Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File:                     BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier:          MXvoaB24SM+sPt5kSqLx9Dj37hug7MAbPkzZyPf9iag=
Subject key identifier:   9E:A2:97:E5:C8:59:D7:0C:55:8C:3D:9E:BF:0D:19:5B:1B:74:FA:31
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer:       /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial:       0195116BB58C8A0957CE3C468ECD67811056
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number:          0B3D
Signing time:             Mon 17 Feb 2025 01:00:26 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:26 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:26 +0000
Files and hashes:         1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: AO6KAMCJNLYhuOHBTbu9lz3dvbDJ5J/e0cU+qR8T3cs=)
                          2: EhPdkmEcd5kZgSYia-f_ZpjHYY0.roa (hash: 3TfVzsPjB0vFUIoLoSrG9hGoNnzjzko9raGZf0VmPMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:b5:8c:8a:09:57:ce:3c:46:8e:cd:67:81:10:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
        Validity
            Not Before: Feb 17 01:00:26 2025 GMT
            Not After : Feb 18 01:00:26 2025 GMT
        Subject: CN=9ea297e5c859d70c558c3d9ebf0d195b1b74fa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:d8:95:bf:b3:9c:0c:a0:89:5a:a7:8e:41:
                    9f:6d:38:c2:cc:bb:16:1d:87:be:1d:9c:ed:ca:64:
                    72:0a:01:d8:13:f6:c3:4c:e2:84:fa:4d:77:0e:57:
                    67:ec:47:f4:a9:50:7d:44:98:4f:eb:37:f1:a1:18:
                    76:af:9c:b5:6a:62:43:a2:0a:28:1a:f7:1a:c7:9f:
                    e4:7a:dd:31:2f:80:86:c0:cc:50:f1:79:8b:f1:08:
                    0b:71:a0:01:7b:40:4e:5d:71:b8:43:ed:61:45:11:
                    a3:3c:e4:cf:f7:16:22:1b:70:4b:59:3f:2f:a0:57:
                    9e:ae:c0:07:e5:ae:00:6b:29:9f:29:1e:f1:84:80:
                    bd:7b:b0:c9:62:da:b3:fa:09:b0:21:df:e7:00:63:
                    c5:10:ef:a9:c4:ab:98:f7:e7:09:f7:30:73:81:59:
                    57:7b:91:e5:6a:ac:f6:24:b6:3a:75:02:4c:13:09:
                    ce:ad:4f:2a:40:1f:b4:7d:f6:8b:e5:c6:6d:ad:70:
                    9a:7d:26:03:d7:9e:6c:c6:7c:fd:a3:21:86:69:c1:
                    06:7e:58:2c:33:af:69:22:9f:43:e8:59:dd:53:8f:
                    2b:98:1a:fa:49:e8:74:34:52:4c:7b:e6:60:df:d6:
                    88:47:b1:31:ca:7e:ce:75:d1:37:2a:a7:d9:10:d1:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A2:97:E5:C8:59:D7:0C:55:8C:3D:9E:BF:0D:19:5B:1B:74:FA:31
            X509v3 Authority Key Identifier:
                keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d5:11:43:d3:70:de:32:f5:9d:00:cc:8b:40:9d:97:e6:6e:
         13:c3:58:23:68:1c:09:89:05:c4:f5:e8:60:aa:62:09:bd:7f:
         87:38:2d:5d:0d:61:47:42:57:2d:67:1e:eb:82:d1:eb:c0:ef:
         db:e3:e1:e9:25:dd:47:41:37:d3:8e:27:13:d5:a8:36:91:75:
         86:16:f8:07:7e:e1:39:19:7a:98:0a:7b:30:b9:c7:ee:7e:c2:
         a9:e7:08:43:b8:00:67:c3:40:a8:c2:4c:2e:ae:57:b7:33:2f:
         64:2d:3e:ce:38:5e:13:36:7a:30:bf:74:d3:25:38:1e:91:7c:
         36:ae:a4:c0:ca:0f:30:50:cf:10:20:fd:8f:a3:3d:6b:8a:b7:
         68:b7:d5:17:9d:87:98:85:b7:43:3b:4f:35:52:8a:4a:59:1a:
         a8:2b:63:8d:aa:5b:d2:3a:f6:a1:bd:d3:df:05:9a:2a:8f:9c:
         eb:b3:fd:7f:58:42:e5:39:42:7a:30:d7:23:15:6b:a6:81:7b:
         3c:c6:86:8f:48:04:35:ed:7c:2f:33:c1:72:4e:da:93:aa:a1:
         6b:9b:e5:22:9f:34:ae:f7:53:da:03:f4:f1:86:34:3a:dd:27:
         80:c5:a1:28:bc:16:06:4f:83:fd:13:d2:0e:38:54:cb:2d:75:
         12:f8:6f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:02 2025 by rpki-client