Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
File:                     k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft (raw, json)
Hash identifier:          N5jhDc+KpfOMks99cbE4F6gOuanJC1UqawhMkUSNn7g=
Subject key identifier:   ED:8F:76:41:45:82:BF:44:CF:C5:58:E6:2A:7A:2A:A0:9C:70:3A:13
Authority key identifier: 93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D
Certificate issuer:       /CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d
Certificate serial:       019511A2ED24EDF5815D0F4891C391BEE9EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
Manifest number:          0616
Signing time:             Mon 17 Feb 2025 02:00:44 +0000
Manifest this update:     Mon 17 Feb 2025 02:00:44 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:44 +0000
Files and hashes:         1: 72kD6ayiwmeGoKhRrPZ__Tt9XCE.roa (hash: NSNmGWvd47OdXbtIhhCClOKph/GtDH8ixZuXdVjE5+w=)
                          2: k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl (hash: j4SPzS/y/wlFzVMwH3Sr/X3isURTwGzXzs2lJkib0KI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:a2:ed:24:ed:f5:81:5d:0f:48:91:c3:91:be:e9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d
        Validity
            Not Before: Feb 17 02:00:44 2025 GMT
            Not After : Feb 18 02:00:44 2025 GMT
        Subject: CN=ed8f76414582bf44cfc558e62a7a2aa09c703a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:34:ec:aa:75:f5:31:a8:34:02:bd:5d:c9:
                    a2:c2:6a:ab:c5:92:d0:b7:2c:95:31:65:17:0c:90:
                    84:bf:fd:08:51:5f:31:f6:3d:28:6c:30:e8:6c:1f:
                    b4:1c:a4:68:9f:15:74:65:6e:ba:4c:98:2e:ce:b4:
                    43:9f:a9:87:0a:f4:84:e0:3a:7b:f2:89:16:8f:ce:
                    2f:a2:94:a5:50:78:40:72:a0:dd:d5:82:4c:c1:1a:
                    d5:47:57:e6:57:b2:fa:fd:79:83:0c:3e:29:90:0d:
                    e5:1c:62:18:83:51:54:7e:bc:fd:46:bf:c8:75:35:
                    4b:7a:2f:02:bf:29:c1:ae:ff:60:a0:22:98:2d:b7:
                    01:55:a9:52:66:52:83:ed:79:34:19:0d:69:35:bc:
                    9f:41:78:7c:0e:2e:2c:19:7c:b5:68:ed:01:5e:14:
                    ef:1c:23:01:b3:2c:47:71:36:f2:4c:0d:db:33:cf:
                    cf:e6:fe:89:fd:a9:79:70:1c:9a:7c:77:05:ae:27:
                    a4:aa:91:08:13:a4:d9:1e:7e:43:10:88:e7:b8:84:
                    dc:bf:cd:b3:c5:29:a3:fb:fc:b9:62:87:0e:75:6b:
                    81:d6:3c:73:ae:be:81:6f:3f:73:5a:20:d4:3d:96:
                    26:86:88:42:ef:4a:54:6c:97:a8:8f:03:be:6f:5f:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8F:76:41:45:82:BF:44:CF:C5:58:E6:2A:7A:2A:A0:9C:70:3A:13
            X509v3 Authority Key Identifier:
                keyid:93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:bc:a6:db:84:a6:ac:8c:07:4d:38:b8:b4:95:3d:2f:2a:1d:
         2c:5a:55:67:7e:3c:8f:60:0f:f7:c7:f3:77:83:a1:df:53:e1:
         52:99:ce:84:d0:6d:bf:0b:59:cc:f5:9a:23:2a:52:c2:d4:bb:
         2f:4f:f8:42:25:5e:f8:c0:ce:7d:7e:e0:f8:4f:29:bf:a9:b6:
         66:c6:d5:3d:91:92:c5:55:f0:11:59:55:36:88:af:1f:70:ce:
         15:ed:62:e4:0a:28:ee:86:65:0e:77:e0:d6:71:7a:9a:ad:31:
         f3:7c:73:a8:2a:f5:22:29:af:9f:02:27:3d:7c:57:de:b3:c7:
         84:fe:59:2a:5d:ee:b2:af:00:5b:1b:c1:c5:48:36:85:0e:f4:
         0b:54:7d:f6:7d:c9:b4:78:8a:c2:69:52:60:73:fb:c8:bb:7e:
         97:ab:85:b4:79:aa:21:b4:1b:b1:8b:a3:1a:a0:b3:7b:09:cd:
         71:e3:ed:ac:df:c1:41:9d:77:d9:79:fd:fc:9b:a1:cd:3f:01:
         a6:6e:38:f3:c8:fb:d0:df:e9:73:4e:b0:42:78:1a:bc:32:d2:
         b3:2a:91:c0:3b:f5:97:b8:c2:84:b4:7b:ee:4b:fd:be:18:da:
         63:92:84:a3:23:89:42:89:40:17:33:20:2d:f5:97:16:44:a9:
         95:63:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:19 2025 by rpki-client