Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
File:                     j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json)
Hash identifier:          rwu9sLNkdbCbdQeCsSYASMAnnh8tpNXooRq5VyoQfR4=
Subject key identifier:   A6:B7:1C:9F:EA:C9:BA:30:81:D6:E0:9B:60:E3:6C:73:CE:6C:D3:EA
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Certificate issuer:       /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial:       01958C970DFB3A997C5EEB83A0DE76851747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
Manifest number:          149B
Signing time:             Wed 12 Mar 2025 23:01:04 +0000
Manifest this update:     Wed 12 Mar 2025 23:01:04 +0000
Manifest next update:     Thu 13 Mar 2025 23:01:04 +0000
Files and hashes:         1: iyPNjwJabCXXK6p6-uFNI9tlBmA.roa (hash: gNpFReUeQCJp2ONtKUvB3iNXDc2qvV1lA6rnPgigdyw=)
                          2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: +awE5jb0h6pHS8Ct9WnH801ziBHX//Y+A7Vq12zjHFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:97:0d:fb:3a:99:7c:5e:eb:83:a0:de:76:85:17:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
        Validity
            Not Before: Mar 12 23:01:04 2025 GMT
            Not After : Mar 13 23:01:04 2025 GMT
        Subject: CN=a6b71c9feac9ba3081d6e09b60e36c73ce6cd3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f2:e4:fe:3d:2b:15:cc:66:e3:a2:89:a0:21:
                    14:20:8e:d9:49:05:e1:57:13:30:2a:c3:0c:61:eb:
                    51:0b:1d:b4:df:49:d6:38:23:a9:07:de:aa:77:54:
                    ca:aa:55:4d:e8:25:6b:72:92:af:2c:eb:45:dc:04:
                    42:ed:1d:68:18:7c:f1:aa:97:7b:30:32:db:37:0a:
                    22:b3:9b:5a:a0:ed:54:e6:4f:77:ef:d8:81:2c:c9:
                    ad:ca:15:c6:1b:2b:6b:f2:db:ae:74:dd:0f:cc:9b:
                    98:c6:c6:99:aa:1b:6c:4d:81:ee:a2:0b:56:99:7d:
                    41:9e:dd:63:13:27:78:b1:9a:58:b2:48:c2:ef:c2:
                    55:16:a0:25:ee:00:9e:f2:d4:6a:35:67:ab:5e:3e:
                    15:95:b4:20:a0:02:f6:60:39:87:a0:89:93:12:d7:
                    1d:f1:30:82:5a:54:cb:a6:70:d9:3f:5a:f4:ff:0e:
                    b7:e5:28:ed:86:81:7d:62:8c:06:8f:c6:fe:69:96:
                    58:6f:bf:73:29:5c:c1:31:a5:d3:ae:da:3f:71:7f:
                    98:5e:6d:95:68:11:fd:f1:d0:07:aa:45:50:09:71:
                    6a:d2:a7:63:0e:ec:11:cb:8e:4d:55:2b:5d:84:7a:
                    b5:46:c0:a6:01:b6:a8:2d:b3:16:17:cb:ee:e3:05:
                    80:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B7:1C:9F:EA:C9:BA:30:81:D6:E0:9B:60:E3:6C:73:CE:6C:D3:EA
            X509v3 Authority Key Identifier:
                keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:54:a6:72:8d:9e:11:7c:eb:b9:5c:d6:fd:9c:6b:86:97:
         d3:3d:de:f1:0c:c4:14:78:1f:0a:93:3a:f8:c4:1f:82:be:ef:
         f0:3b:68:2b:c9:b5:5d:52:3f:41:ee:fd:43:f0:2f:0f:53:14:
         2b:44:bb:ed:a7:11:cf:5f:bb:bc:6b:d6:a2:4e:0e:b5:9f:bb:
         5c:67:b2:cb:41:4a:3f:60:b4:28:d9:35:48:2a:0c:14:5f:1d:
         58:e0:c3:cf:4c:d5:b7:46:90:f7:d2:dd:8f:80:42:20:61:c3:
         e7:b9:80:92:78:4f:5e:a3:a4:2e:8d:33:c6:c4:25:a6:d4:04:
         9a:49:7e:ca:28:29:91:0f:f5:98:d5:ed:c9:6b:d6:81:2b:85:
         c5:ed:bd:7d:c8:98:91:20:57:af:af:e2:33:ca:94:2d:0d:b9:
         a7:7a:9c:5b:3d:0b:a1:d4:11:ac:4c:84:ee:92:a0:e7:0d:0e:
         34:b4:f9:a2:2a:7b:8e:bc:7c:63:70:d9:7b:f3:cb:a0:f3:e5:
         15:51:e6:4d:75:49:5d:3c:e5:d2:45:e7:9c:30:ef:88:92:7f:
         ac:6e:fc:a0:8f:ca:78:43:9e:3e:b0:92:b3:39:ae:d7:23:cd:
         0b:e2:08:3d:bc:3c:0f:fa:95:95:4b:ec:0f:01:b4:4a:56:00:
         3d:8e:ff:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:08 2025 by rpki-client