Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
File:                     zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft (raw, json)
Hash identifier:          vUBqtFzUZ04yjgR/rHH+GyHlOU62sZfFAmh/p/SWhrs=
Subject key identifier:   D8:1A:A0:44:3F:DF:A2:A6:FC:AE:28:7C:5A:4C:70:FE:76:39:9B:8F
Authority key identifier: CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
Certificate issuer:       /CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Certificate serial:       0194BB2914CAD6D937573FB32915C68BE424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 07:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 07:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 07:00:19 +0000
Files and hashes:         1: WMmVXxLBNxJnZE-IVz74wBzTPGY.roa (hash: 8cKtSjQsmp93ydLLkC85Xv608/v/eBo4I+GY+4AHbek=)
                          2: zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl (hash: b2/kAORW7iyMIh02pP0LPWkP88r65/Q9PiK35t/jMRk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:29:14:ca:d6:d9:37:57:3f:b3:29:15:c6:8b:e4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
        Validity
            Not Before: Jan 31 07:00:19 2025 GMT
            Not After : Feb  1 07:00:19 2025 GMT
        Subject: CN=d81aa0443fdfa2a6fcae287c5a4c70fe76399b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:6a:0a:b7:aa:1e:3f:eb:92:37:15:cb:60:
                    db:0d:dd:4e:26:d5:48:c0:9e:da:11:e4:e3:a7:88:
                    54:fb:7e:56:a8:67:70:97:ed:df:7f:31:b5:7c:09:
                    c0:00:f3:1c:2b:62:71:97:fe:44:80:0c:c6:f0:02:
                    3a:41:c5:a2:51:4c:64:2f:d6:79:94:96:d4:5e:3d:
                    53:53:52:2e:73:31:11:3f:dc:42:ea:62:22:2c:cb:
                    d7:5f:8b:05:e7:54:5b:27:8e:65:32:48:04:53:e5:
                    bf:72:da:59:b5:26:3f:b5:87:91:3b:06:af:ed:56:
                    e2:a4:e6:d1:a3:c0:52:c0:f6:1b:c1:3d:60:f9:4b:
                    d0:72:0c:28:23:4e:1d:7f:6c:ff:1a:31:9f:c2:cc:
                    da:8b:40:de:9e:17:9b:91:d2:6a:b2:37:cc:09:84:
                    76:20:58:d1:b6:94:00:63:05:3b:6a:1f:b4:0a:cf:
                    ef:ca:e5:f7:71:45:46:1b:39:e4:18:20:a4:1a:3f:
                    cf:2f:2c:c2:47:d3:f4:04:ce:d7:21:41:1f:a2:77:
                    fd:31:fc:6d:4e:1d:ae:24:41:23:af:fb:5f:f9:e7:
                    4b:35:70:b9:1e:64:80:01:21:c1:cc:37:6f:90:f1:
                    5b:85:64:bb:17:f7:87:03:b8:48:d5:05:b9:4b:61:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1A:A0:44:3F:DF:A2:A6:FC:AE:28:7C:5A:4C:70:FE:76:39:9B:8F
            X509v3 Authority Key Identifier:
                keyid:CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9c:99:5d:eb:ea:f8:31:e8:d3:9c:11:04:92:f8:a4:e4:f5:
         d0:24:40:94:32:62:2b:0e:5a:73:3b:70:88:56:c6:7e:70:5c:
         6d:75:6b:72:eb:c3:c6:87:c5:5f:8f:7e:4b:77:f2:32:86:90:
         73:67:ea:65:db:d0:73:40:b4:21:bf:4f:a7:b8:5b:e4:bf:61:
         fc:bd:21:37:5a:70:2e:b4:55:03:97:3c:47:7e:37:99:1f:c1:
         65:3f:10:dd:9f:78:9d:fe:c3:9d:56:61:3b:db:ab:44:3a:17:
         8d:47:b2:c5:46:20:3c:c4:4f:c6:c0:35:68:d2:7b:40:51:95:
         fe:3b:b3:dc:c6:f7:b3:f9:c3:83:5e:4c:0e:cc:f7:ae:5a:95:
         86:a9:a4:be:a1:a8:3c:be:ee:c4:17:48:15:83:ba:3c:a9:ec:
         28:8a:f6:b2:20:a9:0a:46:51:10:3a:37:e0:0e:f1:71:28:85:
         bc:5c:18:ba:f9:31:e9:1d:96:c5:4c:a4:ba:99:15:a4:2f:b6:
         e1:62:41:68:44:6d:92:49:91:f3:99:bf:3a:6c:cf:2b:e4:53:
         78:8e:af:fa:bc:95:02:82:6e:86:bf:88:b3:16:81:72:e7:97:
         dc:8c:82:fe:33:c0:82:ed:1b:2a:0f:9d:2c:8a:86:ce:c1:87:
         50:05:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:50 2025 by rpki-client on console-fra.rpki-client.org