:
         35:1c:94:ef:c2:41:9c:7d:a3:3a:34:e1:96:27:06:c3:99:48:
         7d:05:e7:4b:21:97:09:53:1b:40:47:dc:d6:cf:73:24:fb:25:
         f8:2c:6a:b4:aa:10:48:a0:10:98:21:a8:63:ff:4e:69:1c:67:
         55:63:13:46:36:aa:c1:76:89:2b:43:22:7e:8e:21:44:5d:cd:
         eb:07:22:44:32:c0:a1:42:98:4e:14:68:6e:4f:ab:5c:b3:ad:
         f4:74:b9:e6:98:af:06:c3:42:d4:0d:6f:51:2c:4c:fd:80:10:
         d2:49:f9:f8:90:46:f5:c7:6f:0f:bc:3a:4c:40:82:0f:d7:c8:
         ed:88:14:de:6f:67:46:e9:6c:0d:37:f7:66:b5:43:23:85:ef:
         07:0e:b7:58:f0:c6:96:97:e7:26:9f:0c:a2:06:29:91:a9:17:
         87:c1:51:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNQoBeCU98T6zzTMCEJH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZDMwZDY5MzI5ZDMzZjQ0MjEyYmY4NmI2OWZmMjA4ODEw
NTEwNjMwHhcNMjUwMjE3MDAwMDQzWhcNMjUwMjE4MDAwMDQzWjAzMTEwLwYDVQQD
EygxYzhiMjNkODYwMDlhNjNlYTcxZWVhMTBmZjIyOTg2ZmY3MjA4Nzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ygJBUQ7aGYSJnZb6E8lFyPek8VK
WavF9iN4+/fltYaXharb+BzjxExDjp8u+ZD4mbJs0A+xZZovRhfVYl6YxWt9ifZR
cAIvhX2K9KsBc2RGgG/84OoZQsu3qvrc7cRi4SSXLzFbcTf4gkDDXXMBKmIxcW1j
7x1p9PkwYBVVUTlIBvau5YE6EaJUdc2MEMKFkj0B2EYzAGaKp+yOyzzO7JoeBssE
5KyG9SfennxKeccQNLDP1jyz55CuTdOobTr31R+YY3Cj37xu5MyQxIVsiV3xf0So
YpMex12N1+e8GJ/XaRbrQbDNWcidj0LnVLJlFlx7npfDIA0S2jiqF7ONuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByLI9hgCaY+px7qEP8imG/3IIeEMB8GA1UdIwQY
MBaAFO/TDWkynTP0QhK/hraf8giBBRBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lMjU0YWQtNjg4OS00MTk1LTgyMGEt
ZjM3MzkyMTc3OGUxLzEvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lMjU0YWQtNjg4OS00MTk1LTgyMGEtZjM3MzkyMTc3OGUx
LzEvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+XjADhS
h75XUP1wQki9bhbHAJj33UNlILTzPYZ/akpbC1t5sBKUGcSxPUooaEiEbh3rJctl
+GV1IMB5C7DMy6mng0jwFqCzUhx3j3ljQi87lx78U1FMOouJNRyU78JBnH2jOjTh
licGw5lIfQXnSyGXCVMbQEfc1s9zJPsl+CxqtKoQSKAQmCGoY/9OaRxnVWMTRjaq
wXaJK0Mifo4hRF3N6wciRDLAoUKYThRobk+rXLOt9HS55pivBsNC1A1vUSxM/YAQ
0kn5+JBG9cdvD7w6TECCD9fI7YgU3m9nRulsDTf3ZrVDI4XvBw63WPDGlpfnJp8M
ogYpkakXh8FR9g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:00 2025 by rpki-client