Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
File:                     adRwF7UV7iFLKEIO2-2zAVwW7ik.mft (raw, json)
Hash identifier:          C7QMakps/l4iwhbhdKlpuvyg3pixm5jhJ1Lrk3Eqjm0=
Subject key identifier:   DE:C2:73:89:37:E1:F3:09:3C:8F:8B:C0:23:F1:D6:93:D6:C5:59:0A
Authority key identifier: 69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29
Certificate issuer:       /CN=69d47017b515ee214b28420edbedb3015c16ee29
Certificate serial:       0194C387AE7D2C8E3CA2FE4865FAE5B20BD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
Manifest number:          142A
Signing time:             Sat 01 Feb 2025 22:00:36 +0000
Manifest this update:     Sat 01 Feb 2025 22:00:36 +0000
Manifest next update:     Sun 02 Feb 2025 22:00:36 +0000
Files and hashes:         1: adRwF7UV7iFLKEIO2-2zAVwW7ik.crl (hash: 9nu2X6L/QdIXdMFbJ2fjE17jb5l94GNYKKgOHm5+p1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:87:ae:7d:2c:8e:3c:a2:fe:48:65:fa:e5:b2:0b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d47017b515ee214b28420edbedb3015c16ee29
        Validity
            Not Before: Feb  1 22:00:36 2025 GMT
            Not After : Feb  2 22:00:36 2025 GMT
        Subject: CN=dec2738937e1f3093c8f8bc023f1d693d6c5590a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:19:af:93:10:1d:de:93:b9:77:c3:cc:17:
                    1e:76:d1:5b:ab:7d:82:21:54:ee:36:6b:5e:4f:d5:
                    fc:49:48:e8:9e:6e:92:8d:76:de:a1:11:7b:34:d6:
                    7f:a3:c0:d5:93:d5:5f:d6:27:85:4b:af:7a:7f:2c:
                    75:a5:54:88:5e:00:42:2d:75:8d:51:57:68:b9:37:
                    a6:cc:48:38:97:61:3c:92:8a:d4:b7:44:78:15:46:
                    ba:32:93:36:c3:18:c0:ba:f0:f4:60:4e:80:2e:6a:
                    b4:46:34:d7:c9:57:c3:45:6f:87:c7:4e:7d:6d:cb:
                    59:89:a6:91:ce:02:e3:2f:d7:d5:d1:75:7d:5b:a8:
                    3b:97:a8:d9:19:94:5e:00:15:6a:c0:23:19:59:e2:
                    ca:bc:eb:98:75:5d:36:75:d2:1c:98:4b:a8:86:99:
                    2f:79:64:fe:20:05:eb:aa:b5:f9:fc:22:8b:f6:53:
                    a7:4d:d3:94:d4:e5:b6:b8:31:2a:cc:eb:19:ac:61:
                    67:8b:85:6d:2a:5e:74:f2:c1:b9:c1:1c:7e:e6:28:
                    37:d8:75:85:89:4e:25:95:ca:21:17:dd:b2:ce:da:
                    8a:51:67:c6:d8:49:7e:ac:43:e8:88:77:14:14:3b:
                    74:4e:21:5a:7e:73:61:20:bc:44:2c:38:4f:b4:4f:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C2:73:89:37:E1:F3:09:3C:8F:8B:C0:23:F1:D6:93:D6:C5:59:0A
            X509v3 Authority Key Identifier:
                keyid:69:D4:70:17:B5:15:EE:21:4B:28:42:0E:DB:ED:B3:01:5C:16:EE:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adRwF7UV7iFLKEIO2-2zAVwW7ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/537cfc-370c-4b7b-98d4-23b4c93356f8/1/adRwF7UV7iFLKEIO2-2zAVwW7ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:95:b5:c4:f1:53:a6:79:e6:cd:6c:48:fa:56:3d:f5:14:76:
         82:8c:58:7d:04:4f:f4:ff:c3:22:70:8f:70:35:05:28:37:7e:
         58:00:f7:a5:99:1e:26:ee:78:16:4a:24:3e:b2:31:eb:8b:aa:
         17:2c:3d:45:cb:c4:32:de:0b:79:8b:e3:83:54:f4:5d:c4:92:
         a3:2c:67:3d:62:60:98:f8:92:ce:30:97:85:85:c6:90:0b:2a:
         26:42:84:ab:e7:64:1b:49:fe:ca:ca:a3:fc:9d:38:f2:b6:50:
         e5:39:09:d9:3f:ca:4d:89:e7:00:b7:bf:14:6a:fb:53:60:db:
         75:3b:fb:ff:84:7e:c8:e7:6a:57:c5:b6:4c:5e:80:81:14:67:
         07:49:70:e4:76:59:e2:18:6e:00:e7:0d:62:22:8b:b9:8e:e3:
         af:1b:e3:e3:b5:10:6f:4a:1f:14:4b:91:52:0f:82:5c:10:c1:
         0e:51:73:11:79:47:e8:a3:49:46:bb:eb:73:eb:46:7f:00:2c:
         90:9d:70:b1:03:ee:13:c3:33:c6:52:6e:40:4f:97:d8:4a:65:
         18:ad:3c:04:3c:ff:6d:ea:82:76:e9:6b:6c:dc:dd:5f:6e:d7:
         a8:d6:c4:a8:3e:27:27:64:c2:f9:52:53:bc:97:a5:da:e0:6c:
         34:e5:2a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:43:45 2025 by rpki-client