Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
File:                     iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json)
Hash identifier:          bn7/F1tg0dXkXCQDoRUXwyGPfaxJe28eXY3lr5yaxAI=
Subject key identifier:   CC:15:B1:95:55:70:4C:05:A4:47:C6:EC:B8:09:07:6B:61:E0:8B:9A
Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
Certificate issuer:       /CN=88eafafff81b95dcee57727057ed67114a338193
Certificate serial:       0194C4D117302C1C115E8CADA83D07B0159B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
Manifest number:          0456
Signing time:             Sun 02 Feb 2025 04:00:24 +0000
Manifest this update:     Sun 02 Feb 2025 04:00:24 +0000
Manifest next update:     Mon 03 Feb 2025 04:00:24 +0000
Files and hashes:         1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: Oa+JZL0gTvj+wECmxelPPRKgRGPSUtw+xsYcBuWvYp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:d1:17:30:2c:1c:11:5e:8c:ad:a8:3d:07:b0:15:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88eafafff81b95dcee57727057ed67114a338193
        Validity
            Not Before: Feb  2 04:00:24 2025 GMT
            Not After : Feb  3 04:00:24 2025 GMT
        Subject: CN=cc15b19555704c05a447c6ecb809076b61e08b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:10:db:83:0d:d0:27:4c:23:7c:37:01:6f:
                    84:d2:c9:48:84:7d:6f:3c:74:28:65:14:78:bd:36:
                    8c:95:95:76:55:23:be:8e:b6:df:58:8e:08:5a:d9:
                    23:5d:88:82:69:95:b4:73:5a:df:2e:98:b5:87:91:
                    b1:19:45:57:24:46:12:fc:03:67:87:62:21:02:c0:
                    57:34:ce:be:ce:27:97:16:b3:5c:ca:d8:9e:18:cb:
                    16:9d:53:44:bd:50:32:9b:51:d8:a2:15:db:f6:a9:
                    71:df:c5:36:86:19:d5:04:34:e3:de:2f:54:e2:9c:
                    57:c6:8d:62:aa:d8:22:87:33:18:53:86:1b:66:6f:
                    60:00:56:25:5f:b8:8b:2e:eb:09:87:07:0c:72:11:
                    dd:2d:01:f1:28:c0:38:85:1d:fd:d1:b9:e1:9b:7c:
                    42:13:31:83:51:bc:01:cd:7a:60:fe:f8:e0:66:b1:
                    78:af:34:21:fe:1d:1f:4e:ce:7d:50:a1:8b:62:a1:
                    ba:51:36:b6:a7:8c:5d:7a:48:05:64:cd:2a:cd:6a:
                    25:4a:2c:ee:9e:a8:6f:5c:6a:3d:2b:75:94:7b:74:
                    5d:25:a3:d4:6d:c8:6e:0b:dc:1b:69:24:a7:46:b3:
                    17:37:7e:2c:69:fe:01:75:dd:8f:48:04:f0:e0:4b:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:15:B1:95:55:70:4C:05:A4:47:C6:EC:B8:09:07:6B:61:E0:8B:9A
            X509v3 Authority Key Identifier:
                keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:51:4f:01:11:9b:ec:64:0e:8f:f7:03:a5:0a:09:f8:0f:d1:
         fc:8c:11:c3:38:ea:59:de:dc:41:07:2a:b3:ff:eb:b3:b7:8f:
         2b:5e:5e:43:a0:2e:28:06:35:e9:fc:de:40:27:a7:93:d7:a5:
         e3:42:d6:ee:08:aa:3c:aa:50:be:a0:1a:49:5c:49:91:0d:5d:
         45:bf:73:3e:4d:ef:06:ef:a9:18:b6:58:d2:bb:4d:3a:79:84:
         8e:03:50:7b:fc:e5:c9:c3:f4:30:de:e3:81:87:41:97:b1:02:
         f8:54:af:5e:ad:f1:59:bd:f3:46:fc:2e:5b:16:62:1c:99:e6:
         74:6e:2c:f5:6e:d5:95:05:c6:13:2c:a6:fe:8c:7e:5e:59:e5:
         15:3a:b2:c4:65:e8:2f:84:5f:1e:57:95:eb:68:43:68:da:36:
         05:2f:c7:1b:94:69:a1:13:d2:94:5f:71:7c:04:5b:ed:c8:96:
         1c:63:a0:5d:99:0b:61:6d:96:00:b7:9b:5a:f3:29:05:2e:0e:
         ed:b1:e0:8c:ec:94:06:6a:33:90:61:8a:c7:c2:c8:f6:a9:1c:
         f4:2e:47:b8:26:54:72:96:be:0f:9e:fb:74:94:da:43:db:9a:
         31:05:63:ad:81:b0:6e:dd:4e:df:74:e1:bf:28:08:02:32:3f:
         1d:eb:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:00:00 2025 by rpki-client