Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
File:                     qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft (raw, json)
Hash identifier:          elpwzm02TNWduAX171tZljKvA4c+OdfrRijdPUuhD7M=
Subject key identifier:   24:EF:B8:1F:5F:1B:23:C5:B4:B5:F3:DD:BE:85:3A:7F:3C:72:E5:11
Authority key identifier: A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5
Certificate issuer:       /CN=a8707679223c883fed7f7c79ff2f293bff8730b5
Certificate serial:       01951247999B75E1F5BF0B770C0F651C78FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
Manifest number:          05EA
Signing time:             Mon 17 Feb 2025 05:00:37 +0000
Manifest this update:     Mon 17 Feb 2025 05:00:37 +0000
Manifest next update:     Tue 18 Feb 2025 05:00:37 +0000
Files and hashes:         1: qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl (hash: pSyQE6ve2sbeg1Vxym7IeBxr3PYqXbS18+MH4Lfh9SM=)
                          2: yHgH_lMUm4oFa_GnCsmAbIU1COM.roa (hash: MjR/P2+PrAk5Bu0tg2NHyXtBDLvOpshbkzdWh1K2WRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:47:99:9b:75:e1:f5:bf:0b:77:0c:0f:65:1c:78:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8707679223c883fed7f7c79ff2f293bff8730b5
        Validity
            Not Before: Feb 17 05:00:37 2025 GMT
            Not After : Feb 18 05:00:37 2025 GMT
        Subject: CN=24efb81f5f1b23c5b4b5f3ddbe853a7f3c72e511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:5c:53:85:55:55:fa:76:4c:5b:70:f4:de:
                    db:fb:5e:00:7e:6d:c0:2c:0f:a2:44:08:2c:8e:88:
                    0b:a8:8e:5a:da:36:1a:db:4b:72:30:56:cf:d7:d2:
                    7b:36:b4:af:b4:a2:e0:78:b5:57:4d:b2:d2:57:1f:
                    44:73:47:71:81:2b:bf:c1:40:5e:a3:eb:a4:75:45:
                    b7:8b:c5:87:e6:0d:1f:7a:18:21:60:5a:f1:7b:06:
                    db:4f:d9:81:fa:87:07:55:de:44:bd:9e:fd:c8:f5:
                    30:59:a9:71:50:dd:d8:04:8a:39:08:52:d4:f3:a0:
                    4f:b0:ea:a2:cf:58:be:2c:c5:2a:e4:c8:e4:ad:e3:
                    ae:0e:e7:36:cb:a5:1f:eb:2f:3e:93:16:97:18:17:
                    2e:d1:91:19:3f:87:eb:be:dc:9b:95:f8:93:52:16:
                    c4:76:03:c1:17:53:e3:3a:a0:3c:2e:67:ab:15:bc:
                    66:0f:a0:18:84:29:2c:2c:e4:63:7d:7a:d2:87:31:
                    2e:80:99:54:a5:bc:97:24:74:34:91:2f:0b:6f:5d:
                    e9:84:72:32:88:09:76:aa:a2:22:9c:84:27:5a:eb:
                    28:d2:4e:6c:64:72:9c:75:09:3f:f1:4d:78:29:8c:
                    10:6b:74:00:6c:01:da:08:c5:89:3b:a8:ac:a4:65:
                    c9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EF:B8:1F:5F:1B:23:C5:B4:B5:F3:DD:BE:85:3A:7F:3C:72:E5:11
            X509v3 Authority Key Identifier:
                keyid:A8:70:76:79:22:3C:88:3F:ED:7F:7C:79:FF:2F:29:3B:FF:87:30:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHB2eSI8iD_tf3x5_y8pO_-HMLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9866-dbf6-4294-94b9-407fef69cfb8/1/qHB2eSI8iD_tf3x5_y8pO_-HMLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e5:22:59:1d:42:71:2d:9a:5f:e2:88:0d:7e:de:81:33:9b:
         ce:1b:99:a7:ae:9b:47:f7:eb:15:db:9e:7e:5f:6c:04:c0:d8:
         ec:a8:dc:66:8f:e4:c6:ba:d2:15:61:36:48:e8:c0:31:3f:b1:
         66:9a:51:13:cb:f1:5c:97:a3:2c:b2:39:2b:56:81:c6:ff:6c:
         62:9b:28:fe:c7:ef:0e:52:86:60:84:b2:b4:50:56:bb:66:01:
         04:2a:66:ac:af:c2:48:27:16:db:ed:7d:9c:21:5f:c1:3d:67:
         19:4d:79:34:cf:ed:fc:09:b6:3d:76:60:b9:20:5c:99:c6:29:
         64:ba:ce:7e:b7:78:06:07:85:d8:83:2a:e6:83:54:50:ff:80:
         3d:ec:44:47:ff:b6:0a:26:c9:e6:b0:9f:01:61:fe:62:ff:0f:
         b3:9c:d4:7e:f3:2a:04:0e:07:0f:a5:e7:25:c7:6c:2d:23:3e:
         f6:67:f7:d7:66:b1:ed:ef:5d:e1:79:0f:fd:c5:48:f4:0e:26:
         04:e7:c5:82:71:f8:6b:db:95:75:e4:ab:47:21:24:64:e0:60:
         b3:42:e5:92:7f:fd:84:a4:53:98:fc:bd:c7:d3:b6:e5:eb:cb:
         0d:e4:2c:62:51:d5:e7:b9:a8:14:7f:c7:80:31:ff:e1:a1:60:
         ef:f1:d2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:27 2025 by rpki-client