Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File:                     Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier:          h3ksSPyK97XbTiUFEbuPN4+l61U0RwEPRRmMRb9Zcsw=
Subject key identifier:   9D:CF:74:78:12:64:10:50:18:4B:B3:9C:ED:96:69:65:90:9A:71:C7
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer:       /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial:       0194C463964C22DA074833D09F510964A523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number:          0EB1
Signing time:             Sun 02 Feb 2025 02:00:48 +0000
Manifest this update:     Sun 02 Feb 2025 02:00:48 +0000
Manifest next update:     Mon 03 Feb 2025 02:00:48 +0000
Files and hashes:         1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: AlFLcykEBBGMNuEmGV7vLWwIBsWpjiN/iSHPeyFKYgw=)
                          2: VamyIGwTeApv3br21vu8DRl3PlY.roa (hash: K9RmbYzkfK+s/ge5R78t4ap7tap6ruoWiSMqd2gyOlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c4:63:96:4c:22:da:07:48:33:d0:9f:51:09:64:a5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
        Validity
            Not Before: Feb  2 02:00:48 2025 GMT
            Not After : Feb  3 02:00:48 2025 GMT
        Subject: CN=9dcf747812641050184bb39ced966965909a71c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:1a:9f:ed:57:72:98:9e:7e:fa:29:f1:2e:
                    ba:ec:85:0c:bf:7f:d5:f7:c9:cd:f7:00:09:83:de:
                    1d:ba:27:de:15:38:32:be:7b:e4:c2:05:92:92:23:
                    eb:bf:6d:58:57:c8:07:6b:ca:52:d1:76:a0:cc:3c:
                    6c:a5:61:a9:c7:76:ff:2a:7a:32:6a:d8:7e:8c:57:
                    2d:71:14:55:23:f9:92:b4:d1:dc:b5:e8:14:17:fc:
                    81:8b:bc:a9:b3:a9:9d:1f:2b:d8:98:bc:e4:ec:b8:
                    71:d4:65:e8:00:89:11:98:84:12:3e:96:98:20:ba:
                    a3:4f:fc:a4:71:53:cf:bc:24:62:6a:95:55:13:b7:
                    b7:1d:9f:6f:ba:0a:06:47:2a:37:68:f9:ff:b8:a7:
                    cf:a8:03:a0:94:2e:c1:80:1b:29:11:f1:d0:9a:1b:
                    40:2b:fb:2a:fe:38:cb:c6:17:e3:88:ca:e4:b3:85:
                    86:df:d8:e0:78:74:62:f8:c0:d5:97:f6:b0:af:da:
                    6e:5f:8b:d6:02:9f:8b:79:14:87:44:6b:79:89:be:
                    52:00:f2:67:22:d3:d9:44:64:f5:17:62:c2:9e:b0:
                    32:8e:de:a8:59:53:75:2a:20:2c:71:0d:ab:c2:bd:
                    f7:b0:b1:6b:f4:d2:3c:ec:45:9f:4a:ab:4d:8e:66:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CF:74:78:12:64:10:50:18:4B:B3:9C:ED:96:69:65:90:9A:71:C7
            X509v3 Authority Key Identifier:
                keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e2:61:9a:46:7c:8f:de:ca:be:97:e7:c7:3b:26:49:6a:09:
         16:ed:d9:50:07:51:06:0c:09:1b:d9:62:8d:ef:78:50:8d:f5:
         7f:2b:93:48:ea:8f:f3:20:a5:df:f4:d7:ff:d1:3d:1a:c2:d9:
         c7:fe:98:cc:84:c3:91:29:f2:a6:15:a4:ea:09:60:81:ce:ef:
         60:2a:bc:da:95:91:2e:9e:91:63:93:38:8e:22:93:3a:c0:a8:
         d4:40:a6:87:20:d8:02:aa:2f:0c:1b:c7:7b:78:d6:75:db:8e:
         5d:ac:9f:e2:67:e8:47:3a:57:77:1f:2b:8b:46:23:e1:df:b0:
         ae:7e:30:c4:e7:15:7c:bd:72:e3:65:77:4d:b7:2b:a4:1d:e1:
         22:18:5b:08:2d:95:2f:67:bf:92:69:0d:03:50:55:91:83:44:
         59:1e:fb:1f:1b:8b:09:0a:85:5e:68:27:1b:d2:de:83:8a:54:
         d4:5d:11:15:7d:9b:6e:c2:31:56:4b:ee:0d:d6:62:c7:ac:6b:
         31:8c:26:ee:f7:5f:c3:88:e1:fd:98:e1:07:6a:5f:9c:cf:74:
         89:60:f5:88:15:d5:44:66:58:6f:75:d4:26:1c:35:7d:ce:b1:
         c4:cf:4a:72:3c:ec:2f:89:89:71:41:3e:ff:d8:b9:d5:6f:87:
         5c:8e:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:54 2025 by rpki-client