Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
File:                     sLakm8wQ3jQOOdID9WZYvX1kjd8.mft (raw, json)
Hash identifier:          kLp3cuXzkJ8jupAS5iuwpsUzeo02JAohXK3RMbNsPl8=
Subject key identifier:   B6:02:C7:31:86:EF:5C:8E:FC:36:CC:C9:29:AF:75:C4:C8:B2:F0:6E
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Certificate issuer:       /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial:       0194BB5A5731755FE4336A510693FBD26D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
Manifest number:          1177
Signing time:             Fri 31 Jan 2025 07:54:07 +0000
Manifest this update:     Fri 31 Jan 2025 07:54:07 +0000
Manifest next update:     Sat 01 Feb 2025 07:54:07 +0000
Files and hashes:         1: Atj5FbqUiBu2LLABCpGEzpH0Sg4.roa (hash: cBzZGlcz2mRnPCf/PBZJTLNK/ZEjrb5GaHlLhcC0rkI=)
                          2: GzsHZiR2L5z34hlU58GjHyHGhHk.roa (hash: zJEB0Ry2I/bKDFBGY5W04hlUw2kDIBYUIrcg6pqexm0=)
                          3: sLakm8wQ3jQOOdID9WZYvX1kjd8.crl (hash: 9S2bHwxoBu1JsBv/Tda/VJroUhbBJbZywGgseFmqMmY=)
                          4: yd8rW0UVlTE0K5ESeZvtwc9yZa8.roa (hash: Y41c6KDcYXB4eyzG3GvmC+i3gLAgKFVoW5IRi29yMUs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:5a:57:31:75:5f:e4:33:6a:51:06:93:fb:d2:6d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
        Validity
            Not Before: Jan 31 07:54:07 2025 GMT
            Not After : Feb  1 07:54:07 2025 GMT
        Subject: CN=b602c73186ef5c8efc36ccc929af75c4c8b2f06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:63:39:85:c7:50:5a:37:0e:2f:97:ba:04:
                    f9:19:d0:79:9e:bb:33:24:d4:bd:c5:b8:68:24:51:
                    cf:79:4e:77:e3:fb:96:a8:0d:03:77:95:13:2a:07:
                    50:6c:e5:01:ea:db:72:ed:7a:79:93:fd:ab:04:41:
                    25:80:04:74:92:f0:3a:bc:d7:fe:59:00:03:2e:87:
                    c5:57:3a:24:fc:99:10:72:7c:ff:23:b3:35:c2:2e:
                    e8:a3:47:1c:e6:24:da:02:5d:ff:fb:ed:69:43:29:
                    c8:1b:cf:97:d7:2e:0f:74:0f:3e:20:fa:00:f1:6b:
                    c7:7c:32:af:0d:cd:53:ac:58:29:5f:c2:f4:14:17:
                    88:c8:66:c7:2d:09:46:05:62:25:ac:04:c9:9a:98:
                    0b:ab:c0:ef:46:70:ec:9d:57:4f:fa:b0:ec:92:b9:
                    97:52:df:70:8d:c4:04:ff:78:a8:8a:a5:ee:0c:ec:
                    ac:3e:cc:d9:ed:3d:a2:46:ff:1f:2a:b0:87:49:eb:
                    fe:b4:18:45:e1:17:4d:8d:8d:74:f1:18:ec:87:85:
                    75:13:98:9c:f3:ce:ee:15:5c:d2:38:e0:35:5f:15:
                    69:be:80:c5:54:80:9f:be:50:75:c4:f5:3c:00:c7:
                    d1:22:10:70:15:a0:b1:8e:b9:13:38:fe:e5:a6:a1:
                    96:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:02:C7:31:86:EF:5C:8E:FC:36:CC:C9:29:AF:75:C4:C8:B2:F0:6E
            X509v3 Authority Key Identifier:
                keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:6c:89:3c:7d:3d:7f:a2:57:c0:f2:ae:4a:70:9a:89:d1:
         5a:35:5f:ca:25:58:3c:fd:83:be:24:1c:28:77:6c:a4:9f:17:
         3e:84:f1:4e:e1:ae:74:5f:fd:45:c3:f6:6e:ef:bd:48:86:56:
         2f:f5:0b:96:bb:74:46:a6:08:c0:03:0f:94:99:ec:5e:42:8e:
         b9:be:f1:a6:bd:71:80:ba:7e:6a:d3:50:1c:b0:18:f5:05:49:
         91:0a:3c:30:e5:a9:fa:88:22:2b:2f:eb:f9:05:66:3b:d6:b7:
         63:92:40:c5:5a:02:74:eb:c1:4a:b0:57:d2:24:1a:3f:25:1d:
         07:dc:99:43:f0:af:99:68:3f:ce:ef:72:e4:5d:95:1c:11:90:
         18:b0:c9:a9:2b:38:7d:4f:c1:4a:af:8d:a2:ec:10:a0:58:b8:
         c4:d6:10:be:9a:6b:22:d8:18:95:e3:22:8e:9f:2b:70:e7:c5:
         81:1c:3d:22:f4:b1:9f:df:ea:3d:13:5b:d6:6e:46:89:cc:b9:
         e3:a1:cf:b9:15:49:ae:67:5d:4c:e9:73:f1:2e:40:71:38:37:
         2c:7b:e8:70:50:fd:02:98:64:13:88:dc:0e:e8:8a:0c:40:3b:
         73:9b:af:74:0a:38:62:1d:81:44:79:17:08:96:d7:38:f3:74:
         1f:f7:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:33:05 2025 by rpki-client on console-fra.rpki-client.org