Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
File:                     mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft (raw, json)
Hash identifier:          AmUHeIzuqrA+qrjs+q2xQEW3+8TKMlx5fIFIuCyVCBg=
Subject key identifier:   04:F3:3E:90:73:82:C7:A1:35:04:9F:92:96:03:1C:A2:93:8E:2A:09
Authority key identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
Certificate issuer:       /CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Certificate serial:       01951210CE654780857BC2CA3298236C2BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
Manifest number:          1454
Signing time:             Mon 17 Feb 2025 04:00:45 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:45 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:45 +0000
Files and hashes:         1: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl (hash: 4JZvT2gA0h1L9Q0JnZOyRZbl4s6OSo2DIYCdUNQwS4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:ce:65:47:80:85:7b:c2:ca:32:98:23:6c:2b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
        Validity
            Not Before: Feb 17 04:00:45 2025 GMT
            Not After : Feb 18 04:00:45 2025 GMT
        Subject: CN=04f33e907382c7a135049f9296031ca2938e2a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:aa:65:d8:95:28:3b:40:01:50:19:c5:6c:
                    3f:e1:de:82:b9:56:e9:1e:16:d4:dd:a2:3e:4a:3a:
                    de:ae:06:78:62:34:96:19:7d:b2:50:6b:00:5a:00:
                    af:cd:0e:28:6b:a1:dd:dd:0e:1a:21:c9:2d:cc:f9:
                    0b:be:b2:37:cb:89:87:5f:ef:17:8b:c6:60:13:b6:
                    61:e6:f6:c2:64:92:c6:09:62:9f:a0:99:fd:bd:cb:
                    e7:94:35:8f:bf:2d:26:d3:01:72:5f:d9:e9:a0:a2:
                    19:dd:04:34:10:b4:84:e0:4e:3a:79:60:7e:c7:0e:
                    96:50:36:90:54:e6:2a:0d:a2:33:af:67:00:d9:e3:
                    a7:94:b3:a9:47:62:10:30:28:1b:12:e9:1a:c9:20:
                    f1:df:56:6a:e6:fd:ac:04:5e:0b:2d:d5:36:a9:43:
                    ca:bf:b9:22:24:c8:7e:57:07:8b:d7:d3:b2:21:22:
                    9d:ea:02:87:7b:ba:37:90:dd:0a:c7:b3:9e:3b:05:
                    a3:9e:16:88:b6:e3:f1:6d:5e:bf:d0:37:c1:95:1a:
                    d2:52:03:32:76:5f:c1:ae:d0:25:28:c9:15:90:22:
                    1a:79:0c:95:55:13:bb:fe:0d:d7:54:42:08:e9:2b:
                    8c:06:3a:68:8b:ba:ba:bb:f9:de:a6:92:37:46:e7:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F3:3E:90:73:82:C7:A1:35:04:9F:92:96:03:1C:A2:93:8E:2A:09
            X509v3 Authority Key Identifier:
                keyid:99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:82:7a:b5:ad:92:d9:fe:ec:24:25:b3:70:23:66:c3:c1:0f:
         3e:41:9f:cb:db:23:c5:6d:23:d7:04:9f:82:ab:36:33:e4:b3:
         48:33:75:4e:63:b7:d3:94:71:53:b7:1e:a9:bf:28:fe:5b:af:
         e5:96:b8:50:a2:43:72:b8:d5:ca:49:b5:dc:c8:5c:78:5c:62:
         09:4f:23:d1:c0:02:a6:cd:14:ee:b1:3b:43:26:4e:24:8d:94:
         e8:21:7f:a6:05:b8:b2:24:d4:f8:24:e4:51:5c:16:dc:3f:91:
         24:a2:a0:ee:f8:69:48:90:21:af:4a:5e:75:ef:d8:ad:d3:7e:
         5f:72:72:23:76:a5:b5:11:11:13:35:7a:9f:b3:38:58:0d:25:
         6d:85:b5:cb:b9:f8:69:ae:72:1a:1b:4c:82:d6:f0:b4:32:13:
         96:e7:02:20:65:f6:e5:6b:36:ef:2c:9e:d5:18:d1:03:a3:c1:
         5d:7a:f9:50:d5:b5:61:1a:6f:55:28:bc:61:ab:9e:0d:a6:df:
         f3:6d:f5:ba:b4:5e:d1:a4:2f:fd:28:61:12:ce:28:1f:9d:49:
         b9:da:fe:58:d8:aa:fe:c8:69:87:5b:6b:89:bb:cd:0c:38:bf:
         82:66:b6:12:02:58:90:dc:8d:a6:4a:50:6a:76:d2:e7:b6:1c:
         92:05:20:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:05 2025 by rpki-client