Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
File:                     J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft (raw, json)
Hash identifier:          07kxWm1LiXgoc1raspdkTNlGQwfNaSM5yVmHCA1XUrU=
Subject key identifier:   B3:46:2E:75:BD:C0:5B:84:BB:97:FC:AD:CD:79:B4:EA:A7:B8:6C:C9
Authority key identifier: 27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2
Certificate issuer:       /CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
Certificate serial:       0194BB2944ACEF509AC3DC99D51621948B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 07:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:31 +0000
Files and hashes:         1: F7MJ36J0uiDKy-M_vXjmJdbP4fs.roa (hash: 8zleOD6aN/r+slAEa8mt1l5gM5SF8gtFDMiJe9eHZeU=)
                          2: J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl (hash: owsDsMnA7t3zq81I8C8I4GmsPywwRnhz4F15sgci/lw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:44:ac:ef:50:9a:c3:dc:99:d5:16:21:94:8b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2794556395b47bf43e0d5d556e7e255b6c8accc2
        Validity
            Not Before: Jan 31 07:00:31 2025 GMT
            Not After : Feb  1 07:00:31 2025 GMT
        Subject: CN=b3462e75bdc05b84bb97fcadcd79b4eaa7b86cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0b:39:3b:cd:c8:1a:76:58:5e:fd:eb:6f:2c:
                    54:63:23:f9:87:62:60:4c:84:ca:86:e1:11:83:43:
                    75:59:85:95:25:ef:dc:e0:f8:b1:bc:cf:10:4d:99:
                    d9:29:c6:be:5b:3c:41:a5:ae:96:67:f7:c1:86:04:
                    ce:9b:c4:eb:5c:13:28:67:76:08:f3:e4:48:33:8e:
                    6a:69:69:01:58:b9:40:69:64:e2:8a:f9:de:ed:ad:
                    58:4e:46:5d:38:d7:2c:e2:a5:ea:25:81:56:e6:c4:
                    e1:95:d4:4a:1c:bf:7e:08:8e:6a:ef:9a:52:4e:74:
                    99:05:16:c6:ab:2e:94:69:86:72:28:5b:ad:0b:37:
                    0e:bc:ba:1c:50:78:4c:22:2f:84:00:86:33:37:58:
                    50:34:a2:e5:e1:35:e7:ce:7a:91:fc:46:80:cd:6f:
                    ee:78:e0:f5:c8:d8:a1:37:89:d4:55:55:24:e1:6e:
                    fa:aa:07:aa:21:68:b3:2e:b7:69:44:69:52:7f:f9:
                    e3:e2:1b:35:ea:b5:01:2b:38:a2:bf:84:e4:21:19:
                    3e:27:65:22:e8:f5:84:bc:ca:6f:45:2a:28:08:64:
                    09:94:58:3b:7a:2c:01:6d:aa:40:47:f4:58:8e:f0:
                    91:39:c4:9b:63:19:40:6b:cb:99:c5:69:ec:9e:b8:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:46:2E:75:BD:C0:5B:84:BB:97:FC:AD:CD:79:B4:EA:A7:B8:6C:C9
            X509v3 Authority Key Identifier:
                keyid:27:94:55:63:95:B4:7B:F4:3E:0D:5D:55:6E:7E:25:5B:6C:8A:CC:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a5b6f7-f551-441b-bb8f-79da7aaaa3b2/1/J5RVY5W0e_Q-DV1Vbn4lW2yKzMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b2:f6:e9:52:97:21:59:61:0e:9e:50:21:4e:97:e7:d5:e0:
         a9:0a:49:b7:6d:a0:c7:cb:e3:d5:00:ec:78:4e:03:bb:50:a3:
         ed:ce:b2:f0:89:09:d4:1f:d9:1f:97:60:07:0c:ba:22:5b:72:
         c9:2e:30:f4:3c:6b:13:83:3d:3a:0e:65:5d:ee:78:bf:4b:ae:
         31:4c:ff:80:9a:15:db:77:fb:1f:44:34:a2:14:9b:73:7f:61:
         98:85:9d:7b:4c:d4:f4:19:9d:11:31:ca:8a:05:d1:82:9a:4a:
         68:43:0e:af:40:f8:f3:f8:a8:57:ab:42:c1:6a:29:80:16:52:
         60:f0:1d:0b:f8:96:37:f2:33:24:0e:54:0d:3b:83:73:61:5a:
         0b:99:fc:ba:3e:5c:f1:1b:f1:dc:79:f0:c2:8f:a6:62:2b:a8:
         69:22:1d:bb:a0:ae:ad:76:97:31:64:d3:51:7b:5f:1a:44:98:
         91:96:81:f6:5c:89:b1:89:68:af:19:3e:6e:26:7c:f7:42:56:
         1f:2a:e9:76:41:e8:df:e2:0f:06:1b:ed:36:56:4a:cc:b9:83:
         b0:68:fe:3f:8b:46:f1:66:74:d5:48:c6:70:21:44:27:40:14:
         50:98:c0:4d:91:b7:cb:a5:32:f2:c2:1e:39:3c:ec:b3:b4:8d:
         04:7d:6f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:36:05 2025 by rpki-client on console-fra.rpki-client.org