Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft
File:                     227_c-__gSd8LV048ORtbRKnCNc.mft (raw, json)
Hash identifier:          wh95z0DcYRHzqmuFvwFbQ8whv8l0U2yHPb/n/oaIxf8=
Subject key identifier:   57:40:CE:9C:3E:6A:AC:54:4A:82:4C:62:CE:D0:22:91:A2:49:0E:4D
Authority key identifier: DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7
Certificate issuer:       /CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7
Certificate serial:       0194BAF23537039E691C12345C21F7040719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 06:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 06:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 06:00:22 +0000
Files and hashes:         1: 227_c-__gSd8LV048ORtbRKnCNc.crl (hash: PoXUJHOSxTO+aOiTtBzVOOfcOdCuN6F8ti2jzqjY0AM=)
                          2: cmWG-vH2BvPbA67VsqJqB_jv_zU.roa (hash: jJCpozKn5bF6BPqDVQG5hwKj0Mc2BX9AXUCoDqUsDQM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 06:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ba:f2:35:37:03:9e:69:1c:12:34:5c:21:f7:04:07:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7
        Validity
            Not Before: Jan 31 06:00:22 2025 GMT
            Not After : Feb  1 06:00:22 2025 GMT
        Subject: CN=5740ce9c3e6aac544a824c62ced02291a2490e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:09:cb:fd:70:3d:4d:3e:25:48:50:12:73:
                    8a:40:da:76:4f:70:1a:41:21:bc:53:e8:ef:5f:e1:
                    af:61:15:7f:8e:a3:2c:1b:49:23:30:b5:f5:b4:6a:
                    07:e8:77:7b:d4:95:c8:f6:32:35:2b:18:df:48:75:
                    e4:e9:4f:9c:35:ca:c0:08:62:61:45:b7:a5:fe:19:
                    7e:e0:ad:59:82:1c:23:9f:6a:55:a7:12:b8:c1:6e:
                    ad:c2:25:56:c3:9f:28:61:72:c0:ef:2b:06:8c:a7:
                    02:4d:14:1b:cc:4d:fc:bb:71:22:37:49:ad:30:27:
                    57:aa:24:14:23:76:13:e7:08:81:b9:d7:a0:c0:dd:
                    87:a6:6a:0a:ae:c1:9e:08:32:2f:3c:10:66:6c:da:
                    b4:32:42:fe:d4:26:3b:a0:97:99:7f:30:fa:aa:3c:
                    e7:f0:06:bd:6f:72:4e:c3:bc:62:6f:f0:a5:51:7d:
                    85:31:5b:95:0c:16:49:77:64:6a:bf:a0:b3:fc:31:
                    60:38:f4:e7:65:05:c2:27:1c:ba:68:c9:b5:75:a3:
                    72:19:69:db:12:e2:e8:aa:68:6f:b9:3b:5b:f0:ab:
                    fd:59:25:81:df:ad:c7:89:9f:30:dc:8c:f3:61:48:
                    4f:7a:2d:24:27:3e:19:03:91:22:0d:5a:4d:70:fe:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:40:CE:9C:3E:6A:AC:54:4A:82:4C:62:CE:D0:22:91:A2:49:0E:4D
            X509v3 Authority Key Identifier:
                keyid:DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2a:37:23:25:b2:d2:7c:4a:60:74:fe:e8:50:de:84:3c:6a:
         85:11:26:fb:c0:d3:84:10:78:1d:98:f6:1e:fa:9c:fe:2e:0e:
         44:b2:c3:bf:3b:41:6a:fe:45:ed:37:a2:3c:c6:be:cc:03:b2:
         e0:5c:a3:83:76:b3:e3:ba:d4:a0:dc:96:85:07:38:eb:d5:70:
         9d:8e:b6:47:f5:76:a5:71:44:66:64:e2:c5:bf:2d:1b:10:e6:
         ca:07:ba:f5:4a:09:fd:02:d7:ff:b3:29:0f:5d:c1:0c:f6:6d:
         0f:cb:38:df:05:7d:0b:28:80:9d:87:d5:db:5f:8f:4c:45:68:
         d3:11:87:ed:0c:b3:c2:10:93:35:9c:11:be:68:2e:34:60:63:
         5c:ad:33:0a:a7:41:76:cc:8b:f3:60:62:e7:a2:f8:08:51:64:
         68:08:25:42:ac:97:d7:80:ef:9e:62:2f:6e:69:45:d5:7b:f7:
         be:d5:8e:8d:b7:e7:ca:00:97:6c:de:ba:06:9c:44:01:21:fc:
         4d:04:5f:c4:80:35:19:df:91:7d:5d:dd:6b:16:95:72:0a:b9:
         99:2f:8e:cd:40:0b:f6:27:08:02:bf:34:dc:47:42:1d:bd:08:
         29:71:8b:d6:9c:9a:88:c8:8e:d4:99:8f:0b:87:80:a8:4e:07:
         8e:8b:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:08 2025 by rpki-client on console-fra.rpki-client.org