Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File:                     wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier:          eAkTIxn5d0bdW+05s0OrD6+chcyHlLQeExvCO6v2UH4=
Subject key identifier:   12:C1:EE:71:F4:9A:D4:96:DB:86:6E:0A:94:50:0A:F9:EF:1D:B9:C3
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer:       /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial:       0194C3F5D305092F808247413993429CDF5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number:          142B
Signing time:             Sun 02 Feb 2025 00:00:54 +0000
Manifest this update:     Sun 02 Feb 2025 00:00:54 +0000
Manifest next update:     Mon 03 Feb 2025 00:00:54 +0000
Files and hashes:         1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: IhNudx9l7yKKHWNrV/ToeTfRl9b94mVnK8bSTxJ7qFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:f5:d3:05:09:2f:80:82:47:41:39:93:42:9c:df:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
        Validity
            Not Before: Feb  2 00:00:54 2025 GMT
            Not After : Feb  3 00:00:54 2025 GMT
        Subject: CN=12c1ee71f49ad496db866e0a94500af9ef1db9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:12:89:fd:d0:52:a8:b4:be:36:f7:40:35:a5:
                    ea:53:56:4e:23:1b:ad:09:56:c5:d1:8a:90:32:7d:
                    64:c3:cb:c0:37:22:2a:62:9f:a7:16:3f:c1:33:85:
                    e1:74:13:7b:22:32:47:a7:50:7a:07:ad:69:15:40:
                    84:9a:33:a9:c5:1f:0b:c4:69:b6:a3:71:dd:77:b1:
                    a8:9d:cf:4b:d3:dd:f6:40:1d:6d:0e:c1:2f:0e:c3:
                    14:81:18:3b:75:f6:0f:1e:df:04:3c:c6:af:2c:1a:
                    c5:c1:f7:4b:02:cb:8a:e1:e5:9b:8b:0a:b5:90:1e:
                    63:ab:19:fb:40:dc:81:ad:13:82:7d:25:35:d1:2c:
                    5e:a3:aa:cd:d1:91:d5:7f:bb:57:fb:98:4e:77:23:
                    21:17:72:a6:69:3e:05:ae:03:2f:48:65:7a:56:56:
                    36:e1:b4:ab:ab:24:90:14:08:6f:c4:1c:c0:a6:d6:
                    2a:46:15:9f:9d:49:2c:3e:b7:e2:29:e1:42:28:fc:
                    5d:9a:9f:b5:61:41:be:29:29:8d:d6:64:4a:11:ae:
                    89:85:a4:7e:61:a6:01:48:a5:50:ee:a2:07:68:e7:
                    a5:6e:cb:db:86:6f:46:b6:6d:df:9c:df:a1:32:7a:
                    c8:0c:e3:db:2f:99:da:14:2d:d6:cc:92:8e:47:c5:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C1:EE:71:F4:9A:D4:96:DB:86:6E:0A:94:50:0A:F9:EF:1D:B9:C3
            X509v3 Authority Key Identifier:
                keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:12:12:fc:c0:4f:7f:83:d1:59:b1:64:87:45:45:ec:cc:
         7f:5a:24:31:48:50:4e:37:c8:20:2b:53:b3:3e:9d:cc:21:cd:
         22:f0:95:6b:6b:42:1f:1a:ae:48:0d:ed:cd:1c:33:b4:ae:59:
         86:8d:43:dd:85:18:a7:c9:ea:c1:5e:27:fe:02:ef:41:10:c7:
         89:bc:b5:14:45:95:22:a9:76:4f:30:c9:95:b3:f3:a4:15:27:
         c0:d4:86:bc:d5:67:d2:10:86:03:00:7a:43:10:2b:69:5e:20:
         94:d0:a3:6a:d4:ca:9a:5f:89:9c:10:31:69:69:e3:ca:1a:f3:
         3e:23:d2:f4:a8:6d:11:e8:12:30:81:8c:c1:c8:81:0d:aa:a8:
         f9:99:a0:cc:7f:ff:88:0b:65:7f:69:8c:83:b3:35:a7:27:50:
         62:6c:84:f9:06:da:7a:c6:1d:f4:ec:eb:0b:e5:58:4e:f7:29:
         a6:d3:b6:29:05:c8:73:6f:a5:d7:18:a1:47:11:66:c5:d4:ef:
         82:18:13:81:dc:ef:ed:14:2f:a0:40:64:b1:15:d3:39:7a:1c:
         3e:fa:31:89:38:0c:7e:26:37:e4:af:1f:3e:6a:42:3a:92:fa:
         48:ab:c7:0c:a4:da:ed:69:1d:0c:8e:56:a9:27:74:2c:32:1d:
         10:86:28:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:43 2025 by rpki-client