Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
File:                     RHfGmVk64tYbw3QzU7CdIgQp_ko.mft (raw, json)
Hash identifier:          XwzKfQ16ARShdylMwttIS8DHHuVUeB18yCsoXEx5Xao=
Subject key identifier:   4C:B7:2E:62:7A:31:D9:61:02:A1:A7:12:BA:0A:8F:B2:DC:F4:4D:23
Authority key identifier: 44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A
Certificate issuer:       /CN=4477c699593ae2d61bc3743353b09d220429fe4a
Certificate serial:       0194C3BE87DB010C314C75C86FB01E27654E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
Manifest number:          1265
Signing time:             Sat 01 Feb 2025 23:00:31 +0000
Manifest this update:     Sat 01 Feb 2025 23:00:31 +0000
Manifest next update:     Sun 02 Feb 2025 23:00:31 +0000
Files and hashes:         1: RHfGmVk64tYbw3QzU7CdIgQp_ko.crl (hash: unhNOA+VEUxCL1DHgSLmpzN0VRNSXi68A0ilcIuDbfM=)
                          2: RzXNOtmaUP9nPuKXSy-NDZwCUis.roa (hash: lsRLZLjePaa5aCRWbKk0v/Dyt/h5ZUduE7MrGHkvD94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 23:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:be:87:db:01:0c:31:4c:75:c8:6f:b0:1e:27:65:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4477c699593ae2d61bc3743353b09d220429fe4a
        Validity
            Not Before: Feb  1 23:00:31 2025 GMT
            Not After : Feb  2 23:00:31 2025 GMT
        Subject: CN=4cb72e627a31d96102a1a712ba0a8fb2dcf44d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1f:68:49:f5:b1:f4:41:5a:54:a0:da:a0:9d:
                    c5:e0:60:05:86:bf:03:df:88:dc:01:8d:53:f2:32:
                    80:8a:76:33:13:a7:ed:86:5c:0c:69:66:4f:fe:5c:
                    76:53:d6:b5:f7:7b:21:af:cf:cd:9e:71:81:7d:28:
                    ea:f1:55:01:35:1a:77:d2:e8:13:de:e1:ff:bc:e0:
                    86:89:cb:65:bf:21:28:4b:c7:d0:10:fc:f5:7c:e1:
                    c2:aa:1e:01:32:c7:13:a2:35:81:4b:d3:1a:b9:23:
                    3d:8b:6a:f8:24:9e:f0:61:8c:a5:00:24:e9:b4:72:
                    8f:10:b7:ae:f2:60:b4:52:17:bc:7b:38:9e:40:27:
                    e1:ba:64:c8:14:d7:ff:ca:f6:da:39:b1:1c:c6:ff:
                    a6:97:ae:58:77:e1:9e:1f:db:a4:47:da:0e:8f:9a:
                    27:a8:f7:10:3c:a4:a9:eb:d4:0c:c4:3c:97:38:d2:
                    f7:25:3a:96:13:88:d4:a6:25:96:4f:8e:33:98:6e:
                    01:87:df:56:62:d6:26:34:01:b3:cc:14:15:00:d7:
                    d0:2c:da:2b:4f:b0:8f:a8:1d:1b:8c:cf:c1:89:81:
                    2c:2b:83:96:dd:67:68:90:ea:b8:55:c4:01:c0:39:
                    0a:ea:fa:e1:d0:ff:da:b6:34:fb:2e:bd:4e:30:73:
                    62:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B7:2E:62:7A:31:D9:61:02:A1:A7:12:BA:0A:8F:B2:DC:F4:4D:23
            X509v3 Authority Key Identifier:
                keyid:44:77:C6:99:59:3A:E2:D6:1B:C3:74:33:53:B0:9D:22:04:29:FE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHfGmVk64tYbw3QzU7CdIgQp_ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4bc242-6462-411a-b1aa-dd305b851570/1/RHfGmVk64tYbw3QzU7CdIgQp_ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:09:ff:4b:7d:bd:e1:40:c9:74:df:88:e0:7d:1d:9e:81:49:
         f4:dd:08:ac:85:38:ca:78:fb:93:bf:74:a7:18:b4:16:d4:2e:
         98:5f:3b:2c:9c:57:ed:44:7c:c9:f0:a8:6f:fc:23:43:fa:1a:
         60:16:68:02:17:96:b9:af:e3:87:6a:ae:61:d2:73:f7:0a:7c:
         2a:cc:8a:09:3e:01:0a:f6:c4:51:3a:f8:4f:d3:9f:db:a1:1d:
         59:f5:46:22:7c:31:74:ad:cf:db:0c:ee:21:10:c8:f9:a7:d9:
         e1:ba:74:e7:68:1c:e4:d2:15:77:97:ed:cf:25:4d:19:5d:b3:
         ae:5a:41:24:de:b9:21:bd:36:ad:c7:59:55:5d:94:fd:ba:75:
         bd:4b:49:22:0d:65:33:da:df:73:8b:29:ee:e7:91:36:58:fa:
         f6:83:26:53:17:3b:c0:1d:75:cf:de:72:16:ec:d0:9a:65:cd:
         8c:d7:4d:d3:d6:82:6e:01:75:36:42:67:de:4c:1c:7d:d3:ea:
         75:66:ff:ce:a1:aa:2e:78:dd:a7:b5:a6:2c:d6:ea:73:16:53:
         31:fc:56:13:8c:ef:54:3e:6c:8f:28:d6:9e:65:bb:72:6b:78:
         b0:2a:ac:ef:1c:e6:c2:ee:bc:d7:24:a8:f6:7b:81:9d:41:4f:
         9e:aa:4f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:21 2025 by rpki-client