Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File:                     IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier:          08yCtVEpGuIRQFdqEPylfiiqMeQ3T4PV8BFTVXpRruM=
Subject key identifier:   A6:13:46:ED:D4:7D:5E:53:80:5E:DE:B7:87:BE:A3:CA:9C:61:BF:34
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer:       /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial:       0195116BC50382221BECB09A84F9B7C739A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number:          1457
Signing time:             Mon 17 Feb 2025 01:00:30 +0000
Manifest this update:     Mon 17 Feb 2025 01:00:30 +0000
Manifest next update:     Tue 18 Feb 2025 01:00:30 +0000
Files and hashes:         1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: O2LeQv+UY2lwN08gIxkNH+EBiJf541Mkaj7EgUmceDA=)
                          2: foZeHIwLujdlY8Z9L88C79OdbL4.roa (hash: kBji60S+DjYJ/bgY7+g+22RM5gAKkLkkfayTk1h8AIo=)
                          3: szEuog0QzjoBQW1CQcU6MA8xPCY.roa (hash: LsMXxa5IeE1fxcnMKQjYIuPdJ91pJvkbpdujugd5olw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:6b:c5:03:82:22:1b:ec:b0:9a:84:f9:b7:c7:39:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
        Validity
            Not Before: Feb 17 01:00:30 2025 GMT
            Not After : Feb 18 01:00:30 2025 GMT
        Subject: CN=a61346edd47d5e53805edeb787bea3ca9c61bf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:11:d0:a4:5d:c4:1c:68:91:3d:67:62:2c:
                    a6:dc:2c:51:dd:e2:4c:0a:b1:01:61:7d:fc:3b:16:
                    f6:bc:fa:0d:52:7a:a6:df:29:1a:ee:84:0f:b1:6c:
                    1d:a1:04:55:6e:eb:99:31:9d:be:db:14:e5:25:4f:
                    42:6a:43:be:f9:8b:c8:75:2d:b0:2a:f1:97:4a:6b:
                    6c:30:04:0b:de:51:61:8e:7d:9d:ee:b8:70:52:25:
                    0f:da:86:c5:f6:84:da:bf:32:de:67:be:30:bd:6f:
                    9b:92:8c:67:ef:c8:9b:d1:24:de:68:9d:99:66:c3:
                    cd:0b:37:97:26:e2:31:29:45:3c:d1:48:31:9b:ab:
                    cd:15:81:e9:22:b6:eb:6e:10:21:02:fa:64:84:db:
                    33:8d:5d:d8:84:12:14:96:6c:76:4e:f5:0b:88:a7:
                    bc:c1:2f:e8:30:6f:73:fd:11:6c:7d:1e:fe:72:62:
                    fc:f8:49:02:59:45:6b:c9:02:86:31:c4:01:9b:f1:
                    3c:ae:7e:63:db:ea:9b:80:ac:fa:a0:af:ae:1c:93:
                    8a:b0:d5:61:6c:6f:76:48:3a:cd:eb:0b:af:ff:71:
                    74:b2:5b:1e:e1:0e:9e:34:15:24:13:7d:97:85:f8:
                    a9:b3:e6:d2:a7:0f:bb:6a:8c:18:ee:82:a5:65:e7:
                    8d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:13:46:ED:D4:7D:5E:53:80:5E:DE:B7:87:BE:A3:CA:9C:61:BF:34
            X509v3 Authority Key Identifier:
                keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ea:2c:71:89:de:4b:9a:75:65:df:0d:e6:7c:37:39:6b:57:
         53:83:57:01:7f:f5:33:c1:8b:7a:a2:d4:86:13:ad:c1:87:fb:
         ca:48:1c:c1:6c:b7:1f:53:b4:b2:de:20:84:4e:4f:43:30:06:
         ba:b6:a1:46:8d:cb:6b:d6:75:c7:5f:f5:d0:44:80:43:36:ac:
         03:64:91:b0:06:23:e0:9d:3d:a4:75:ca:e5:dd:a8:19:f6:b7:
         50:84:e5:76:e9:10:d2:6d:6b:5f:5c:09:48:c8:eb:f3:b5:e2:
         21:06:97:33:b4:84:97:2e:5f:ac:8f:67:83:24:f5:87:67:2f:
         39:aa:5d:2f:3f:99:69:52:a1:c5:f4:c1:15:8c:90:50:4c:92:
         9f:bb:11:de:33:6a:39:c1:0f:0d:2e:40:ec:38:f2:63:2a:37:
         f8:e9:74:09:65:36:ca:63:ca:e2:17:6b:8a:38:50:17:be:6e:
         7c:bd:9d:8a:01:a5:37:ca:05:21:29:4c:5c:40:87:26:2d:92:
         a9:a1:aa:94:9a:06:a8:37:07:c3:81:26:28:8e:bf:59:aa:bc:
         bc:5d:a3:da:df:7a:d6:4c:86:2a:0a:5e:11:87:4d:20:61:e0:
         85:d0:99:b9:43:89:f2:35:91:0d:4c:de:38:da:2d:c3:c1:34:
         16:32:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:40 2025 by rpki-client