Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/97e0f7-9c9c-4eea-a650-22ccccd5b8b5/1/d_4HosJ0vbeoiJmH4vgpV12t9R8.mft
File:                     d_4HosJ0vbeoiJmH4vgpV12t9R8.mft (raw, json)
Hash identifier:          M8JiYl3n7uaMPegvTmD2O9kE87KWqFlWM8GnB31LP7w=
Subject key identifier:   37:CC:C9:50:C6:5E:1D:52:84:FC:B5:8B:1E:D8:84:9D:1F:F0:57:84
Authority key identifier: 77:FE:07:A2:C2:74:BD:B7:A8:88:99:87:E2:F8:29:57:5D:AD:F5:1F
Certificate issuer:       /CN=77fe07a2c274bdb7a8889987e2f829575dadf51f
Certificate serial:       0194C42C2DFDC1EF5D40E87B631E1F58A540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_4HosJ0vbeoiJmH4vgpV12t9R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/97e0f7-9c9c-4eea-a650-22ccccd5b8b5/1/d_4HosJ0vbeoiJmH4vgpV12t9R8.mft
Manifest number:          0122
Signing time:             Sun 02 Feb 2025 01:00:16 +0000
Manifest this update:     Sun 02 Feb 2025 01:00:16 +0000
Manifest next update:     Mon 03 Feb 2025 01:00:16 +0000
Files and hashes:         1: d_4HosJ0vbeoiJmH4vgpV12t9R8.crl (hash: 446tuQzu1hI5JLLEUg61SlaPUmVUM3gUgw1YAQCCe2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/97e0f7-9c9c-4eea-a650-22ccccd5b8b5/1/d_4HosJ0vbeoiJmH4vgpV12t9R8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/97e0f7-9c9c-4eea-a650-22ccccd5b8b5/1/d_4HosJ0vbeoiJmH4vgpV12t9R8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_4HosJ0vbeoiJmH4vgpV12t9R8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:2c:2d:fd:c1:ef:5d:40:e8:7b:63:1e:1f:58:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77fe07a2c274bdb7a8889987e2f829575dadf51f
        Validity
            Not Before: Feb  2 01:00:16 2025 GMT
            Not After : Feb  3 01:00:16 2025 GMT
        Subject: CN=37ccc950c65e1d5284fcb58b1ed8849d1ff05784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:ad:03:54:77:a1:e8:ad:73:b6:71:21:c0:
                    64:1a:8e:d3:98:88:a6:2f:41:fc:6a:24:a6:b7:ab:
                    34:21:38:fe:cb:0a:d3:af:9a:f6:1a:37:c1:0d:23:
                    57:af:e1:2e:ab:82:eb:b9:c3:78:d2:c7:f7:1a:d6:
                    4b:b3:06:68:60:c8:93:c1:ab:68:b2:b8:f9:ce:13:
                    a6:c4:64:38:58:10:fa:30:e1:c4:5d:a3:39:f1:07:
                    ac:bd:44:63:ee:6b:7e:e8:da:32:fa:60:ce:df:b0:
                    50:ca:35:67:02:7f:91:5a:e7:86:c2:73:85:5a:96:
                    bd:58:b3:7a:65:bf:13:dc:3c:c9:0e:f6:c5:5a:a7:
                    bc:3d:2e:49:42:ad:52:65:9c:64:3c:07:17:2b:bd:
                    15:44:e3:00:40:91:65:b3:9d:03:4d:46:14:71:d5:
                    89:5c:a3:5f:ca:67:83:9e:95:12:5c:b9:00:0a:c1:
                    14:3a:f5:07:37:d2:8a:16:2e:91:10:d4:1a:49:06:
                    0c:2f:30:09:6c:83:67:8e:22:72:f6:0e:c2:73:cf:
                    b3:48:2c:03:ec:95:bb:e7:75:4e:41:7e:5d:b6:6d:
                    de:8a:2c:8f:f7:82:8d:2e:03:7e:96:cc:9a:00:5f:
                    e4:52:af:55:a5:70:a9:98:44:5f:cc:19:64:26:1e:
                    7c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CC:C9:50:C6:5E:1D:52:84:FC:B5:8B:1E:D8:84:9D:1F:F0:57:84
            X509v3 Authority Key Identifier:
                keyid:77:FE:07:A2:C2:74:BD:B7:A8:88:99:87:E2:F8:29:57:5D:AD:F5:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_4HosJ0vbeoiJmH4vgpV12t9R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/97e0f7-9c9c-4eea-a650-22ccccd5b8b5/1/d_4HosJ0vbeoiJmH4vgpV12t9R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/97e0f7-9c9c-4eea-a650-22ccccd5b8b5/1/d_4HosJ0vbeoiJmH4vgpV12t9R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c4:fa:34:ff:4c:04:cc:e2:99:e6:50:8f:87:5c:80:f0:58:
         06:af:92:c1:c8:b1:2e:4d:42:68:88:35:f9:0d:77:da:28:95:
         12:a9:26:97:9e:57:1d:ae:e1:7f:c8:cd:37:04:dd:af:49:1a:
         93:31:e5:84:6d:17:fd:45:8e:39:e0:b8:88:03:0e:79:dd:80:
         88:af:98:17:85:82:90:ca:25:eb:67:00:70:41:c6:d0:41:45:
         6e:30:15:78:8d:cc:b1:ce:21:4f:14:82:d6:02:a6:81:d7:e0:
         98:74:2e:30:6d:76:ef:ae:1f:07:95:65:0b:f3:b2:d5:c1:33:
         1c:30:b7:b3:45:19:77:e4:c3:91:da:5f:f5:2b:8f:eb:18:c9:
         a8:b0:7a:9f:9a:bb:24:2d:d3:f7:49:a8:9d:65:e0:c6:81:f4:
         f6:2a:f6:82:be:40:07:d1:fd:c6:ec:2f:ee:03:24:6d:09:23:
         da:df:4f:aa:5b:4c:07:20:2e:fc:81:5c:0a:4a:08:f9:3c:69:
         47:0d:81:9f:38:b4:1a:e4:d6:6e:42:6a:a4:13:f0:5a:cb:3d:
         de:38:84:f5:ae:7f:e5:f6:83:7b:32:eb:19:fa:eb:96:07:6e:
         3e:84:37:b2:dc:92:7d:1b:4f:b0:a4:a0:16:c9:1f:9d:05:fa:
         f7:3d:77:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:51 2025 by rpki-client