Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
File:                     fiR7mB00T2vEwetCMx0jKDgWE3w.mft (raw, json)
Hash identifier:          yOGvWt0u60pOu23H2HrpE6W/ldtUSGHAMtCQe2yK3jU=
Subject key identifier:   5B:26:FE:0E:68:6B:79:B7:5D:91:47:21:36:67:3C:11:CF:D6:11:20
Authority key identifier: 7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
Certificate issuer:       /CN=7e247b981d344f6bc4c1eb42331d23283816137c
Certificate serial:       0194C46384D15F7005B32D6222CF19F8F140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
Manifest number:          1145
Signing time:             Sun 02 Feb 2025 02:00:43 +0000
Manifest this update:     Sun 02 Feb 2025 02:00:43 +0000
Manifest next update:     Mon 03 Feb 2025 02:00:43 +0000
Files and hashes:         1: fiR7mB00T2vEwetCMx0jKDgWE3w.crl (hash: +bRzKL4okoS+Jl6QCp4PRN37/4Trtf73NPRtlAJTOsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:63:84:d1:5f:70:05:b3:2d:62:22:cf:19:f8:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e247b981d344f6bc4c1eb42331d23283816137c
        Validity
            Not Before: Feb  2 02:00:43 2025 GMT
            Not After : Feb  3 02:00:43 2025 GMT
        Subject: CN=5b26fe0e686b79b75d91472136673c11cfd61120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:f3:02:68:7f:0f:6c:1a:a6:59:79:b4:43:
                    c7:e6:57:37:e7:17:38:09:eb:7e:34:81:8c:a0:f3:
                    73:c1:19:91:1c:76:b2:14:ca:ce:fa:b3:ea:a1:c7:
                    f8:b1:84:0d:55:89:77:9d:30:0f:e8:d5:4c:16:8d:
                    36:19:0c:b2:41:64:80:75:b3:a5:4f:89:e2:e9:7a:
                    c5:2b:6d:7b:1e:c7:a5:d1:29:cd:e8:fe:fb:1b:1e:
                    7c:f3:93:77:0b:61:a5:a0:80:9b:f6:c9:12:97:e4:
                    e0:d1:81:d0:0e:21:a4:b2:7e:94:21:49:2c:2f:bd:
                    49:b4:a9:31:51:ff:c3:26:af:7e:1c:8f:95:38:da:
                    b7:d3:07:ba:47:3c:9f:bc:25:4b:9f:5a:ab:63:90:
                    8e:d8:a2:28:48:29:99:98:ad:e5:9a:72:55:16:5d:
                    3e:e5:6e:3c:8d:47:ce:6a:3e:d8:8c:0c:11:e6:95:
                    48:d6:da:93:a9:27:51:76:72:78:08:b2:97:c1:14:
                    e1:18:f5:bb:e3:72:62:00:f9:af:7e:ea:5d:10:9a:
                    f5:1d:f6:38:97:61:22:3a:d0:4e:b5:a3:9d:a5:61:
                    0b:81:1e:d1:75:b0:98:d3:0b:60:2f:32:d6:06:5b:
                    2d:67:e0:d2:fe:b4:49:f0:53:71:d7:55:9f:13:1e:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:26:FE:0E:68:6B:79:B7:5D:91:47:21:36:67:3C:11:CF:D6:11:20
            X509v3 Authority Key Identifier:
                keyid:7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:6d:e2:41:a8:1e:98:3f:ca:0d:f4:00:e2:61:18:bb:b6:f7:
         07:da:23:e5:02:f9:95:f4:92:0d:49:75:18:fe:e9:2b:b3:eb:
         55:b1:39:4c:05:e0:c4:97:0d:89:db:83:1e:d7:43:4a:b3:fa:
         35:95:52:79:2f:ad:8e:23:8f:2c:4b:c9:5e:11:4d:b6:88:2b:
         ba:53:38:05:f4:bb:9b:2d:52:05:65:83:3d:89:43:29:0f:5d:
         4b:a4:ac:da:6f:cd:b4:40:30:89:fe:40:09:86:41:37:95:4d:
         0d:e9:4a:e4:d8:35:8f:30:da:6f:84:df:8b:1c:3a:de:e3:95:
         03:4e:a1:69:9c:db:58:97:8b:77:bb:a0:5e:3e:7f:ea:96:d2:
         1f:44:91:05:df:b5:69:9c:24:e1:57:ce:66:a3:21:f9:39:5a:
         ee:73:02:48:ff:51:2c:a3:16:7e:fe:15:a1:8e:b5:8d:2a:a7:
         5e:ff:3f:76:24:d3:84:26:76:1c:d7:dc:f1:42:fe:d8:ff:ca:
         fb:fb:22:ca:e8:5b:d2:7c:8a:a6:cb:14:cc:10:a0:80:06:a3:
         2a:02:16:18:a0:50:23:16:b4:be:13:fd:6c:1a:9d:e6:6d:78:
         a3:d3:db:df:01:25:19:5e:82:c7:33:4e:16:a6:af:71:99:2f:
         2f:25:70:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:08 2025 by rpki-client