Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File:                     4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier:          Ub0arNRL5RWClmC//PLrkQ/PhQIg4dPwoM+uRjdqyNs=
Subject key identifier:   13:E0:E6:0D:6E:FB:FD:B2:4F:CE:24:14:CE:E5:1F:D1:77:40:3D:89
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer:       /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial:       0195108FC055E350C2187986EBB9E65331BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number:          0481
Signing time:             Sun 16 Feb 2025 21:00:10 +0000
Manifest this update:     Sun 16 Feb 2025 21:00:10 +0000
Manifest next update:     Mon 17 Feb 2025 21:00:10 +0000
Files and hashes:         1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: J3ot8pscvk3lXml+55dU5N7ZUP87Kyk1bdm9Y5RLcHQ=)
                          2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:8f:c0:55:e3:50:c2:18:79:86:eb:b9:e6:53:31:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
        Validity
            Not Before: Feb 16 21:00:10 2025 GMT
            Not After : Feb 17 21:00:10 2025 GMT
        Subject: CN=13e0e60d6efbfdb24fce2414cee51fd177403d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:a0:83:fd:05:f3:cc:33:de:71:30:22:ee:
                    04:33:0f:36:08:88:99:bf:67:7e:0c:da:16:3d:45:
                    12:62:93:b8:be:7f:0a:b2:b0:a9:20:b4:6e:ce:91:
                    e9:42:b1:17:9e:80:44:40:0f:53:05:bf:6f:c3:69:
                    13:e7:c7:ad:77:0f:c5:56:48:cf:c3:3e:4c:1c:7c:
                    2b:36:29:0f:1f:54:f4:9e:f0:eb:bb:8f:f7:83:0b:
                    3a:87:3c:61:ab:5f:45:22:8f:b1:c3:3d:0d:78:4c:
                    17:5f:6b:7d:34:9f:61:e1:aa:17:52:a7:d1:1c:ee:
                    ce:19:19:1a:51:ad:1d:3e:fc:e1:6e:42:99:fb:9e:
                    30:01:c0:b5:59:a7:bd:d4:15:cc:67:d5:d3:b0:45:
                    6f:9e:3d:98:0a:b2:3e:36:82:fd:e3:66:15:aa:c5:
                    a6:00:7b:e3:ee:14:3c:1d:1c:3b:fc:42:a4:9e:af:
                    c9:6b:f7:ef:47:ef:39:51:27:4d:73:74:e2:f6:9b:
                    9d:d2:cb:0c:df:aa:dd:fe:b2:4b:77:ac:83:76:99:
                    46:a6:32:38:93:00:bf:ca:0e:64:bb:d6:30:41:2a:
                    72:8e:cd:9d:e0:88:ca:24:81:ba:96:a4:46:c1:fa:
                    12:d3:18:64:7b:83:7c:35:de:71:a8:8e:5f:c9:ab:
                    fc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E0:E6:0D:6E:FB:FD:B2:4F:CE:24:14:CE:E5:1F:D1:77:40:3D:89
            X509v3 Authority Key Identifier:
                keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ed:10:54:99:d0:f7:cb:5e:b7:6c:d6:a8:5a:93:ca:60:29:
         43:48:8b:37:60:49:da:4b:1d:8b:b6:ec:2e:94:e9:79:af:a1:
         62:e3:23:30:43:47:77:0a:81:40:24:f4:76:35:80:33:ca:d0:
         d2:69:0b:6c:81:94:0b:5e:27:b7:71:72:17:63:fc:4e:fb:5d:
         d2:50:c5:f3:ef:13:dd:84:c1:d1:08:83:d3:d3:8e:ed:d5:c0:
         63:95:76:27:e5:3c:d4:e9:76:6e:f2:33:a8:ff:32:8f:87:b7:
         7f:b2:ab:09:58:4f:26:92:29:9b:db:8d:b5:96:c1:d8:57:42:
         ca:be:e9:4b:9f:5c:74:8c:d9:2c:e1:6b:19:e3:0e:5a:e0:32:
         3e:cc:1f:46:02:f9:44:02:ef:68:9f:12:d7:da:7d:75:a9:4b:
         3e:e5:f3:d2:49:3c:9a:23:7a:33:df:ef:2b:f0:ec:2e:e8:c1:
         45:d9:0e:a2:1a:8e:fb:fd:a8:44:42:95:90:3d:67:b6:ff:d2:
         1c:8f:7c:49:8b:04:ce:dc:32:d3:b1:1d:c6:46:c2:74:d1:7e:
         be:3e:a5:3b:64:c9:72:ab:ed:fe:d8:25:c0:33:e3:7c:b7:46:
         1c:62:ef:cb:4b:1e:64:6b:eb:69:44:e4:f1:ee:97:c2:9d:0c:
         bb:74:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:24 2025 by rpki-client