Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File:                     1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier:          0RgWhYybpHy8krfalaHyrigHeaj7fvGpMSNHqA/nYo0=
Subject key identifier:   73:94:D8:49:28:09:03:F0:25:39:A5:52:5B:6E:5A:38:E2:76:A4:DB
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer:       /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial:       0194BB6041D03B26F0C2347CF8DC7C7764CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number:          0B52
Signing time:             Fri 31 Jan 2025 08:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 08:00:35 +0000
Files and hashes:         1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: 968GSOn4p94aPxpXHr0Qecn72fZKcuCDSdS3tfLeF3M=)
                          2: hSQntvd9v3MOWIssEgGbLB1SW7w.roa (hash: n6KLHzcpdLpUHWf9UFnS7ncqlbroso3meC9DViXUm1o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:60:41:d0:3b:26:f0:c2:34:7c:f8:dc:7c:77:64:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
        Validity
            Not Before: Jan 31 08:00:35 2025 GMT
            Not After : Feb  1 08:00:35 2025 GMT
        Subject: CN=7394d849280903f02539a5525b6e5a38e276a4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:64:a2:e9:3e:9e:48:47:c8:54:1d:da:07:
                    4c:f3:8a:5b:28:86:81:29:1d:42:e5:16:8b:39:56:
                    18:48:24:21:7a:db:a8:bd:3e:98:08:65:f4:cf:4e:
                    ca:24:16:cb:e3:ab:17:5d:92:17:a3:ad:9c:0b:b8:
                    5c:7f:cc:e3:46:0d:19:3d:5c:65:10:bd:6e:0b:d0:
                    71:e9:62:01:11:98:e3:f4:6c:9b:69:4a:52:3d:94:
                    b9:64:2a:a5:e2:3d:63:60:27:de:f1:87:32:8d:81:
                    22:fd:8c:1c:c1:71:48:6f:42:bb:88:fc:10:e3:e7:
                    d5:c5:16:6d:dc:4d:44:d2:26:07:2a:da:55:39:53:
                    40:08:4e:fc:76:3f:1b:19:f3:a1:86:7e:a7:1b:53:
                    1c:fc:2a:4b:9d:c9:06:5a:f3:e2:09:e5:9a:c3:fd:
                    a5:0d:26:77:6a:12:4f:12:a0:e7:8f:bc:81:7f:45:
                    af:9d:cc:4b:5d:91:41:5e:1a:29:53:2b:b2:b7:45:
                    00:e2:23:65:a6:d1:b9:a7:5c:70:98:ff:94:4e:ed:
                    f4:ce:50:b5:05:2a:d8:7f:2f:34:ff:58:52:70:37:
                    50:69:06:89:f3:29:73:20:55:52:71:42:a9:eb:94:
                    31:fd:8c:7e:46:8e:d1:cd:ec:2e:4a:1c:29:4c:9d:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:94:D8:49:28:09:03:F0:25:39:A5:52:5B:6E:5A:38:E2:76:A4:DB
            X509v3 Authority Key Identifier:
                keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:00:6d:2b:64:a4:f7:6a:09:1e:67:91:4e:a3:e5:11:fe:78:
         e4:b9:63:16:7f:53:18:76:0d:30:92:77:6e:fc:5a:d6:d1:51:
         15:80:a7:ab:6a:c6:b1:ad:81:72:ac:e7:04:fa:b9:16:bd:48:
         79:34:85:22:f6:d1:6d:24:75:43:f9:b9:73:fd:e0:f0:36:a4:
         92:49:3b:e7:ea:0b:dc:bd:e7:1c:85:f8:75:0c:cf:74:ae:29:
         ff:4c:39:e3:5e:16:cf:cd:e3:60:c6:2c:f2:0b:27:6f:37:3e:
         03:26:b3:b1:80:16:cc:c8:8d:7a:c3:e4:19:7d:2b:04:1c:8a:
         8d:25:be:0d:d6:db:5c:c1:98:e2:d2:5e:53:b6:ac:59:91:00:
         8f:18:0d:7e:dd:e7:75:1d:6a:38:17:3b:74:ce:a3:c1:e4:46:
         cf:e8:11:a7:38:85:e3:cc:8d:f2:4d:aa:57:3d:67:73:a7:84:
         41:87:7b:ec:d6:35:91:11:18:98:4a:72:74:76:f3:01:ab:d6:
         5f:00:5e:88:02:bb:fc:07:d3:f9:5b:24:74:6f:34:e5:77:70:
         64:1a:f3:6e:a9:56:34:ee:99:11:30:c8:a3:ce:b1:29:cc:b7:
         e8:27:6a:0d:b1:61:74:08:73:4c:cd:b9:57:d5:96:d6:50:a3:
         cd:65:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:14 2025 by rpki-client on console-fra.rpki-client.org