Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
File:                     7YUEg8zhM3scbC_d6pxdu0p-GRo.mft (raw, json)
Hash identifier:          gZ40JNpZO64O/Jon0oealbtZCBEUrw1k+2cNU5p3aK8=
Subject key identifier:   C9:AB:B9:1E:89:F9:EA:4A:68:5F:81:CC:34:B3:6B:B9:B8:BA:A1:11
Authority key identifier: ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A
Certificate issuer:       /CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
Certificate serial:       019511348247C1BBA68AA133AB62F5EEDA61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
Manifest number:          1454
Signing time:             Mon 17 Feb 2025 00:00:08 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:08 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:08 +0000
Files and hashes:         1: 7YUEg8zhM3scbC_d6pxdu0p-GRo.crl (hash: 6jhIsmyuFsEzs+JwkPsfqRpspTVavleKuJQZiwkYaKQ=)
                          2: dkZNbopwMIyrpNTLtKS1BEFrSe4.roa (hash: WHiCQDL82pBvjlz/Bz6xK48gzCLCBs8LyNMasCyQoiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:82:47:c1:bb:a6:8a:a1:33:ab:62:f5:ee:da:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed850483cce1337b1c6c2fddea9c5dbb4a7e191a
        Validity
            Not Before: Feb 17 00:00:08 2025 GMT
            Not After : Feb 18 00:00:08 2025 GMT
        Subject: CN=c9abb91e89f9ea4a685f81cc34b36bb9b8baa111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b2:35:74:e3:3b:3a:05:3d:2f:16:7a:c8:e7:
                    bd:9c:83:7b:71:52:03:c0:db:3c:4f:18:7d:36:9b:
                    37:82:c5:3a:ad:ba:e1:a8:e8:e9:63:bf:9a:da:fd:
                    fa:31:f9:c9:f0:f7:26:1b:e0:a5:f8:16:b1:23:6c:
                    e4:1e:f4:af:6e:00:3e:c8:4f:83:31:70:01:47:94:
                    c8:56:4b:e0:ed:ed:91:67:fe:9b:82:40:09:46:06:
                    03:0f:66:5f:71:86:a2:60:c0:80:e0:11:31:ef:0a:
                    b8:b7:5b:d4:7d:80:6c:c1:4b:5d:29:5a:d0:eb:05:
                    1b:67:ef:1d:bc:43:ed:51:f6:38:f6:88:9b:cd:07:
                    1e:f8:8d:bf:4e:71:15:2f:90:8c:a7:c0:50:60:a9:
                    8b:5a:7a:a4:47:40:54:8f:91:45:07:ba:ec:21:5b:
                    93:20:eb:1e:c1:4b:c1:c7:fd:15:ec:0f:81:8b:e2:
                    33:6d:b5:38:c6:a4:05:13:9a:82:16:f0:6d:f9:22:
                    a6:8f:2c:af:f1:ac:a8:14:80:d6:95:d3:d0:2a:9b:
                    bb:61:e0:3d:5d:f9:6a:48:51:9c:d8:73:ec:72:89:
                    13:50:22:64:83:b5:de:8b:1b:4a:b0:93:20:3b:55:
                    af:d9:93:29:34:26:84:ae:a8:2a:2a:4b:c2:23:99:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AB:B9:1E:89:F9:EA:4A:68:5F:81:CC:34:B3:6B:B9:B8:BA:A1:11
            X509v3 Authority Key Identifier:
                keyid:ED:85:04:83:CC:E1:33:7B:1C:6C:2F:DD:EA:9C:5D:BB:4A:7E:19:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YUEg8zhM3scbC_d6pxdu0p-GRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/57ffc5-584f-4bfa-ab85-b9153b3320c1/1/7YUEg8zhM3scbC_d6pxdu0p-GRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:9f:21:ab:13:82:bb:8b:5d:40:14:30:74:aa:8b:44:71:2e:
         e6:bd:6e:85:aa:0d:e5:59:0e:6d:e0:a1:ef:5a:c6:e9:d6:e4:
         97:a6:0c:dd:ef:e2:21:89:95:e5:61:c2:84:b7:6a:d3:da:c2:
         ab:4f:98:a2:b2:f3:f6:28:a3:30:1c:3b:7d:14:72:b7:da:60:
         4e:c0:ad:e7:bc:68:0c:62:9f:93:6b:1f:e1:6c:5d:5d:94:af:
         7b:f2:38:93:dc:5d:06:1b:f4:03:da:01:0d:33:f5:19:71:45:
         1a:e3:aa:e3:de:b1:de:c6:c5:37:c7:07:86:1a:20:ea:d8:10:
         64:fd:e1:45:ea:4c:05:f3:a3:53:49:1e:30:cc:2c:1e:71:ba:
         a3:5f:ce:3d:c5:cb:ef:47:f1:bf:2a:cf:5b:8f:94:5b:27:42:
         c2:12:c6:4f:28:c3:92:a4:a2:92:92:ad:ce:cf:b8:05:03:4c:
         14:a0:15:fb:6e:23:ed:80:8f:8b:ca:7c:84:cb:2a:ca:5c:b2:
         59:06:37:e6:bc:10:9f:29:ec:0b:ea:f4:05:52:f6:9b:f1:38:
         4c:cc:d8:ec:b1:8a:4e:fd:ce:bd:e9:19:56:4a:c6:23:70:23:
         f2:ff:04:16:17:68:66:f8:77:28:6c:c0:24:86:bb:6a:f2:88:
         e8:ec:ec:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:26 2025 by rpki-client