Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
File:                     rJHyMKDi7to4EFIudKaYIAcT5iA.mft (raw, json)
Hash identifier:          cJ3wTo6a4q1K202rxjVTOJ9Gl7eJqSVK8tdIkHnC38w=
Subject key identifier:   2D:3A:F0:B3:DC:7B:33:A3:88:0A:33:CC:C2:C0:78:9F:23:5D:3C:AE
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Certificate issuer:       /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial:       019511D9A7199449E3DF06C5E93F654F365E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
Manifest number:          0D66
Signing time:             Mon 17 Feb 2025 03:00:31 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:31 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:31 +0000
Files and hashes:         1: gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa (hash: I686Ip553hliGvYAsWQzyhxBsV7CF+b8RDLkN0tXgB4=)
                          2: rJHyMKDi7to4EFIudKaYIAcT5iA.crl (hash: MaYOtv9G2Wp8qrK1HMvHVYclViM4RrpIii2JhD019LQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:a7:19:94:49:e3:df:06:c5:e9:3f:65:4f:36:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
        Validity
            Not Before: Feb 17 03:00:31 2025 GMT
            Not After : Feb 18 03:00:31 2025 GMT
        Subject: CN=2d3af0b3dc7b33a3880a33ccc2c0789f235d3cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:19:27:52:7e:2e:27:d8:63:16:35:df:b9:
                    40:7e:bf:7f:c7:d8:c4:b1:81:66:74:34:94:60:a3:
                    00:27:ed:d7:51:25:fa:75:3d:90:a1:8b:60:de:cb:
                    95:8f:6d:77:cb:18:b9:7d:9f:ca:0c:af:27:0f:8e:
                    38:e5:e3:35:42:af:f9:bd:08:45:fa:b9:7b:b6:ad:
                    03:ec:40:a6:96:58:47:a3:68:ea:33:f3:e1:17:fb:
                    c6:e3:a0:12:b4:6a:9e:eb:1d:67:78:b9:bf:a4:71:
                    8c:53:6d:a5:04:ad:5f:ba:b8:c1:3d:64:59:60:4e:
                    1b:22:ac:9c:f5:75:eb:39:22:5b:04:00:ad:31:52:
                    78:2f:fa:0f:40:d7:da:fd:fe:67:9b:35:b2:3e:09:
                    bc:26:c8:3d:c0:87:7e:72:b4:79:3f:6a:2d:dd:44:
                    1c:5e:a1:ef:e2:59:4a:4d:67:6f:41:47:f9:c3:41:
                    05:64:c7:41:13:9e:d9:bf:00:ea:3e:79:44:f8:63:
                    cc:db:cd:04:ea:4e:59:17:ab:cb:9e:ce:cd:1c:ae:
                    ac:3b:85:08:9d:e4:e1:39:71:76:98:eb:3a:f9:34:
                    c3:57:1a:cc:c1:a7:af:a2:7e:01:e6:62:3f:b0:82:
                    5d:73:5b:a7:57:30:9d:cc:2f:43:43:0c:c2:78:3e:
                    7f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3A:F0:B3:DC:7B:33:A3:88:0A:33:CC:C2:C0:78:9F:23:5D:3C:AE
            X509v3 Authority Key Identifier:
                keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f6:eb:f2:f9:0f:ce:84:e6:40:86:8a:84:9d:bc:18:9a:34:
         52:86:69:88:fa:fb:bc:5d:a3:dc:37:e8:46:ed:72:21:eb:df:
         35:49:7f:95:08:2d:6e:ee:ea:99:4d:1b:21:82:c7:f4:99:58:
         bd:4f:ee:85:03:06:54:01:e1:4e:18:49:f2:2b:bf:83:67:4e:
         60:fe:b0:51:a7:d9:5a:66:b3:0c:f5:b8:96:78:dd:9e:9f:78:
         14:00:0e:c9:94:4c:8b:cb:56:4c:44:77:95:9e:3d:2f:ac:bf:
         6d:d9:ec:5f:9b:d3:c6:3c:7a:b0:6c:51:93:47:e2:04:2e:cb:
         b9:d7:29:60:e6:fa:6c:18:04:17:d3:47:1a:b9:06:5e:3c:a3:
         23:23:da:08:bb:fe:81:5b:d9:7b:b4:66:69:83:08:50:7b:73:
         df:04:bf:10:8a:da:dd:da:e4:bc:62:5e:d3:24:d1:4a:80:43:
         31:82:ce:25:7d:a8:0e:98:84:57:e2:10:26:24:44:de:0c:d8:
         ac:71:0c:6d:7e:80:a1:77:ca:4b:50:a6:32:62:07:72:71:d4:
         26:76:19:ce:be:a4:b8:de:a6:45:68:85:52:1d:01:c1:71:2a:
         92:86:48:c1:4e:d3:d5:80:ca:41:a8:b7:64:f5:89:d0:5d:85:
         ce:c6:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:42 2025 by rpki-client