Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
File:                     ML2W-0iWciqJyEZRjLXmbLVMhU8.mft (raw, json)
Hash identifier:          gJewsroZsUZUmYWFiFr2UILDCoR841lV9m+wCt3ufk8=
Subject key identifier:   D3:95:29:5A:5C:CE:CD:3C:26:1A:95:1B:60:A7:F8:72:7C:85:FD:E1
Authority key identifier: 30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F
Certificate issuer:       /CN=30bd96fb4896722a89c846518cb5e66cb54c854f
Certificate serial:       01958B4D6F95B2ACB171E76327F852D1AC64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
Manifest number:          1491
Signing time:             Wed 12 Mar 2025 17:01:02 +0000
Manifest this update:     Wed 12 Mar 2025 17:01:02 +0000
Manifest next update:     Thu 13 Mar 2025 17:01:02 +0000
Files and hashes:         1: ML2W-0iWciqJyEZRjLXmbLVMhU8.crl (hash: 2RmOpt1gJ1qNWx8uweI7/txQpYQlHDlTcF7jgVhAyyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:6f:95:b2:ac:b1:71:e7:63:27:f8:52:d1:ac:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30bd96fb4896722a89c846518cb5e66cb54c854f
        Validity
            Not Before: Mar 12 17:01:02 2025 GMT
            Not After : Mar 13 17:01:02 2025 GMT
        Subject: CN=d395295a5ccecd3c261a951b60a7f8727c85fde1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:45:ee:20:7e:c8:8f:a7:c5:ac:19:54:1e:cc:
                    bf:7e:61:ac:37:bd:42:3c:90:e0:0f:dd:f4:46:4a:
                    3f:38:69:45:6a:90:40:3a:be:0b:f0:0c:d1:53:47:
                    f4:5e:38:e7:b9:0a:d2:17:f6:62:17:aa:27:b5:9b:
                    15:40:16:09:f4:88:1c:16:16:76:51:99:c1:0f:11:
                    28:eb:0b:1c:b8:f0:c9:14:f8:7c:f2:f7:21:d3:65:
                    7d:04:18:c0:82:f2:4b:bd:c2:2f:b7:87:53:80:ed:
                    c0:1b:1b:d1:69:02:06:8b:d6:e9:c3:b1:a7:90:21:
                    4f:f8:45:4e:1d:38:87:9a:43:db:a0:de:e5:21:ef:
                    b9:e3:67:74:32:8d:36:ea:db:27:56:54:a4:f7:1e:
                    b5:0f:e7:39:3e:51:97:fa:5e:f8:55:59:b4:05:87:
                    92:18:59:db:ad:60:ea:d0:25:63:82:55:16:3e:8e:
                    b4:68:45:e0:48:54:8d:56:04:b6:25:25:a8:69:ed:
                    76:fa:4c:b0:60:f8:4a:9e:ee:54:b5:67:8d:61:f8:
                    9d:41:4d:79:92:e3:ad:83:a1:1a:91:1e:f4:11:a1:
                    a2:6e:ad:cd:8c:24:6c:65:30:d8:e9:1f:91:d5:77:
                    79:dd:2c:7f:ef:31:e2:1b:cb:2b:36:c6:b7:32:f0:
                    ac:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:29:5A:5C:CE:CD:3C:26:1A:95:1B:60:A7:F8:72:7C:85:FD:E1
            X509v3 Authority Key Identifier:
