Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File:                     MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier:          BjfZA53o4bk1uWZlBYox0HjdUoJIFEsw9Rz2Ty1Ue7g=
Subject key identifier:   B1:0C:57:B5:13:3D:70:65:B0:87:E7:F5:FA:7F:16:97:A7:00:9A:B5
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer:       /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial:       0195124795E21EB978F01B5616F778AB44AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number:          0DED
Signing time:             Mon 17 Feb 2025 05:00:36 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:36 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:36 +0000
Files and hashes:         1: 8FzhGMtZv2x-9zLN2UYHeQV341o.roa (hash: qGnveFjiOnO4NOM7gilbdoFw5wFNnGKNy0BPR46F8X8=)
                          2: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: K9hJBU1CSaGUI43rIaKXHwn65JZPPLvIAiLEWkffJr4=)
                          3: VKJdOQxl7p8p7x4aN4Wby4zX0pY.roa (hash: yezqvXwILM44YJ3tHBGsCwM+mCK4UNXyobV3FDKf4iQ=)
                          4: eDgDXUFrSK7xUZkPtBuSB2bzf-g.roa (hash: EmMIdVFxxDw1T5QOtxoH7PieLIsGiM73XYNo7gIlAMg=)
                          5: egnrXyyNbGvpg6aIGoEfRznijCU.roa (hash: 4f5nrivsxBbMxXIQjQ1VQo/t3u3N6GzzpzWYXL7wFf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:95:e2:1e:b9:78:f0:1b:56:16:f7:78:ab:44:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
        Validity
            Not Before: Feb 17 05:00:36 2025 GMT
            Not After : Feb 18 05:00:36 2025 GMT
        Subject: CN=b10c57b5133d7065b087e7f5fa7f1697a7009ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:94:6a:fe:67:ce:cc:52:67:18:2d:08:ac:
                    2a:21:de:9e:3a:92:d9:58:fd:5e:48:d5:7d:86:6a:
                    c2:d0:1d:9c:a2:de:ed:db:36:54:64:56:1b:cf:62:
                    cb:13:37:9a:a4:27:fa:f1:5f:ab:93:21:7d:1f:6c:
                    41:18:9a:a2:e3:5b:d1:54:d1:b3:0b:22:0a:3b:43:
                    5c:75:5f:7a:30:af:0d:16:dc:4b:13:63:db:a7:09:
                    35:8b:57:91:e3:d3:42:6e:d7:29:f8:4a:90:f3:4d:
                    ab:a4:b1:98:68:08:a2:5a:9a:7d:2e:56:01:79:9b:
                    17:b9:23:f3:07:8c:bb:e1:db:96:40:52:02:99:2b:
                    f2:7b:5a:41:39:93:87:67:37:9c:d1:17:47:a9:a2:
                    5b:1b:55:fd:22:80:2f:23:68:f4:92:e3:bc:42:97:
                    c8:6d:33:72:1c:18:01:05:2f:50:2e:f3:ab:e3:c9:
                    1c:0c:f4:d2:b8:17:ad:50:7e:9a:93:4b:c7:2f:2f:
                    79:6e:c8:d6:52:ca:a7:1a:89:76:18:85:72:49:bd:
                    40:a1:dc:2c:76:16:91:e2:c8:6b:19:df:2f:bc:bd:
                    e1:eb:32:c2:6e:a0:9c:c3:fa:d7:6e:52:20:8f:b8:
                    0a:6c:3f:dd:08:b7:0c:d0:5b:db:f0:68:d4:37:21:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0C:57:B5:13:3D:70:65:B0:87:E7:F5:FA:7F:16:97:A7:00:9A:B5
            X509v3 Authority Key Identifier:
                keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f4:4d:54:31:5a:0d:e5:94:a9:db:c5:1e:52:31:1c:b1:25:
         4c:2d:9f:0d:4b:48:3b:c9:3e:34:80:c8:ff:f5:6c:6b:14:1f:
         78:67:15:c6:9c:d2:02:a2:e4:4f:0c:46:c2:50:06:45:0c:65:
         5a:e6:17:db:a0:1e:99:37:ee:13:ff:2d:80:75:ca:02:57:03:
         d3:3c:9f:80:6c:1e:b9:94:48:7f:57:10:bd:af:e0:11:da:2a:
         16:4c:f7:94:ff:04:91:e9:b1:c6:42:f6:ec:ca:48:13:d8:3b:
         f7:5c:44:03:27:b7:e1:e2:55:35:19:30:17:9e:a4:bd:ea:5d:
         03:b8:b4:13:dd:e6:a6:ea:63:67:3b:43:f2:b5:89:b3:49:bd:
         a3:48:91:46:42:82:2f:8a:fd:ab:60:5e:be:f4:3b:46:0b:0d:
         e1:6f:95:47:29:57:2a:e7:b0:53:3c:fb:53:65:46:11:0a:39:
         c5:2e:af:a8:e0:c0:3b:a8:24:c8:47:a7:cb:2a:30:a9:0c:71:
         90:6f:41:6b:88:3e:d7:b3:99:cb:3c:5c:d1:8b:8d:a3:74:60:
         b3:df:86:57:91:8e:fe:00:32:7d:fb:71:26:32:ac:7c:c3:5c:
         19:b5:88:a3:35:10:c7:a7:03:b8:46:80:55:f9:4c:d6:0b:1d:
         2c:d1:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:24 2025 by rpki-client