Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File:                     mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier:          w1JI16itgpyVDk0OHWShYwDCohpmi9X5z7c5eeUjy6E=
Subject key identifier:   45:BC:7A:2B:5A:57:8C:73:11:D7:61:F7:D2:05:E7:35:17:F2:68:35
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer:       /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial:       01958C297BA5D9FD4F7BEFB4B230A034ED8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number:          01D5
Signing time:             Wed 12 Mar 2025 21:01:23 +0000
Manifest this update:     Wed 12 Mar 2025 21:01:23 +0000
Manifest next update:     Thu 13 Mar 2025 21:01:23 +0000
Files and hashes:         1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: Y0naxSsV1Gmix2nOx9oIBgao9U1OMdtzl3hJg3CzwZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:29:7b:a5:d9:fd:4f:7b:ef:b4:b2:30:a0:34:ed:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
        Validity
            Not Before: Mar 12 21:01:23 2025 GMT
            Not After : Mar 13 21:01:23 2025 GMT
        Subject: CN=45bc7a2b5a578c7311d761f7d205e73517f26835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:80:af:b7:17:2a:97:0e:50:e1:d3:c2:53:e3:
                    c1:0e:8d:fd:2a:7f:0f:c6:d3:82:29:d3:dc:ae:61:
                    93:6a:3c:1c:60:0d:74:39:d3:92:dd:2e:1d:41:fe:
                    5a:60:a1:f7:c6:29:ea:d0:39:1f:73:2a:36:46:d2:
                    46:ca:46:31:d1:db:0b:fa:e1:23:6a:20:43:7b:30:
                    24:a7:45:ac:ae:79:cb:6e:5e:68:ac:3e:c9:3d:b6:
                    b2:1c:9c:f5:c2:52:06:51:fd:a7:c7:f8:54:61:ec:
                    b7:a4:41:70:c7:d2:b1:ca:34:78:31:de:e8:01:5f:
                    58:fd:6d:d4:7a:83:b2:9f:24:64:70:22:f6:7f:81:
                    02:25:67:de:fc:bd:5d:8f:26:ff:1a:e8:78:58:a6:
                    f0:ba:1d:1f:36:f6:48:e1:46:78:a8:48:c4:1a:4d:
                    d2:d5:fe:ae:ba:1f:fd:0d:c5:ff:82:66:60:3d:30:
                    37:b5:d6:f9:b9:67:5a:86:6f:9c:43:07:c1:f0:24:
                    48:f2:e3:42:ef:36:5e:36:d6:c1:c0:76:38:91:03:
                    b0:bc:65:5b:32:d2:b1:d7:62:bd:31:ee:63:bc:48:
                    79:77:1f:78:b3:11:f8:ec:d2:47:a0:6f:05:2e:52:
                    12:67:cb:2c:20:b7:c5:ce:55:0a:53:cc:72:18:48:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BC:7A:2B:5A:57:8C:73:11:D7:61:F7:D2:05:E7:35:17:F2:68:35
            X509v3 Authority Key Identifier:
                keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c2:9c:78:68:82:f7:c0:51:ed:f6:d3:28:0d:e1:2c:61:2f:
         d0:b5:bb:18:72:46:8b:64:6f:25:ef:12:9a:6d:e0:b6:78:14:
         d3:b3:a1:7c:1c:73:f5:06:90:63:c2:c1:77:12:d8:58:20:22:
         da:5a:78:dc:f1:ee:03:61:f5:12:c9:4d:36:8e:57:0e:0e:0d:
         b1:81:20:62:3e:43:a8:71:bc:67:11:50:44:7c:44:39:01:43:
         b7:7b:1f:7c:6d:83:72:64:5d:77:8b:da:38:f9:97:a2:07:ab:
         f2:00:df:15:d7:83:43:f0:19:f0:3f:72:88:15:3f:4f:da:ef:
         9c:b0:b5:ca:d3:4d:92:7e:71:d2:cd:47:b0:6e:90:0b:39:c7:
         ac:e6:ae:02:8f:bf:b3:a3:d8:d4:4e:99:75:8c:88:01:e8:3f:
         3e:51:41:eb:81:fd:c2:53:65:7a:8a:c3:bf:b1:bb:66:ba:ff:
         66:6f:91:c2:be:b0:8e:92:0a:c3:50:f7:a8:84:43:60:a5:d5:
         7d:80:fa:18:cb:7d:56:3a:e8:52:1c:96:19:0d:ed:99:cb:31:
         9f:20:80:4b:57:1d:db:be:36:ed:04:c7:69:18:72:fc:85:e2:
         96:85:8e:fd:4c:bb:3f:fa:f5:c3:26:83:54:7e:99:6f:3d:1a:
         65:60:4f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:18:14 2025 by rpki-client