Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File:                     25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier:          VzQ1oLuBIZhQ/qf1WY+HLvxOWptAE+iyG+2stQWTCZA=
Subject key identifier:   D1:85:E3:C0:44:F0:10:9C:F2:38:0E:5B:AE:E2:F5:B6:4C:5C:90:E6
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer:       /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial:       018F4B6DC106A78FABA76FAD47E9DEAD2172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number:          115C
Signing time:             Mon 06 May 2024 01:03:54 +0000
Manifest this update:     Mon 06 May 2024 01:03:54 +0000
Manifest next update:     Tue 07 May 2024 01:03:54 +0000
Files and hashes:         1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: R6Ap1BVsKUxqdWruoUXznlcjkko+nXCjqUA9XpG17ns=)
                          2: dmoZGtVAdDoZtP-EaCcNAnaQQkE.roa (hash: P/sAZm0O9EyE4pb9A+0xwEwCIE5vGUQkTZESJ1HvvTM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:c1:06:a7:8f:ab:a7:6f:ad:47:e9:de:ad:21:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
        Validity
            Not Before: May  6 01:03:54 2024 GMT
            Not After : May  7 01:03:54 2024 GMT
        Subject: CN=d185e3c044f0109cf2380e5baee2f5b64c5c90e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:20:1a:e8:c7:38:15:c9:a8:ac:6c:e2:ea:17:
                    0c:39:47:0c:ea:2a:ac:51:61:8c:94:fe:f2:64:81:
                    c2:12:c7:08:ee:b3:5d:14:0f:93:d8:38:01:e1:fa:
                    1f:c3:85:21:ad:db:b4:86:6c:ed:0b:d2:5a:11:8d:
                    ef:3b:49:f7:71:14:dd:bd:0c:8d:c9:6e:56:47:d5:
                    6c:44:cb:b4:cd:39:ef:07:1c:a7:f6:15:c6:38:ad:
                    ad:e0:13:da:70:44:c4:a2:6c:e3:71:d7:c2:29:bd:
                    ef:ff:53:2f:cd:12:ec:c7:f5:e6:6a:e4:3e:54:e7:
                    a3:71:27:12:a7:77:f3:73:1f:29:92:c0:53:c5:0d:
                    71:9c:e2:21:62:49:6a:87:10:49:1c:03:e5:db:78:
                    53:c4:49:97:f2:66:31:d3:ad:a0:0a:d0:49:4f:d2:
                    e7:43:70:bf:1d:0c:56:a8:30:56:41:dd:3e:46:0d:
                    fb:c9:b6:a3:f9:1a:c2:c5:6d:63:b7:2e:a6:b1:26:
                    58:77:a3:a9:59:fb:29:d2:3e:06:5d:e4:24:04:e4:
                    38:46:69:09:e7:32:07:30:92:0a:1e:2a:58:8b:5b:
                    31:1b:66:dc:d2:f6:8d:1a:36:95:7e:06:4a:ba:3a:
                    3f:4c:5d:ba:6b:5c:fa:ec:ed:97:06:e7:8f:38:4f:
                    d9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:85:E3:C0:44:F0:10:9C:F2:38:0E:5B:AE:E2:F5:B6:4C:5C:90:E6
            X509v3 Authority Key Identifier:
                keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:26:5d:17:5a:04:4d:ba:af:2c:de:7f:8f:93:f8:3f:bd:f7:
         84:91:22:d7:c6:d1:62:f4:3b:b8:ce:c5:91:fb:50:33:38:74:
         93:81:1b:54:34:91:85:6c:4b:89:76:3f:8a:bd:58:32:e3:ad:
         8e:53:2e:8a:0a:45:a0:37:93:64:dc:b8:bb:5c:6c:3f:dd:a8:
         ad:25:2a:52:85:3c:03:d7:07:35:cb:88:c2:54:dd:29:e8:91:
         3f:b9:e6:ce:b3:83:f8:c2:47:3f:5f:06:7e:99:e7:75:03:fa:
         23:01:48:7f:85:db:16:4e:69:40:b2:49:91:f9:2c:8e:0e:f3:
         e9:ad:8b:ac:aa:6f:bf:cb:79:a7:23:2e:66:01:25:bf:4a:28:
         fa:2c:09:f5:37:a4:0c:4c:3b:c6:13:84:8e:ca:f5:0e:20:a5:
         80:6b:94:dd:76:14:aa:5d:9d:e0:96:f5:09:17:77:f2:16:db:
         46:d5:42:2e:c4:41:05:92:86:91:13:94:88:d2:f3:5c:8c:95:
         e0:df:cf:8a:45:f6:6b:d5:f1:e0:33:a5:07:5d:9c:7c:a0:d9:
         41:9b:74:9b:9a:e9:e0:b6:2e:40:87:9b:ba:b9:83:96:03:af:
         e8:19:22:8f:f6:f2:b8:10:d9:9a:eb:20:d7:f4:09:bc:ff:40:
         6a:f2:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:45:10 2024 by rpki-client on console-ams.rpki-client.org