Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File:                     1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier:          dTSxjk/l7CaNl0g924tEJQuGzGSAntc1YiJcoaelJm4=
Subject key identifier:   FC:F7:45:11:9E:97:A4:9D:F1:84:8E:33:25:91:49:D3:5C:3C:6F:29
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer:       /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial:       01951134BA96802B9D2D94BE88C30DA833DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number:          1454
Signing time:             Mon 17 Feb 2025 00:00:23 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:23 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:23 +0000
Files and hashes:         1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: Z+/MiEktJp0Ti37lQxHaYYiZ0pmy4TbG1jaoF8rczUQ=)
                          2: l3JzatKnSb-qTPQjQ9VOzx8MD7g.roa (hash: 40hMQclA6AyvTYjGgbc8RhGg1fGmdxgMO6uT9Avjx2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:ba:96:80:2b:9d:2d:94:be:88:c3:0d:a8:33:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
        Validity
            Not Before: Feb 17 00:00:23 2025 GMT
            Not After : Feb 18 00:00:23 2025 GMT
        Subject: CN=fcf745119e97a49df1848e33259149d35c3c6f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:11:95:60:3d:4b:5a:ac:92:08:98:9f:92:
                    46:77:0a:ee:30:10:53:0f:63:dc:25:ae:36:6a:f4:
                    81:a3:b7:98:f4:d2:ad:b7:79:19:9b:61:6f:66:c8:
                    34:9d:59:75:cf:eb:5e:33:46:61:34:24:6d:b4:5b:
                    c8:28:7a:cc:03:34:d0:6b:ae:34:94:64:d0:af:32:
                    66:91:66:62:aa:9d:28:73:a7:ed:dd:cf:59:0a:c6:
                    3e:5b:f5:a5:e5:92:3b:98:a4:94:9a:df:5f:b3:5a:
                    0c:85:5e:8b:0f:b4:ef:a6:4d:7f:e8:97:17:98:9b:
                    10:0e:c5:c2:69:59:fe:00:12:9d:82:42:61:5a:c1:
                    2a:de:dd:e6:09:78:47:82:98:75:31:0d:4d:ac:92:
                    e4:19:b4:d4:a6:e2:ca:10:67:1c:2a:e8:fb:04:26:
                    b9:11:a5:0c:ee:2b:73:4f:2e:7b:83:7d:62:d7:cb:
                    07:7d:0f:f2:50:27:14:86:3f:9f:41:c4:33:46:88:
                    f6:1b:43:9e:7c:26:f9:18:1c:da:66:77:0a:99:02:
                    3f:c0:dd:59:ed:3d:4d:e2:be:77:1e:54:35:63:a7:
                    f9:9b:8d:9f:da:5e:9b:d3:33:34:1d:55:56:24:6c:
                    21:34:8f:4f:0a:70:4e:c3:be:b3:46:f2:bd:35:2d:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:45:11:9E:97:A4:9D:F1:84:8E:33:25:91:49:D3:5C:3C:6F:29
            X509v3 Authority Key Identifier:
                keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f9:0a:c4:93:51:be:91:ce:6b:d8:3c:c9:55:04:cf:86:d3:
         48:33:58:c0:1f:ef:0d:2f:53:dc:44:1c:50:9c:8a:09:86:9d:
         cd:54:36:ca:f4:34:6b:fd:6b:6a:71:b9:57:bc:15:ee:05:e5:
         fc:7d:62:82:52:68:74:f9:21:ae:3a:f6:5d:55:73:cc:f2:43:
         56:65:a5:15:b1:48:de:7b:86:07:0b:7a:3c:7f:17:40:40:ad:
         03:5d:d6:ea:39:91:c4:f3:8e:c9:07:ac:13:43:16:e0:04:35:
         d1:c2:30:a1:23:c4:99:dc:f7:d0:d3:f1:ff:c0:80:13:07:97:
         f1:03:62:85:be:f2:bc:25:54:ec:14:f8:81:23:fc:10:e3:ea:
         1c:29:b1:f7:da:12:e8:12:6f:f1:bb:c0:e4:4b:21:41:ae:ce:
         08:e4:75:0f:5c:59:67:98:b1:ec:54:f6:c5:d7:a0:53:ae:07:
         b3:a5:67:16:98:75:4b:08:84:ec:d3:5e:92:4e:9c:af:95:93:
         c9:c8:2c:28:89:50:f8:45:46:8e:81:80:e3:ba:3a:66:50:ec:
         29:d6:f9:5c:d8:20:54:3e:4b:3b:63:ae:33:4d:87:a1:93:e9:
         fc:f9:e5:61:93:77:ce:6b:ca:31:57:0e:85:99:db:a3:4e:c6:
         36:b7:66:17
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZURNLqWgCudLZS+iMMNqDPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzMyMDk2MjVlMmEwM2RkZWVjZjkxYmI0ODA1NDhlNTcy
OWQ0NzkwHhcNMjUwMjE3MDAwMDIzWhcNMjUwMjE4MDAwMDIzWjAzMTEwLwYDVQQD
EyhmY2Y3NDUxMTllOTdhNDlkZjE4NDhlMzMyNTkxNDlkMzVjM2M2ZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOcRlWA9S1qskgiYn5JGdwruMBBT
D2PcJa42avSBo7eY9NKtt3kZm2FvZsg0nVl1z+teM0ZhNCRttFvIKHrMAzTQa640
lGTQrzJmkWZiqp0oc6ft3c9ZCsY+W/Wl5ZI7mKSUmt9fs1oMhV6LD7Tvpk1/6JcX
mJsQDsXCaVn+ABKdgkJhWsEq3t3mCXhHgph1MQ1NrJLkGbTUpuLKEGccKuj7BCa5
EaUM7itzTy57g31i18sHfQ/yUCcUhj+fQcQzRoj2G0OefCb5GBzaZncKmQI/wN1Z
7T1N4r53HlQ1Y6f5m42f2l6b0zM0HVVWJGwhNI9PCnBOw76zRvK9NS0xDQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPz3RRGel6Sd8YSOMyWRSdNcPG8pMB8GA1UdIwQY
MBaAFPlzIJYl4qA93uz5G7SAVI5XKdR5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YTWdsaVhpb0QzZTdQa2J0SUJVamxjcDFIay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvYWY1NGU4LWJkNjMtNDI3ZC04Y2M4
LWY0ZWNlYmJiMWVjMi8xLzEtWE1nbGlYaW9EM2U3UGtidElCVWpsY3AxSGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVkL2FmNTRlOC1iZDYzLTQyN2QtOGNjOC1mNGVjZWJiYjFl
YzIvMS8xLVhNZ2xpWGlvRDNlN1BrYnRJQlVqbGNwMUhrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfkK
xJNRvpHOa9g8yVUEz4bTSDNYwB/vDS9T3EQcUJyKCYadzVQ2yvQ0a/1ranG5V7wV
7gXl/H1iglJodPkhrjr2XVVzzPJDVmWlFbFI3nuGBwt6PH8XQECtA13W6jmRxPOO
yQesE0MW4AQ10cIwoSPEmdz30NPx/8CAEweX8QNihb7yvCVU7BT4gSP8EOPqHCmx
99oS6BJv8bvA5EshQa7OCOR1D1xZZ5ix7FT2xdegU64Hs6VnFph1SwiE7NNekk6c
r5WTycgsKIlQ+EVGjoGA47o6ZlDsKdb5XNggVD5LO2OuM02HoZPp/PnlYZN3zmvK
MVcOhZnbo07GNrdmFw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:25 2025 by rpki-client