Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
File:                     Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft (raw, json)
Hash identifier:          yOENV6FtJdg7V5di+JusfpwQl1UWyxgzxxDaUoOrico=
Subject key identifier:   6A:3F:04:04:8F:30:9E:4B:5B:7C:FB:7F:78:47:34:84:63:9A:AA:8A
Authority key identifier: 43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
Certificate issuer:       /CN=43a2ef27472a9604bf626fea0e187f8db624134a
Certificate serial:       019510FDD5FB48651AE0B439782132ED9757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
Manifest number:          0BF4
Signing time:             Sun 16 Feb 2025 23:00:25 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:25 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:25 +0000
Files and hashes:         1: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl (hash: EZ4Uz0q+nqlU/MKxzlvIpaQD1WcDT4t+xBba4T2lnKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fd:d5:fb:48:65:1a:e0:b4:39:78:21:32:ed:97:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a2ef27472a9604bf626fea0e187f8db624134a
        Validity
            Not Before: Feb 16 23:00:25 2025 GMT
            Not After : Feb 17 23:00:25 2025 GMT
        Subject: CN=6a3f04048f309e4b5b7cfb7f78473484639aaa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:8f:79:7e:58:33:79:74:61:b7:bc:24:32:
                    04:f1:35:85:08:7a:29:1f:fb:07:67:a9:d0:fa:67:
                    28:62:85:69:5d:5e:e2:17:31:e7:fc:93:22:b8:e0:
                    8a:7b:90:26:37:63:8b:18:a3:67:1e:cf:2b:9f:ff:
                    a0:b5:a8:e1:5f:8c:fb:98:b4:0f:6c:9a:b3:03:52:
                    3e:5d:33:fc:a1:34:c6:76:50:91:45:e1:46:3a:db:
                    25:83:03:08:8c:b0:23:99:09:68:d2:e4:66:45:05:
                    b5:d5:12:04:a3:53:9c:9f:62:58:5f:aa:a3:23:4d:
                    0e:c4:60:6e:21:56:59:3a:cf:8f:2a:e1:20:2c:e3:
                    7c:c5:cc:e4:fc:d6:b2:fc:07:90:e7:97:21:77:71:
                    c2:6f:69:d3:1f:09:07:49:9f:9b:8f:99:dc:6b:f8:
                    42:21:de:bf:20:39:08:95:0e:75:a0:d4:8d:f9:94:
                    40:dc:63:63:0a:97:7c:ce:4a:4c:1e:40:a9:23:71:
                    fb:a5:36:f6:86:a2:c3:7c:6c:0f:d4:27:37:05:8d:
                    e2:be:20:c2:59:fb:1b:c3:5e:03:41:72:6a:2b:23:
                    f0:8c:a2:68:81:0e:25:b0:ac:6c:ef:05:27:3b:c9:
                    fe:b2:21:81:8e:0d:9d:02:2c:8b:ef:52:87:28:1c:
                    82:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3F:04:04:8F:30:9E:4B:5B:7C:FB:7F:78:47:34:84:63:9A:AA:8A
            X509v3 Authority Key Identifier:
                keyid:43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:bd:8d:05:41:58:c7:ff:67:15:d3:e6:0e:e0:be:f4:83:95:
         7d:b6:be:c7:1f:57:a0:49:56:d2:35:40:a7:06:f8:e9:08:94:
         54:47:d5:e4:7f:01:d8:7b:59:90:32:95:81:6d:a0:27:7a:21:
         4b:d7:13:73:cf:f0:99:c5:4b:db:1c:0e:51:9c:c8:99:7d:f2:
         b5:e3:89:82:73:a1:40:2a:eb:18:8f:c1:d6:5e:b4:2c:86:24:
         63:b9:a4:35:1c:7a:2b:8b:d3:b4:f5:f3:20:71:04:5e:fa:13:
         c3:12:07:31:55:de:f5:b4:fa:28:ec:c6:a3:df:fe:84:d7:89:
         26:c8:3e:a3:b9:ec:d0:86:6b:5a:13:95:bf:c3:83:fe:8f:6a:
         a6:dc:dd:17:67:98:91:4d:a3:5f:7a:3e:83:a8:8c:92:be:7a:
         82:87:d2:45:7f:a0:84:36:24:9f:07:a5:f1:19:77:2f:b6:69:
         60:f6:3a:16:3d:42:e6:e8:a0:3e:6e:aa:de:83:e9:24:c0:ce:
         ee:6b:5e:fb:86:cb:4d:14:bd:9e:cc:b3:7f:af:ef:42:bf:1b:
         46:b7:c1:6f:49:46:06:b1:00:25:7f:19:36:23:e6:e2:ef:ed:
         5d:ab:3b:c8:6c:1f:e7:5a:2f:f5:5f:ec:31:8b:85:71:8e:42:
         25:c4:ff:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:01 2025 by rpki-client