Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
File:                     vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft (raw, json)
Hash identifier:          zpKVWSUwlTFXeZAMT8I+Jfj41FA7L53bVz/VZVfZjNo=
Subject key identifier:   BD:F9:B3:0D:47:6D:B7:1F:55:16:2C:55:B5:04:8E:E1:46:BE:0A:B3
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Certificate issuer:       /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial:       019510FDEC90CCFF559F44F83E262B4A2FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
Manifest number:          1455
Signing time:             Sun 16 Feb 2025 23:00:31 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:31 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:31 +0000
Files and hashes:         1: 9VNbjYPZNCWhcZlYCO8YbXFUdTs.roa (hash: DW1s4poaFcxeoMfxfTTf75NS52EQcgEZYuwjPKvajE0=)
                          2: TbgjMEdQ0rbdH1wsIeqh_-bYUgk.roa (hash: GE4J211d6K3inNZ5KwcVMOOJlKd9Y0lNHq1APwdB4fA=)
                          3: g1mm45j_OkLlur_SqI7WDyJYFdM.roa (hash: RaLkgB3O9bQ5zciuBh3cX5AYs1JmNx5tm4PsA2iWmaQ=)
                          4: vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl (hash: JancgyEpzeir9zDU+GR4GyurBSJ392+jV/YHS0sqJl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fd:ec:90:cc:ff:55:9f:44:f8:3e:26:2b:4a:2f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
        Validity
            Not Before: Feb 16 23:00:31 2025 GMT
            Not After : Feb 17 23:00:31 2025 GMT
        Subject: CN=bdf9b30d476db71f55162c55b5048ee146be0ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:3b:97:d4:a4:b4:a2:5b:83:83:cf:25:f1:
                    bf:5e:cc:9e:10:a4:03:c4:c7:e3:f0:b4:bb:28:b1:
                    5f:31:4e:91:28:9e:64:33:88:97:7f:c9:62:0b:84:
                    ac:46:5e:31:e4:5a:4d:f4:bb:27:dc:b4:61:33:da:
                    50:e0:a0:aa:23:5e:54:7b:d1:2a:68:a3:b1:56:af:
                    a4:f0:99:55:58:1a:ec:d9:09:64:db:15:35:64:5f:
                    3e:2c:97:0e:84:23:23:bb:2c:98:5c:b6:8a:23:f6:
                    32:5a:bc:ae:7b:41:85:36:fc:f6:65:c0:ef:83:88:
                    36:d7:48:45:cd:09:da:ce:02:dc:f8:93:d5:7d:c9:
                    62:96:b7:9b:ca:ff:73:2f:c0:f2:e0:14:f5:e5:0c:
                    f5:db:21:d3:7b:fd:c1:4c:72:a3:a2:39:2d:ce:81:
                    2d:a8:e1:6f:9b:22:8b:84:c3:ca:4b:dd:9b:33:5d:
                    e4:89:ce:bf:73:b8:8a:3d:ef:33:9e:64:8e:66:d9:
                    85:e0:bd:8e:6d:3e:00:6f:8e:0b:55:c7:ca:24:b0:
                    1a:1e:1c:c2:2d:af:ae:15:ab:74:bc:39:60:58:0b:
                    89:73:65:9b:8f:b5:1a:82:36:4a:cb:20:44:98:b5:
                    ba:21:6c:b8:61:de:a2:95:d9:15:bb:5c:44:31:54:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F9:B3:0D:47:6D:B7:1F:55:16:2C:55:B5:04:8E:E1:46:BE:0A:B3
            X509v3 Authority Key Identifier:
                keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:04:b5:b1:41:e1:79:e6:14:33:35:7d:0d:86:63:23:78:89:
         78:1d:cd:91:36:8b:d2:b0:76:f5:e2:d8:04:05:80:72:ce:01:
         a5:fe:ef:17:04:68:61:dd:98:ff:da:45:15:ed:b6:ee:1c:1e:
         eb:3d:20:d6:29:b5:16:14:74:3f:f1:51:94:81:89:7d:6b:09:
         3c:4d:40:70:e7:8c:30:29:e5:c1:f2:aa:c5:77:82:8e:0d:d3:
         65:f0:98:ee:a6:bb:36:79:ff:71:d9:81:1b:06:df:41:d6:c1:
         de:89:38:39:98:cc:26:24:56:9d:9e:78:26:1b:10:25:b0:d2:
         63:a3:15:d4:21:bf:a7:3c:65:8a:0a:50:c7:9f:4f:ae:15:a4:
         95:1b:e0:42:5e:71:62:31:4c:2e:84:95:ef:7e:d4:2a:68:41:
         f9:e8:c0:57:fe:f0:98:1c:ba:65:7e:2d:ab:f9:73:0b:65:87:
         8b:5e:1f:e5:c2:71:d4:8e:9b:dc:d6:f4:39:93:1e:5f:81:90:
         98:ce:c4:f9:02:dc:63:90:fc:7a:c6:ec:21:ba:bb:57:d1:bd:
         38:0f:20:5f:6a:d1:af:dd:a2:9e:eb:32:f6:37:46:63:97:60:
         1a:ef:c9:d9:d7:d0:9c:1e:ff:0a:08:d8:f2:de:4c:ec:43:b6:
         5e:f3:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:53 2025 by rpki-client