Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
File:                     SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json)
Hash identifier:          fGCah41jnk7vK2nle12rjDBfnceoWZk+4cGKafvVLRE=
Subject key identifier:   DA:79:11:B6:43:E5:D0:96:40:9A:3D:9D:EF:6B:77:07:F8:52:00:AE
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Certificate issuer:       /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial:       0194BAF2400185CA5A66B1A71D13F3283A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
Manifest number:          0984
Signing time:             Fri 31 Jan 2025 06:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:25 +0000
Files and hashes:         1: FZ5EZpDq-K0XA4SjrzGHyd153to.roa (hash: b4KiX1j/3r//4ngjLPvb5RfQAtdM3BaY0Jf4yPv0wJk=)
                          2: NVd8LXx_N2OnP7Dz0qYfp0BrwyE.roa (hash: KXS5t23U3JN9IkH4G9USA7r6qnruCVWmREWySxRe2Ns=)
                          3: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: JGWbxALeaDr70QwLmugen+hMlLcuNgs6F7zNPREuXTE=)
                          4: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=)
                          5: u7FYseYTvFuik1kkZdQXan5NUT4.roa (hash: OILWNi9mv9AwF8S+yDdOr81iUCDmwjfaxbEGwvX0caY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:40:01:85:ca:5a:66:b1:a7:1d:13:f3:28:3a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
        Validity
            Not Before: Jan 31 06:00:25 2025 GMT
            Not After : Feb  1 06:00:25 2025 GMT
        Subject: CN=da7911b643e5d096409a3d9def6b7707f85200ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:f1:46:dd:40:33:37:ca:d0:e1:4f:17:aa:
                    f2:bb:d2:b9:1e:10:f1:d5:e8:5b:50:50:72:06:1b:
                    c5:46:6e:cf:f3:6e:53:6f:9c:b7:d1:dc:f9:27:17:
                    f3:68:a6:3e:ec:fd:71:c6:5e:80:41:63:e9:35:1f:
                    07:62:46:54:17:20:56:47:82:48:89:f2:98:91:2e:
                    d1:45:05:b2:17:a9:a9:81:94:95:46:45:52:f1:ca:
                    df:a3:65:bc:8b:28:2d:2d:f4:33:2d:7b:5e:ba:14:
                    9a:31:99:45:e9:2d:b6:53:41:71:03:69:27:00:54:
                    6c:5b:14:96:b8:75:f3:64:29:cc:4b:39:e2:f5:71:
                    44:63:41:47:24:96:8a:4c:d7:3c:20:56:8d:ee:61:
                    93:e4:37:90:2c:38:30:bc:55:47:66:03:b4:02:3b:
                    0b:b0:cd:a2:73:48:7b:b4:55:13:84:6b:ea:95:ae:
                    98:3f:3c:f8:c8:a8:88:2b:ee:ef:3a:bc:b4:93:04:
                    2e:46:76:3d:70:47:1d:7b:d3:09:72:3a:d5:30:ca:
                    ff:6e:36:03:98:3d:5c:82:43:18:75:66:8d:b7:04:
                    4d:29:5a:8f:6a:7f:fb:a6:d1:ea:cb:93:34:a1:18:
                    a3:71:25:de:cd:7a:a2:7b:a2:38:1a:8c:ee:a6:81:
                    b9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:79:11:B6:43:E5:D0:96:40:9A:3D:9D:EF:6B:77:07:F8:52:00:AE
            X509v3 Authority Key Identifier:
                keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:33:42:71:a0:04:5e:a4:74:6b:62:7c:2e:95:49:05:14:b4:
         c1:c6:c8:ed:6a:5b:09:2a:36:47:cf:f7:d0:4c:0a:2c:80:c8:
         79:34:1d:fa:3e:95:76:a4:92:8a:d7:6d:b9:5d:73:e7:c8:86:
         ad:dc:d3:f6:31:7b:12:8e:c1:58:71:ee:05:51:b5:e3:8c:7a:
         8b:4a:5e:63:7a:d2:b5:a3:32:a0:f0:4f:ba:3f:99:47:84:1c:
         cd:a4:a8:5d:0d:03:de:cf:24:32:04:91:1a:9e:d1:1f:3c:c2:
         b9:29:3b:09:fe:eb:c4:56:68:31:77:cc:28:bb:94:56:51:c0:
         c4:86:cb:1b:0b:47:c6:c7:53:bb:be:f3:d5:a5:1a:bc:fd:7d:
         40:36:86:d1:8e:82:e1:41:c3:21:b0:90:ce:0a:41:83:90:ee:
         8e:02:25:c1:fa:26:cf:61:0d:48:39:03:63:5d:a7:9b:40:7a:
         86:ae:2c:e7:51:2e:ae:2b:4a:9d:87:78:ee:e0:ac:00:c3:af:
         aa:cb:20:5b:78:62:77:67:7b:df:f2:23:62:9b:f9:09:7d:cb:
         ee:48:6a:cc:90:c4:30:63:56:b4:bf:8a:96:d7:56:b8:9e:fb:
         7c:b1:68:cd:b4:f5:61:91:31:2e:f0:68:4d:a4:27:01:8e:b1:
         c6:0d:58:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:40 2025 by rpki-client on console-fra.rpki-client.org