Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
File:                     F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft (raw, json)
Hash identifier:          Co41yCGHM10azu0CuyIY2pWh2+pVER8XPeGYZXPbPsQ=
Subject key identifier:   8B:B6:8F:AC:45:3A:8F:4C:BD:0F:7D:08:53:99:A0:DD:FA:7D:31:7A
Authority key identifier: 17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03
Certificate issuer:       /CN=17ec31441691b859b347fd17217a5e5d1b0be303
Certificate serial:       0194BABB40D5AB8D9E38C14C63C75AAA078C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
Manifest number:          0556
Signing time:             Fri 31 Jan 2025 05:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 05:00:21 +0000
Files and hashes:         1: F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl (hash: /IMs2shglFI6XEuDA+072zsoJhkl7y6GAE6KTvHoQ98=)
                          2: ln-QKhvlXAjUZIdfkRE5U6oCsi8.roa (hash: gwe72yNPdMd17mqjkFbILfyleB7233AKjzKUNQmZ/xM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:bb:40:d5:ab:8d:9e:38:c1:4c:63:c7:5a:aa:07:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec31441691b859b347fd17217a5e5d1b0be303
        Validity
            Not Before: Jan 31 05:00:21 2025 GMT
            Not After : Feb  1 05:00:21 2025 GMT
        Subject: CN=8bb68fac453a8f4cbd0f7d085399a0ddfa7d317a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0a:03:70:46:1a:5d:36:19:01:e5:f1:3d:df:
                    69:8d:6b:36:d4:a8:e8:dc:0e:08:4e:26:8a:dd:ff:
                    42:5c:7f:c0:04:ca:b2:84:07:16:9c:c0:e2:27:5f:
                    12:12:db:aa:34:b3:bb:fe:10:51:21:ec:f4:5e:6a:
                    c1:6b:54:8e:1c:15:de:65:02:54:a2:55:98:30:cf:
                    31:19:cc:4f:6e:c3:f8:ee:5b:c5:26:51:3b:13:68:
                    d7:7c:28:40:10:79:47:9b:ea:7d:94:27:69:8f:3e:
                    2e:08:29:14:82:23:96:a5:f6:01:81:03:b3:03:9d:
                    74:e8:39:03:45:7c:36:28:81:18:d9:c3:d7:e5:1d:
                    06:c3:34:25:ae:65:dd:3c:17:96:a3:8f:ff:1f:79:
                    94:da:b6:a1:fd:02:43:3e:01:80:bb:d3:53:07:6a:
                    e2:dd:e9:cf:4a:f7:8b:03:a7:f6:cd:7f:f2:84:db:
                    b9:7c:b8:cf:9a:6f:3e:35:84:82:eb:86:3c:5f:2a:
                    aa:0d:4d:bc:30:89:e9:97:f3:74:b3:5d:af:dd:c3:
                    de:8a:d9:f3:c6:96:98:43:9f:d9:c8:d8:74:c9:f8:
                    f6:94:1c:83:0c:f0:41:94:70:f2:a9:bc:78:59:c5:
                    67:37:58:21:50:e2:a6:d5:2b:a2:b2:ef:5e:d0:85:
                    60:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B6:8F:AC:45:3A:8F:4C:BD:0F:7D:08:53:99:A0:DD:FA:7D:31:7A
            X509v3 Authority Key Identifier:
                keyid:17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:a9:53:eb:fb:8b:56:ce:97:30:53:94:73:86:13:b5:96:11:
         3d:5f:22:a6:11:c4:5a:4c:c1:93:35:cc:6c:54:3b:cf:f3:96:
         04:17:e9:28:d2:d7:75:ac:14:7f:75:1f:a6:08:52:9b:2a:d6:
         84:52:02:51:dc:47:b9:0f:0c:eb:46:5d:e1:7f:90:f7:84:03:
         cb:b2:4f:e8:92:59:26:93:ca:d4:09:4d:21:bb:3c:f5:b5:7d:
         84:7f:6c:98:22:28:75:9c:d2:86:bb:0a:7d:0a:7f:ec:f9:e5:
         60:da:12:30:86:3e:42:3f:29:8d:71:47:5b:14:be:d8:12:60:
         8e:2f:3b:b3:5e:7b:11:e7:a6:11:bb:e4:7e:a2:dd:91:cc:9c:
         0d:f4:20:2e:7c:c0:63:d8:fa:cd:ee:bf:60:2f:df:9b:e3:a8:
         f5:ae:fb:54:20:12:cf:60:ac:e0:87:71:f4:a2:08:0a:fc:9a:
         82:0a:f2:1c:ef:3a:71:89:d7:57:dd:46:0d:81:02:61:81:6e:
         8e:f4:89:e4:cd:a2:0f:ca:6e:25:8e:a5:58:57:8c:b1:ef:c6:
         e2:6b:71:e4:0a:9b:52:9d:42:ab:9c:2e:c9:d8:1f:12:ef:00:
         26:4a:3d:ec:50:c1:e8:54:ef:8e:95:d8:1a:71:2e:ec:d6:f2:
         dc:2d:43:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:29 2025 by rpki-client on console-fra.rpki-client.org