Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File:                     kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier:          j4HcvpdumxMuZ0XeJtKJpaV2cq0LRP9NEq8h06BYWvg=
Subject key identifier:   92:A0:CE:44:C1:54:58:C9:C8:64:E1:09:98:83:B1:75:FD:66:E1:42
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer:       /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial:       0195903CFD63BDEB249CEE46F879FA8B72BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number:          1376
Signing time:             Thu 13 Mar 2025 16:01:10 +0000
Manifest this update:     Thu 13 Mar 2025 16:01:10 +0000
Manifest next update:     Fri 14 Mar 2025 16:01:10 +0000
Files and hashes:         1: 64T0ThntK_T_XpMgojpC9XD428A.roa (hash: IOm91WRA7m29s//pvbAOHwECZ0iF5k9Wr7VRSaUENC8=)
                          2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: vxhH1Lc1x1TbVqrMgt7+qRiWyoe818B7G1u5VbyeHco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:3c:fd:63:bd:eb:24:9c:ee:46:f8:79:fa:8b:72:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929f0769c63883573f2703d766462570af5590f3
        Validity
            Not Before: Mar 13 16:01:10 2025 GMT
            Not After : Mar 14 16:01:10 2025 GMT
        Subject: CN=92a0ce44c15458c9c864e1099883b175fd66e142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:c4:5c:9e:47:b8:53:be:b1:39:e9:41:32:
                    fd:f5:46:c2:68:d6:e8:d9:60:70:f7:ec:25:bb:42:
                    ae:62:d1:51:3c:06:46:aa:de:f5:0c:27:fe:a0:85:
                    cf:d9:19:8b:a7:89:85:54:ef:d4:b0:6a:67:8a:aa:
                    83:9d:42:8d:de:9c:a7:6c:5f:d9:7a:1b:d9:71:a6:
                    73:a9:ca:13:01:aa:24:63:dd:3f:94:c4:39:6c:1b:
                    08:b2:b4:7a:8b:ab:45:71:e6:36:d3:14:15:1a:73:
                    9b:87:fb:f9:de:07:5d:59:41:d4:3d:95:c5:00:9c:
                    0d:cb:34:49:9f:a8:48:82:c8:5a:9e:5f:d9:ba:cf:
                    a4:0b:90:fc:e7:ff:bb:a6:74:b8:18:22:ca:03:23:
                    5f:99:66:70:70:c1:2d:77:4b:88:1b:3e:6e:74:7a:
                    17:d6:32:d5:13:80:b8:7c:5a:b8:5d:72:e1:15:e9:
                    f9:12:89:5f:8c:73:c7:d1:a9:4a:64:69:b3:5f:20:
                    cf:be:73:ed:d5:2b:d4:63:a0:b8:ce:c9:9e:14:29:
                    cd:01:27:05:37:6e:77:31:ae:3a:b3:66:c5:30:02:
                    2f:35:5c:18:d7:7a:a4:41:4c:4f:62:c0:18:6c:43:
                    eb:8c:4f:d5:f5:f6:69:f4:86:b3:e5:80:cf:ac:60:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A0:CE:44:C1:54:58:C9:C8:64:E1:09:98:83:B1:75:FD:66:E1:42
            X509v3 Authority Key Identifier:
                keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:49:55:9e:a6:8c:10:00:ff:af:c2:88:e0:3d:1b:a8:56:82:
         9a:ea:f6:51:12:bf:39:58:24:0e:9c:7f:75:fc:ca:35:e7:46:
         f8:bf:5b:60:8b:32:6f:63:32:1e:1c:ab:1a:7f:02:0b:80:51:
         64:cb:b6:ef:7f:24:d5:92:a2:4e:f8:2e:fd:b0:25:27:38:44:
         ad:79:e8:52:c5:7c:af:fc:f6:df:7d:5d:76:40:36:3a:24:61:
         a2:14:d6:f3:71:e4:d6:4f:54:7e:29:a3:ac:cb:b3:f1:cb:c5:
         ac:16:a7:81:e0:2d:c0:7f:2b:1e:75:73:99:4f:c6:c3:f9:77:
         9f:2b:91:d5:3f:60:9d:4d:86:f2:2a:55:cf:25:11:be:d6:8b:
         f8:a0:5f:51:3c:8d:bd:db:18:0d:20:c5:df:52:db:2e:ed:d8:
         01:79:c0:6a:4e:82:a6:27:85:1f:da:57:c3:32:54:a0:4d:92:
         fd:46:ca:92:70:6c:fd:a0:0d:f7:e6:f1:17:3f:d7:01:43:dd:
         c7:78:5f:34:58:d6:58:42:63:c4:32:a5:4c:ea:0e:d4:e4:22:
         ee:a0:dd:0b:93:ae:09:51:a3:4c:7a:a6:50:5b:95:97:d8:41:
         50:7b:55:9f:21:b1:79:8e:5a:d8:cb:08:f7:9e:de:c9:bb:ba:
         b9:9f:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:28 2025 by rpki-client