Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
File:                     k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft (raw, json)
Hash identifier:          6rb4c59kU6yc84kd7pCKqcJ/+RK4xAtUDEHZzr6ZKqM=
Subject key identifier:   A3:D4:70:A1:6D:E5:07:82:D1:62:FC:CB:FB:0C:79:6C:21:15:72:0E
Authority key identifier: 93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB
Certificate issuer:       /CN=934449923648062d79433dc86d32efe42cacb3db
Certificate serial:       0194C3887DABC8A3D00A4AD0089630BC907F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
Manifest number:          142C
Signing time:             Sat 01 Feb 2025 22:01:29 +0000
Manifest this update:     Sat 01 Feb 2025 22:01:29 +0000
Manifest next update:     Sun 02 Feb 2025 22:01:29 +0000
Files and hashes:         1: k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl (hash: IyjuMNlmkSrVoE1Ra8s4S+Mj1AgbcLvzNw9me6286y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:88:7d:ab:c8:a3:d0:0a:4a:d0:08:96:30:bc:90:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934449923648062d79433dc86d32efe42cacb3db
        Validity
            Not Before: Feb  1 22:01:29 2025 GMT
            Not After : Feb  2 22:01:29 2025 GMT
        Subject: CN=a3d470a16de50782d162fccbfb0c796c2115720e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:8b:9f:d2:1d:b8:5f:65:26:fb:69:3d:0e:
                    2f:4f:b2:9f:aa:e5:0a:a1:d6:2b:7a:e5:fc:bf:fc:
                    65:41:14:30:d4:4d:cd:0a:11:5a:65:fc:33:21:96:
                    80:ad:f7:ad:7b:b0:d1:f7:81:5a:a7:da:04:6f:4a:
                    4c:14:91:a0:33:23:f1:a5:0b:d6:48:32:02:9e:ef:
                    9e:8a:38:91:1c:de:fe:f2:12:e9:d2:06:c4:d2:ff:
                    63:ef:fe:20:2a:ec:54:71:d8:70:6b:5e:ed:bf:29:
                    01:ff:05:e9:9d:b6:17:46:93:80:e0:3a:19:44:d5:
                    7c:67:7d:29:ad:b5:88:93:ba:10:23:98:6c:2c:2a:
                    b1:16:34:a0:86:ee:b6:79:66:1f:7e:5a:ce:b7:3f:
                    b1:ee:13:df:ac:38:e6:fc:a7:49:8f:c1:d5:8f:09:
                    70:1c:68:38:82:b0:f7:aa:2f:1d:a2:ac:38:a9:1a:
                    f6:7d:68:3d:4d:06:7f:0c:25:6f:b1:de:36:f5:cc:
                    3e:19:ff:94:5d:60:40:16:64:fe:84:b5:13:99:7f:
                    1c:90:70:96:00:88:93:82:c5:f3:8b:6e:e2:3f:c8:
                    7c:1e:3c:71:16:a3:4e:f7:d5:f0:8e:bc:9c:55:01:
                    97:df:fd:b0:ec:8e:cc:79:8f:52:81:1f:f6:78:7e:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D4:70:A1:6D:E5:07:82:D1:62:FC:CB:FB:0C:79:6C:21:15:72:0E
            X509v3 Authority Key Identifier:
                keyid:93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:75:19:bc:51:8e:b9:de:17:46:02:09:49:14:87:81:e5:ad:
         c0:2c:59:09:d3:f0:df:d8:17:94:b9:3f:1b:d2:d5:03:d0:8d:
         99:eb:ba:4b:24:cc:b6:d9:bf:39:39:4b:93:90:f0:0d:f5:66:
         c0:f1:d2:6f:5d:a9:f5:49:59:0b:3f:db:e1:07:98:e5:e6:6b:
         a4:1b:12:03:b3:d9:37:90:2d:56:02:13:1a:21:fe:76:5d:88:
         b6:af:4d:fc:13:54:02:8f:38:17:41:1d:6f:6b:1a:e0:1d:b6:
         d5:d3:be:e9:ac:53:f4:e5:d5:73:17:49:f0:15:7b:f0:a8:ca:
         a8:ea:70:21:85:2b:00:3f:0a:75:81:b9:ca:51:63:ac:fd:3e:
         87:ef:ee:83:a2:cb:b2:94:e7:69:ae:ba:1d:89:c0:b4:e8:c4:
         a6:e6:f2:fe:20:24:85:2c:b0:ec:ee:d0:98:3f:f2:d8:cc:49:
         fe:7e:75:1e:94:39:98:a1:d6:39:81:cd:54:ea:d0:bf:06:27:
         9a:2e:98:85:bd:9c:f6:05:72:0e:a4:aa:11:c4:ea:92:42:1a:
         20:e3:29:df:04:54:90:79:52:eb:38:9d:a5:01:09:58:ba:be:
         0f:ad:18:29:bf:7d:df:53:ba:81:fb:51:72:d0:89:b7:67:93:
         e8:cf:00:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:34 2025 by rpki-client