Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File:                     8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier:          HbQUvoE1EkXzzIStm098giqdQQbfZq1i/3B1HmQowlo=
Subject key identifier:   34:F4:5C:77:DA:59:1D:78:FC:9A:2F:A9:15:40:01:B1:4C:EE:6B:BB
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer:       /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial:       01958CCEA9E98B43A3D1345B80518A1ECEC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number:          08E2
Signing time:             Thu 13 Mar 2025 00:01:48 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:48 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:48 +0000
Files and hashes:         1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: nbPZs3MhP/wznabGFePBKwKBqrMnvT8KYGY0CRwYmV4=)
                          2: TqtHjEwEgPXdT8pg7HJGWpoB6aI.roa (hash: JiojTj7/u167MnISfmEDzN29ADgR4Ig1J4bZKyBHw7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:ce:a9:e9:8b:43:a3:d1:34:5b:80:51:8a:1e:ce:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
        Validity
            Not Before: Mar 13 00:01:48 2025 GMT
            Not After : Mar 14 00:01:48 2025 GMT
        Subject: CN=34f45c77da591d78fc9a2fa9154001b14cee6bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:d7:34:2b:fe:46:fb:d5:64:ad:59:55:23:
                    3a:6c:84:df:8a:6c:df:0a:1f:34:d3:4f:c2:64:ae:
                    6f:8a:9a:99:fc:36:99:a6:26:b9:2f:15:0d:bb:60:
                    d0:c1:b8:e8:09:89:f8:6e:60:63:fb:a5:1d:e7:ed:
                    82:22:79:4d:8f:01:3e:30:7c:e4:f4:7e:57:07:4c:
                    4d:fc:fe:ba:eb:5b:bc:f6:d3:9c:f1:e7:44:c5:c3:
                    b8:67:c3:37:5b:d8:73:53:a5:fc:2b:d5:85:8b:68:
                    96:2c:a5:dd:45:94:c3:fd:1a:cc:34:1b:99:3d:49:
                    72:9f:46:8f:6b:e3:76:61:8f:ea:3a:69:4f:d0:fc:
                    f1:96:b7:85:d3:b2:d0:7a:fa:a6:ad:e5:ef:fe:78:
                    e6:6e:00:6f:31:4a:52:2d:7b:78:ca:d2:7b:40:82:
                    4b:3b:5f:c7:35:2e:79:9b:c9:ec:d3:58:4e:21:29:
                    48:68:56:6c:c1:14:07:08:ca:d5:33:14:8d:c7:b2:
                    f0:b3:8e:a2:70:4d:9b:4b:41:79:6a:da:fa:3c:65:
                    e3:64:be:5e:c3:31:4b:3e:c4:59:93:e1:8f:70:41:
                    8f:62:6f:00:12:4a:d5:79:b8:87:fc:5d:ea:3a:e9:
                    bc:98:61:5b:9c:75:5b:fa:0a:3e:c2:09:64:7a:5e:
                    97:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F4:5C:77:DA:59:1D:78:FC:9A:2F:A9:15:40:01:B1:4C:EE:6B:BB
            X509v3 Authority Key Identifier:
                keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:0c:81:15:9c:ca:73:15:0e:08:73:0d:bd:4f:b1:0f:4b:d9:
         70:e4:f8:26:7a:bb:4a:4d:9c:73:6c:53:e0:8d:dc:14:f8:06:
         ef:9d:e6:94:b9:8b:b1:dd:aa:6f:6f:77:d9:00:2f:a6:d9:1a:
         92:f9:50:53:47:93:56:99:ec:47:f1:82:f4:10:c0:0f:89:d1:
         30:0b:58:59:f2:0b:d5:9e:2f:5b:f5:73:be:2e:6b:b4:43:02:
         0f:9f:a4:6a:e5:d9:37:1b:f4:6e:79:97:c7:75:47:8c:67:9f:
         09:2b:1f:1b:a9:43:47:85:e9:6b:9f:d3:f1:3b:a3:6a:e5:06:
         4f:9e:45:71:a3:2b:1d:01:26:29:88:2c:42:0e:25:30:a9:be:
         e6:2d:ab:1d:36:5a:72:c4:55:e9:96:14:a9:fd:30:62:7e:31:
         9c:2a:12:1e:e4:45:84:75:37:13:c6:75:5a:a6:ae:b4:53:72:
         5a:81:36:31:83:ce:d3:12:43:8a:57:51:5f:55:83:95:b3:89:
         80:6e:e9:2a:24:49:e7:e6:59:77:dc:01:b3:5b:8c:fb:82:b1:
         3f:8d:a1:f1:7f:0a:1c:f4:9e:ca:cf:e9:41:f1:50:5e:84:75:
         90:04:0b:12:8a:85:85:b9:e8:d6:e9:95:15:81:b0:2b:66:cd:
         e5:80:72:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:20 2025 by rpki-client