                keyid:30:BD:96:FB:48:96:72:2A:89:C8:46:51:8C:B5:E6:6C:B5:4C:85:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ML2W-0iWciqJyEZRjLXmbLVMhU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/38b08a-dd45-4d3d-b01b-29047ebe8bbb/1/ML2W-0iWciqJyEZRjLXmbLVMhU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:2b:b4:05:3c:ab:de:f3:9b:74:93:1e:f4:31:1f:30:10:20:
         71:c3:ee:36:85:1b:a3:9f:42:5c:6e:c0:8b:5e:bd:d4:8c:06:
         5e:24:a4:32:64:11:e0:63:18:08:25:a2:2f:bf:02:d3:7d:a7:
         70:ae:ad:b3:e5:1f:3a:95:af:3a:2c:ca:6c:b0:86:a7:7b:d8:
         3a:93:d3:86:e0:91:70:e2:a5:5c:4e:05:7a:63:38:e5:19:67:
         5b:96:0f:ef:bf:6d:39:f6:58:b6:77:db:9e:7b:80:d7:26:26:
         c6:8d:5e:63:1f:e9:e3:84:55:f0:c2:4f:35:bc:7e:92:e6:2b:
         f8:d4:3d:47:e5:02:05:e1:d8:20:0d:aa:2d:d0:69:db:7e:77:
         dc:ee:2b:4f:ac:ed:fa:1e:c9:31:40:a6:ee:c2:78:3c:20:e6:
         b0:2a:2f:af:58:18:9c:57:53:aa:69:a8:18:34:aa:52:76:e8:
         db:93:0e:b6:3d:2f:41:48:13:f0:75:41:d0:d7:4a:b1:e9:e1:
         2a:49:b1:19:24:ee:43:8b:6d:43:4c:12:4c:63:97:00:21:13:
         62:78:fe:62:51:6f:fc:37:43:0c:a2:ed:bb:92:e0:e2:ee:23:
         0b:1b:ff:ca:46:58:68:68:e0:0d:24:53:39:a7:40:5a:75:14:
         d8:aa:7c:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTW+VsqyxcedjJ/hS0axkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYmQ5NmZiNDg5NjcyMmE4OWM4NDY1MThjYjVlNjZjYjU0
Yzg1NGYwHhcNMjUwMzEyMTcwMTAyWhcNMjUwMzEzMTcwMTAyWjAzMTEwLwYDVQQD
EyhkMzk1Mjk1YTVjY2VjZDNjMjYxYTk1MWI2MGE3Zjg3MjdjODVmZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EXuIH7Ij6fFrBlUHsy/fmGsN71C
PJDgD930Rko/OGlFapBAOr4L8AzRU0f0XjjnuQrSF/ZiF6ontZsVQBYJ9IgcFhZ2
UZnBDxEo6wscuPDJFPh88vch02V9BBjAgvJLvcIvt4dTgO3AGxvRaQIGi9bpw7Gn
kCFP+EVOHTiHmkPboN7lIe+542d0Mo026tsnVlSk9x61D+c5PlGX+l74VVm0BYeS
GFnbrWDq0CVjglUWPo60aEXgSFSNVgS2JSWoae12+kywYPhKnu5UtWeNYfidQU15
kuOtg6EakR70EaGibq3NjCRsZTDY6R+R1Xd53Sx/7zHiG8srNsa3MvCsUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOVKVpczs08JhqVG2Cn+HJ8hf3hMB8GA1UdIwQY
MBaAFDC9lvtIlnIqichGUYy15my1TIVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUwyVy0waVdjaXFKeUVaUmpMWG1iTFZNaFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zOGIwOGEtZGQ0NS00ZDNkLWIwMWIt
MjkwNDdlYmU4YmJiLzEvTUwyVy0waVdjaXFKeUVaUmpMWG1iTFZNaFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zOGIwOGEtZGQ0NS00ZDNkLWIwMWItMjkwNDdlYmU4YmJi
LzEvTUwyVy0waVdjaXFKeUVaUmpMWG1iTFZNaFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCu0BTyr
3vObdJMe9DEfMBAgccPuNoUbo59CXG7Ai1691IwGXiSkMmQR4GMYCCWiL78C032n
cK6ts+UfOpWvOizKbLCGp3vYOpPThuCRcOKlXE4FemM45RlnW5YP779tOfZYtnfb
nnuA1yYmxo1eYx/p44RV8MJPNbx+kuYr+NQ9R+UCBeHYIA2qLdBp23533O4rT6zt
+h7JMUCm7sJ4PCDmsCovr1gYnFdTqmmoGDSqUnbo25MOtj0vQUgT8HVB0NdKsenh
KkmxGSTuQ4ttQ0wSTGOXACETYnj+YlFv/DdDDKLtu5Lg4u4jCxv/ykZYaGjgDSRT
OadAWnUU2Kp8RQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:46 2025 by rpki-client