Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
File:                     2V_Z-7sug4agu3amyEH8aKfD65g.mft (raw, json)
Hash identifier:          OboAcrI7u+/Ikbw1jasLfTkBOu0yR145gejnsBbuX1c=
Subject key identifier:   53:BE:E7:12:C6:8F:22:F9:11:F0:CE:FF:23:2A:4A:64:70:27:9C:02
Authority key identifier: D9:5F:D9:FB:BB:2E:83:86:A0:BB:76:A6:C8:41:FC:68:A7:C3:EB:98
Certificate issuer:       /CN=d95fd9fbbb2e8386a0bb76a6c841fc68a7c3eb98
Certificate serial:       0194C49A1B9A655CD2C798717A13EB5965AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
Manifest number:          80
Signing time:             Sun 02 Feb 2025 03:00:21 +0000
Manifest this update:     Sun 02 Feb 2025 03:00:21 +0000
Manifest next update:     Mon 03 Feb 2025 03:00:21 +0000
Files and hashes:         1: 2V_Z-7sug4agu3amyEH8aKfD65g.crl (hash: E2Sc4AemwdOrlEpJ/l6ax2Te+sHC0RQeCFCg87HQGeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:9a:1b:9a:65:5c:d2:c7:98:71:7a:13:eb:59:65:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95fd9fbbb2e8386a0bb76a6c841fc68a7c3eb98
        Validity
            Not Before: Feb  2 03:00:21 2025 GMT
            Not After : Feb  3 03:00:21 2025 GMT
        Subject: CN=53bee712c68f22f911f0ceff232a4a6470279c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:cf:50:e7:7e:15:5a:ab:cd:17:f8:c5:72:
                    9a:4f:15:74:15:f1:00:17:75:03:e3:59:fe:0e:d9:
                    8d:c7:f3:96:b0:3b:3c:e2:1d:cd:8f:79:1f:42:a1:
                    b9:23:25:4c:7e:bd:7f:6f:6e:f0:0a:f5:37:d7:8a:
                    78:b5:1b:08:f6:c3:a8:22:9e:8d:e4:8e:da:72:3b:
                    4b:00:3e:12:af:6e:78:1d:b9:3b:39:84:43:ca:22:
                    a8:14:62:84:aa:0b:04:a4:d4:18:34:c0:b6:a6:a3:
                    dc:09:61:de:8d:c6:87:81:33:a3:71:ab:01:18:6c:
                    59:af:31:e4:98:e0:3c:c9:a4:6c:65:54:eb:03:9f:
                    5a:e4:19:50:1b:a1:73:bd:f2:78:f3:9a:78:0d:47:
                    9e:cd:43:80:c9:46:85:9a:8c:50:4a:4a:c3:c8:dd:
                    db:92:0c:8f:fc:0c:dd:3e:e4:00:e8:03:c6:3e:f7:
                    70:3a:66:0b:56:df:9e:15:4a:a9:73:54:fb:48:10:
                    d9:b8:26:18:6e:e6:b1:b4:60:f6:71:11:5c:8c:72:
                    ff:d7:96:53:33:bc:31:f5:50:2d:3e:26:cb:ff:d9:
                    9e:e0:1f:b8:25:26:15:ae:c2:1b:a3:3c:63:23:2e:
                    1c:85:c8:bc:a6:dd:85:99:ab:b0:95:8f:a9:75:96:
                    d8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BE:E7:12:C6:8F:22:F9:11:F0:CE:FF:23:2A:4A:64:70:27:9C:02
            X509v3 Authority Key Identifier:
                keyid:D9:5F:D9:FB:BB:2E:83:86:A0:BB:76:A6:C8:41:FC:68:A7:C3:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V_Z-7sug4agu3amyEH8aKfD65g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3220c-4d66-4d4c-9358-320df2eb0fd2/1/2V_Z-7sug4agu3amyEH8aKfD65g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:79:8c:88:29:57:ec:34:40:4b:02:d2:48:f9:8e:56:cc:bf:
         ab:2c:6b:8a:11:79:39:4a:24:25:88:5e:4d:24:3b:77:7e:0b:
         47:0e:c2:c9:36:68:41:e5:89:05:a5:aa:63:1a:fd:86:6e:ae:
         7a:83:3d:ec:b9:75:a9:ee:d9:d5:ee:77:c1:dc:74:36:80:56:
         d1:a9:b7:4b:c9:45:0b:85:e8:41:94:71:6e:2e:73:3d:18:bc:
         8d:66:38:8c:cb:ee:4e:34:d8:ac:43:cd:ca:32:df:cf:0e:9e:
         e2:51:43:3a:10:e2:e1:fb:ca:81:98:79:9c:ab:e7:8f:10:45:
         35:e8:28:38:16:69:fd:f5:97:22:ea:11:bb:0e:a3:b0:c2:8c:
         63:82:94:d7:72:72:fe:e8:bc:1b:ed:e4:eb:dd:84:9f:7b:41:
         a1:1c:6f:b0:16:cc:e9:a9:f7:07:d2:da:64:0a:ac:d7:0e:6d:
         24:65:6d:26:d9:6e:a7:68:12:7d:7e:0b:d9:e5:f8:e1:47:04:
         e8:2a:8f:90:15:6b:0d:3b:d3:2c:62:44:da:8b:5b:d8:24:87:
         66:70:b5:73:0f:45:a2:4b:57:af:21:f9:5d:6f:4f:3d:e9:fe:
         36:83:3d:42:a3:81:b5:73:8d:a8:1d:e3:b5:47:2f:22:91:0c:
         75:54:36:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:51:17 2025 by rpki-client